cfe7625ff022253fd79d68ecb6989045447186158c8bf8e29afb1587c254ee14008e81f18c0132b13f2e9cdee5da522812594dd30a24e4a30b6daa9b0849f318dd8b2972a991b26cffa40c89b1e46f060d1928ac32c58abe65a25cee952deeff33ef513ce0cd3b6e47ddd56c09da3c224fd3e79353e10de86b7fa21a018fc21adc92e74dbf7e2ed7085ba9bedcce95ced919848cd4b6c4b74545618e4584052275b40f5e28fc656f9b5223573b11c22be8412c97fee6888808c0f9d26be01f09553709a80dc0f88ed5f26e08a412", 0xdc}], 0x4}], 0x2, 0x804)

23:35:32 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x10000, 0x40)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000640)={{0x3, 0x3, 0x0, 0x3, 0x6}, 0x8, 0x81})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000006c0)=[{0x4, 0x2}, {0x2, 0x4}, {0x3}, {0x3, 0x1}, {0xe}], 0x5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f000039a000)=[{0x34, 0x0, 0x0, 0x1}, {0x6}]}, 0x10)
recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/41, 0x29}, {&(0x7f0000000100)=""/135, 0x87}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f00000002c0)=""/183, 0xb7}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000380)=""/140, 0x8c}], 0x7, &(0x7f00000004c0)=""/213, 0xd5}, 0x1)
sendmmsg(r2, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@can, 0x80, &(0x7f0000001840)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0)

23:35:32 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
tkill(r2, 0x13)
recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000001280)=""/20, 0xffffffffffffff29, 0x8}, 0x2)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000776000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:32 executing program 2:
r0 = socket(0x3, 0x10003, 0xfffffffffffffffe)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

23:35:32 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800000000800000)
socket$netlink(0x10, 0x3, 0x14)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f00000000c0)="290000002000190f00003fffffffda060200000d000a00ea1100000005000000000000000000000000ee8581534023f079e0f299b5b3d47e2aad245a930db3e20359182e0bcef27d0b3ed4ff9842ebb42847ee77cda49cb776d39738c41353e344779f33cc5055029c58df", 0xffffffe0}], 0x1)

23:35:32 executing program 2:
r0 = socket(0x16, 0x5, 0x80000000000000)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
ioctl$sock_ifreq(r0, 0x8bf0, &(0x7f0000000000)={'team0\x00', @ifru_addrs=@ipx={0x4, 0x8, 0x10000, "461d29188f13", 0x8}})

23:35:32 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0)
timerfd_settime(r0, 0x351c6702c73c6ccf, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0))
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000480))

[  390.533566] binder: undelivered TRANSACTION_COMPLETE
[  390.539294] binder: undelivered TRANSACTION_ERROR: 29189
[  390.559954] binder: undelivered TRANSACTION_ERROR: 29201
23:35:32 executing program 0:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040))
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x4d7481a0c793d7dc, 0x0)
ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000180))
r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
fcntl$getownex(r1, 0x10, &(0x7f0000000100))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  390.818470] binder: undelivered TRANSACTION_ERROR: 29201
[  390.848704] binder: 25687:25688 ERROR: BC_REGISTER_LOOPER called without request
[  390.894671] binder: 25687:25689 got reply transaction with no transaction stack
[  390.902171] binder: 25687:25689 transaction failed 29201/-71, size 80-8 line 2922
23:35:33 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = getuid()
sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000000000)=@newpolicy={0x1150, 0x13, 0x400, 0x70bd26, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x4e21, 0x43, 0x4e22, 0x8, 0x2, 0xa0, 0xa0, 0x21, 0x0, r1}, {0x9, 0x3, 0x2, 0x1, 0x4, 0x33, 0x3ff, 0xffffffffffffff80}, {0x0, 0x10001, 0xfff, 0x80000001}, 0x7, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, [@algo_aead={0x104c, 0x12, {{'aegis128l\x00'}, 0x8000, 0x80, "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"}}, @algo_auth={0x4c, 0x1, {{'crc32\x00'}, 0x20, "4e509530"}}]}, 0x1376}}, 0x0)
getrlimit(0x4, &(0x7f0000001200))

23:35:33 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mlockall(0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$setendian(0x14, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00')
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x80000001, 0x2, {0x2, 0x3, 0x7, 0x0, 0x2}})
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/232)
ioctl$RTC_PIE_OFF(r2, 0x7006)
sendfile(r0, r2, &(0x7f0000000040)=0x1fe, 0x2000020)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8)
setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x81, {{0x2, 0x4e21, @rand_addr=0x6}}}, 0x88)

23:35:33 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x4, {0xa, 0x4e22, 0x3, @local, 0x80000000}}}, 0x80)
socket$unix(0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:33 executing program 0:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4)
write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'eth1\x00'})
dup2(r0, r1)

23:35:33 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x3c, 0x1c, 0x2, 0x8, 0x1, 0x40, 0x2, 0xfa})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
prctl$seccomp(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]})
getpeername(r1, &(0x7f0000000140)=@can, &(0x7f0000000080)=0x80)
getrusage(0x0, &(0x7f00000001c0))

23:35:33 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
read(r1, &(0x7f0000000200)=""/28, 0x1c)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x84)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000180))
getuid()
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240))
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0))
getuid()
getgid()
sendmsg$netlink(r2, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x44}, 0x0)
r3 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="9334ffed8d80dd7724d3df2853a60b28862702", 0x13, 0xfffffffffffffff8)
keyctl$set_timeout(0xf, r3, 0x6e)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000003c0)={0xbf})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000480)={0x0, 0x0, 0x0, "717565756531000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"})
ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000540)={0x4, 0x4, {0x57, 0xbc0, 0x0, {0x9, 0xfffffffffffff801}, {0x474}, @rumble={0x0, 0x8}}, {0x56, 0x1, 0x0, {0x10001, 0x9}, {0xafe, 0x5}, @rumble={0x800, 0x7}}})
r4 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000013)

23:35:33 executing program 2:
r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40, 0x0)
close(r0)
r1 = syz_open_dev$loop(&(0x7f0000001380)='/dev/loop#\x00', 0x0, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x4000)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
sendfile(r1, r2, &(0x7f0000000040), 0xfffffffffffff6db)
ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)

23:35:33 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @remote}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8)
ioprio_set$uid(0x3, r1, 0x0)

23:35:33 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200000, 0xb3)
epoll_wait(r0, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x4, 0x800)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000080)={0x68, 0x29, 0x1, {0x8, [{{0x20, 0x0, 0x6}, 0x1, 0x40, 0x7, './file0'}, {{0x4, 0x4, 0x8}, 0x7, 0xd24, 0x7, './file0'}, {{0x8, 0x4, 0x1}, 0x7f, 0x4, 0x7, './file0'}]}}, 0x68)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00')
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r3)
r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fallocate(r4, 0x0, 0x0, 0x9288)
request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)='/dev/keychord\x00', 0xfffffffffffffffd)
write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
fallocate(r4, 0x3, 0x7fff, 0x8001)
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000100))
finit_module(r3, &(0x7f0000000140)='.[\x00', 0x0)

[  391.650089] binder: undelivered TRANSACTION_ERROR: 29201
23:35:35 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r1 = socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x2000)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001300)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8)
bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0xfff, 0x6, @dev={[], 0x18}}, 0x14)

23:35:35 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002000190f000a3fffffffda060200000000e80001041100040d000a00ea1100000005000000fe2fadc9ce768abb0bb9f9c70b9205e2eae0ce04f10cbfd5ab121be8f56d9311b0ff9ddbb5ecd9f64d76148deac07174924fc7102c99c838ccbaa3c0c4684b5bd91621c39e3a198144801c0368799c8fa5f2edfa27dc39cbd071370090c7713fec7773e346a337744a4af0434a81351d1d37b2aec9003b7858d61135f8f2187a4f2edd2dde102a86c06941f611b9f15ea51ac0dd17a2f4d2959e993db50edf990dfc4a7184251656df07615c6f71b70e39a6f2f896", 0xde}], 0x1)

23:35:35 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/relabel\x00', 0x2, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
fallocate(r1, 0x1, 0xffffffff, 0x224)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000140))

23:35:35 executing program 6:
gettid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="93924ccf673c07ab5a5d3911b93aa27c9fb3473a0fa7de8b63ef7bba85970c1a84c873c90a89421dc68455518df76e526195a05c54f0e74904d7b1072d6e0c90dda8bb2c0038b24eafba97b683844b254e33454f74b6107b35d30d5bf4b64d33d1c231aa60b1248ac1fe29b15d615150299ada9cc78e17f6a50411a42d4387897e1df8772edd6b3657429b99c019c5c8e4180d8197f621a0b31d4cef0f1c08cb2ee53ac99aa1ed4e105f3c7e5285a894756eb164398f1d5aa6cf87a9a12a19c8ecc37944ead812c639e9bf683ebffa15bee993faa5270184adc2bc97a5ecfb", 0xdf, 0xfffffffffffffff8)
r1 = socket$unix(0x1, 0x805, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x2)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/protocols\x00')
fgetxattr(r3, &(0x7f0000000240)=@known='system.posix_acl_default\x00', &(0x7f00000002c0)=""/2, 0x2)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=<r4=>0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$setown(r3, 0x8, r4)

23:35:35 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x8}, 0x13)
r1 = gettid()
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0xa8100, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x236, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
clone(0x0, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0))
timer_create(0x0, &(0x7f0000044000)={0x0, 0x15, 0x1, @tid=r1}, &(0x7f0000000240))
sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)
preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/207, 0xcf}, {&(0x7f0000000680)=""/235, 0xeb}], 0x5, 0x0)
set_robust_list(&(0x7f00000003c0)={&(0x7f0000000340)={&(0x7f0000000300)}, 0x1, &(0x7f0000000380)}, 0x18)

23:35:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:35 executing program 1:
prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sync()
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000080)="7e5f952dd2e03c09c98b4cb4850fbc527666995c62b288d3fd6b939cf1f92588d78695ad4b735380fc7167f5241e29"})

23:35:35 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082)
r1 = memfd_create(&(0x7f0000000840)="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", 0x3)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0)
fcntl$addseals(r1, 0x409, 0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
fcntl$setstatus(r0, 0x4, 0x4400)

[  393.570188] binder: 25742:25743 ERROR: BC_REGISTER_LOOPER called without request
23:35:35 executing program 3:
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000))
tee(r0, r0, 0x3fe, 0x91ed9de106e87462)

23:35:35 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
fchdir(r1)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
unlink(&(0x7f0000001700)='./file0\x00')
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
fcntl$setlease(r3, 0x400, 0x1)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000240))
ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f0000000080))
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e23, 0x80000000000000, @dev={0xfe, 0x80, [], 0xb}, 0x6}, {0xa, 0x4e20, 0xffffffff, @remote, 0x6a2}, 0x4, [0xffffffffffffff80, 0x3, 0x100000001, 0x3, 0x4, 0x6, 0x6, 0x27c7]}, 0x5c)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x7ff}, 'port0\x00', 0x1, 0x50022, 0x1, 0x800, 0x2, 0x0, 0x3, 0x0, 0x2, 0x1})

[  393.634269] binder: 25742:25759 got reply transaction with no transaction stack
[  393.642452] binder: 25742:25759 transaction failed 29201/-71, size 80-8 line 2922
23:35:35 executing program 3:
r0 = socket$packet(0x11, 0x20000000002, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', <r1=>0x0})
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RLCREATE(r2, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x2b, 0x1, 0x7}}}, 0x18)
sendto$packet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)

23:35:35 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_1\x00', 0x10)
r2 = memfd_create(&(0x7f0000000040)="237d00d3fc1efab01c240446771fbaa0a455c946301fb3b37eac0d503abe4d", 0x0)
ftruncate(r2, 0x40001)
sendfile(r1, r2, &(0x7f0000000580), 0x7ff6)
lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="75fc1efab01c240446771fbaa0a455c946301fb3b37eac0d503abe4d0000000000000000"], &(0x7f0000000140)=""/33, 0x21)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00')
sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:35 executing program 6:
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000002c0)=""/236)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x7, 0x4, 0x9, 0xfffffffffffffe01, 0xffffffffcd9dec65, 0x8})

23:35:35 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
r1 = getpgid(0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000080)='stat\x00')
mq_notify(r2, &(0x7f0000000040)={0x0, 0x23, 0x0, @tid=r1})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f0000000000), 0x7ffffffe)

23:35:35 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syncfs(r0)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@delpolicy={0x5c, 0x14, 0x131, 0x0, 0x0, {{@in6=@mcast2, @in6=@local}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x0)

23:35:35 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80800, 0x0)
write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  393.808206] audit: type=1404 audit(1534808135.909:13): enforcing=903 old_enforcing=0 auid=4294967295 ses=4294967295
23:35:36 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040)=0x253, 0x4)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @loopback}, {0x0, @broadcast}, 0x6, {0x2, 0x4e23, @local}, 'bond_slave_0\x00'})
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080)={0xa, 0x1, 0x200, 0x4}, 0xa)

23:35:36 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fsync(r1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
fallocate(r1, 0x1, 0x8000, 0x4003ff)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfffffda5)
fallocate(r1, 0x3, 0x0, 0x8001)

[  394.373993] binder: undelivered TRANSACTION_ERROR: 29201
23:35:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
close(r2)

23:35:36 executing program 7:
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x48000)
write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000017010007002e2f668e6c6530"], 0x10)
fcntl$dupfd(r0, 0x406, r1)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  394.627679] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket
[  394.721477] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket
23:35:38 executing program 2:
r0 = socket$inet(0x2, 0x4, 0x800)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040))
ioctl$RTC_PIE_ON(r1, 0x7005)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x5)

23:35:38 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000001200)='./file0\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=ANY=[], 0xfffffcf6)
creat(&(0x7f00000001c0)='./file0\x00', 0x1002000000000)
lseek(r1, 0x0, 0x3)
linkat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

23:35:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:38 executing program 6:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x4042, 0x0)
r1 = accept4(r0, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800)
gettid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f0000000200)=0xc)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000540)={@local, @remote}, &(0x7f0000000580)=0xc)
connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e22}, 0x10)
r3 = syz_open_procfs(r2, &(0x7f00000000c0)="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")
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000680)={0x2, 0x0, [0x0, 0x0]})
accept4(r1, &(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000500)=0x80, 0x80000)
ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000003c0))
accept4(r1, &(0x7f0000000400)=@rc, &(0x7f0000000380)=0x80, 0x80800)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2})

23:35:38 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r1=>0x0, <r2=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{r1, r2+10000000}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:38 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r0, 0x80000)
write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x400, 0x0, 0x7, 0x2, 0x3, 0x0, 0x2bc, 0x38, 0x38a, 0x9, 0x2c, 0x20, 0x2, 0xfff, 0x16c, 0x7fffffff}, [{0x70000003, 0x9, 0x1, 0x7, 0x3, 0x3ff, 0x3ff, 0xffffffffffff0a90}, {0x2, 0x400, 0xffff, 0x4, 0x8, 0x7, 0x9, 0xfffffffffffffff8}], "d8451b174caa"}, 0x7e)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2625)
r3 = socket(0x8, 0x3, 0xab2)
setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@empty, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x1f}}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:38 executing program 3:
socket$packet(0x11, 0x3, 0x300)
r0 = socket(0x2000000011, 0x2, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x80)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080))
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x6, 0x4)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x0, 0x5, @ipv4={[], [], @remote}}, 0x1c)

23:35:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000008c0)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7")
socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(r0, r0, &(0x7f00000002c0)=0x202, 0xd9)

23:35:38 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, <r1=>0x0})
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000140))
ptrace$setopts(0x4206, r1, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x7fffffff)
rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000040)={0x0, 0x0, 0xffeffffffffffffc})
ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000280)="c142c371d6075a661f16bb698b486e36c7ff4a678d2d8e4edba87e3a1f03150f0e3bed84f50ad659542b9689090f7d9e02acab40aa6e2fd6f255946a943675028dac99580d7ced6812dd3301f2c8e23458a02a53374670bb399ecfde0080d7489b8be9b0da55a5d7be26acc50556db2b50e55e00a722f7858214da3df9da9e200b5b08a9899c2f5b244987b5d50f5b09bb6ed5f4c839416fefa57bd8026454118520d0da3e14c729a6bd6b1d929cbd24b99266f0859934badd7350512a62c999946f2bbf74d899454f3b8c22be1bc5c82a2cc70402b833da33e51d54c5e71369b56028e790cd80ab5e88e1f7961b434bb15caf90ff434a4f5c950f0c2b50996e6df550a6dacf6fed40b65ba606eeb167ebcb5d7412bc225da99c10be7bb968c2502c582f79b62e4b2018580c3ea47d96212a5f34e0981febb5f5decc56b6927a44d7f41893646b15eb6147bab30c748bb36589604f04bbfe06dbecdd0cc9dfc55311081f977541ff6ca5d5a5b8f28356284c3e273c5cff4b6b2f3a286a0aa78d10815aead5a45aa3be0cb9bbbbc68dc848259d829c8a5f719c6e3d5ff000b81df3e31708ed4a8d29f668807eeafb9ab7f9bc3420945d9acfb85fdba407a96ad4272dffb2498e34d0f356a0d0544810ceebcfee56a90aa5d91993ba231caf13c78ba50586b70b90ad9e8deeb5c458b712ba65ec3fc72386a6b0674f459186d7e6c3d225cd5e05108dfde81179f1416a96eef065ebb8a514237d4b3f67b7495e53e7b1e2f7393bd0349a024c7b9426626ac01ca0d221e319764db3d82a2781b52306c8eb7ae83807d22a81f46cb01e4891d4b67f2c48a011a698423bcc8d0a5335ce77d76067a96ada14c14478267bffa7", 0x270})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000000c0)=0x80000001, 0x4)
close(r2)
fdatasync(r0)

23:35:38 executing program 2:
r0 = gettid()
r1 = inotify_init1(0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
readv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1)
futex(&(0x7f0000000000)=0x2, 0x4, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40, 0x0)
close(r1)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
tkill(r0, 0x1000000000016)

[  396.598952] binder: 25846:25852 ERROR: BC_REGISTER_LOOPER called without request
23:35:38 executing program 1:
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x20000)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r1, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$setfpexc(0xc, 0x100000)

[  396.651778] binder: 25846:25866 got reply transaction with no transaction stack
[  396.677485] binder: 25846:25866 transaction failed 29201/-71, size 80-8 line 2922
23:35:38 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0a85320, &(0x7f0000000280)={0x80})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))

23:35:38 executing program 2:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4))
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f0000024000)={0xfffffffffffffffe}, 0x0, 0x8)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
r4 = socket$inet6(0xa, 0x1000000000002, 0x10000000000)
ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r5 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setlease(r5, 0x400, 0x1)
rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file0\x00')
timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r2}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000046fe0)={{}, {0x0, 0x9}}, &(0x7f0000046000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f000001dff4)={0x40000001})
poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0)

23:35:38 executing program 3:
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sw_sync\x00', 0x80000, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080))
capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f00008e7000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r2=>0x0)
ioprio_set$pid(0x2, r2, 0x7)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200), 0x6a)

23:35:38 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x200})
read(r0, &(0x7f0000000180)=""/11, 0xb)
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x103402, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
r3 = syz_open_pts(r0, 0x0)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200))
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000014c0)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[]], 0x0, 0x0, &(0x7f00000004c0)})
dup2(r2, r3)

23:35:39 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @broadcast}, &(0x7f0000000280)=0x10, 0x800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', <r2=>0x0})
fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, <r3=>0x0})
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=<r4=>0x0)
tgkill(r3, r4, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
inotify_init1(0x800)
r6 = gettid()
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x20000, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00eeff0000000000e0ffaa08373a00000000000000", @ANYRES32=r6], 0x28}}, 0x0)

[  396.938668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
23:35:39 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
tkill(r1, 0x18)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  397.076254] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'.
[  397.405490] binder: undelivered TRANSACTION_ERROR: 29201
23:35:39 executing program 0:
r0 = socket$inet6(0xa, 0x80800, 0x6)
ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070")
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioprio_set$uid(0x3, r1, 0x6)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000240)={0xf, 0x1f, 0x1, 0x5}, 0xf)
listen(r0, 0x7)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001c00010100000000000000000700000046c28834ec00080099a8"], 0x1c}}, 0x0)
ioctl(r3, 0x6, &(0x7f00000002c0)="e0dfe3493a404690beeeb2715e42964c460ff9f85d1d2a09eea8f0654e4599a8753aba3fdd0dbf9f48fa32c45dfc9a81e5e730b4f96066bb16e36d6ceab5c20181eb0c3527c53761276f53fefa053daac9a4fc309e7e45acd2a2123c21746d7ca594")
r4 = fcntl$getown(r2, 0x9)
sched_getparam(r4, &(0x7f0000000280))

23:35:39 executing program 3:
r0 = inotify_init1(0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/1, 0x1}, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=<r1=>0x0)
r2 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80, 0x800)
getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
fcntl$setown(r0, 0x8, r1)
fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
ptrace$setopts(0x4206, r3, 0x0, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$selinux_create(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6ff06a6563745f723a6d6f756e745f746d705f743a7300006e66697365645f753a73797374656d5f720d696e736d6f645f743a73302d73303a63302e633130323320303030300100008000000000303030303030303820212f66696c65300000000000"], 0x6c)
ptrace(0x4207, r3)
ptrace$getregs(0x2, r3, 0x400000000072fffd, &(0x7f00000002c0)=""/38)

23:35:39 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = getpgid(0x0)
ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/76, 0x4c})
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="9c"], 0x1)
fcntl$setstatus(r1, 0x4, 0x6100)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e22, 0x116, @loopback, 0x8}, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, 0xffffffffffff7fff, [0x0, 0xaeab, 0x0, 0x100000000, 0x6, 0xb73, 0x3, 0xff]}, 0x5c)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
write$P9_RLOPEN(r1, &(0x7f0000000240)={0x18}, 0x18)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x10000, 0x0)
read$eventfd(r3, &(0x7f0000000080), 0x8)

23:35:39 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r2 = perf_event_open(&(0x7f0000001400)={0x0, 0x70, 0x10000, 0xe6b, 0x135, 0xff, 0x0, 0x40, 0x480, 0x1, 0x78, 0xffff, 0xfffffffffffffffa, 0x55, 0x3, 0x7, 0x2000000000000, 0x4, 0x6, 0xfff, 0x0, 0x1, 0x6, 0x345, 0x6, 0x900, 0x5, 0x81, 0x6, 0x6, 0x91, 0x3, 0x10001, 0x3, 0xffff, 0x86, 0x7, 0x81, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000000200), 0x1}, 0x4, 0x4, 0x400, 0x1, 0x4, 0x9, 0x8001}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1)
r3 = getpid()
r4 = getuid()
fstat(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$unix(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000000)="b41fa36f9416f0", 0x7}, {&(0x7f0000001300)="4859445ecd8eb644ff870ef8ae5255905c20f950f74f20414667a192324268e6da3265915a8430fd845ef1d2948457e17e674fefa40c9426f0a240ceebb59ec14a76b8c3c5939e52621d49c42d8e8ee53e7b60607ae483a61687c352ec29788af81b3d79caf45ff9b5166ddc25630781079b2fa74634df6fc33d601371ece568fb37bd055313032e35632e4c91a106e30a6b68ce0646f43b4205e3b6b836d2a88cd704492650bbed8a9bbaa8b53eda516448745a2f8cd8195201f8f54a77408e87cbef16663fc37454ed9d6d85831c01de40637d91bf3cdaaa167a3d04d707492a87e2a50a81bd09efa02bc611f73d227ead45a9", 0xf4}], 0x2, &(0x7f0000001600)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000030000000000000000100000001000000bb6c4f6b6c89bf9e7e8e7e649584373d3b13", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x8000}, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:39 executing program 6:
r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
write$binfmt_misc(r0, &(0x7f00000002c0)={'syz1', "1f354917c25860864c0b4a88d1e14e8db812b4da3f95990b1cb6e13812c5b1eb1b96a754092e8819b4b71bf093a6d90724e1322ec57d7bc142f7ceae64c1c8e6dc882fbf9c710d139f050153a7f99872f1f48162834df895f3ec9568156e4c6d966553b65ba5d4d2ff9bd8c14ece8c10065f92a20807c5253728cd5a74af5737dbb45f379c49e597231f4ada28858589b76b5fc52693f3b150b527"}, 0x9f)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:39 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:39 executing program 2:
r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x80, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'lp\x00'}, {0x20, 'lp\x00'}, {0x20, 'lp\x00'}, {}, {0x20, 'lp\x00'}], 0xa, "55b582a29c514459a142c5fde4f836fe7293643dcb73cb10e145d2f859e4a11fa7bbcdb1712b5c4ffd6c80f116833d880bb767da1f4ac16ba586dbf35242a740cc6ddcc2b05792ed11d2dc8293070b5f090ca2cd354c3ca99b10db"}, 0x7f)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x78)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'bcsf0\x00', 0x3}, 0x18)
readahead(r1, 0x81, 0x1137)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000073, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3)
bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e23, @broadcast}, 0x53)
sendto$inet(r1, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)

[  397.688695] binder: 25940:25948 ERROR: BC_REGISTER_LOOPER called without request
23:35:39 executing program 1:
r0 = geteuid()
setuid(r0)
gettid()
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x3, 0x1}})
unshare(0x8020400)
exit(0x0)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="30f19efced31a46d1e4f4561e888f9504426bc0c9253b07e1ab8ef5b99e4c76d81d240dddcb42a551984671b8fb0580467f12ed9f032a809f703e8e301d7563f07c5b856d518089cd3ab2be9eaeff8b33ef6d8b0c9e659ad8a3c42cdd7c946464e770eb4e6556b535ea9da520832a5fcd0c4afeea4b6b81ce390d28b07005d757591bfc47b35e8d7223631a963f643ebff191958a018dc32d045a56bf49db34d691f3ce476931884dd5680a3989a3c52599194cf4478aedf39dc99d3516feb5123340f9a9271aed5d876c565", &(0x7f0000000000)="ba1814b4fcd4353b0ad3213798f27b8b4b7c757f5c1e95"}}, &(0x7f00000001c0)=<r2=>0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000240)={{r3, r4+10000000}}, &(0x7f0000000280))

[  397.733384] IPVS: stopping backup sync thread 18578 ...
[  397.742113] binder: 25940:25957 got reply transaction with no transaction stack
[  397.752441] PF_BRIDGE: RTM_NEWNEIGH with unknown ifindex
[  397.763958] binder: 25940:25957 transaction failed 29201/-71, size 80-8 line 2922
23:35:39 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000280)=""/222)
getsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

23:35:39 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="1a8c19905911de814dbd7e2176990ea0a395c9b17b6c6bbd152db795ca5bf8cda68861a58cc3a5b6abde4cb9ef8deb1860e1fc671c5632b8bfa69f4a71014f")
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000))
ioctl$TIOCSBRK(r1, 0x40044591)
dup2(r0, r1)

[  397.810576] PF_BRIDGE: RTM_NEWNEIGH with unknown ifindex
23:35:39 executing program 2:
seccomp(0x1, 0x1, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x7, 0x5, 0x5491}, {0x4, 0x9, 0x8df, 0x304}, {0x2, 0xfffffffffffffffe, 0x80, 0x2}, {0x6, 0x40, 0x101, 0x400}, {0x4, 0x1, 0x1, 0x7}]})
seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x7}, {0x6}]})

23:35:40 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x31, 0x6, @tid=0xffffffffffffffff}, &(0x7f00000000c0))
timer_create(0x7, &(0x7f0000000100)={0x0, 0x16}, &(0x7f0000000140))
timer_create(0x0, &(0x7f0000000200)={0x0, 0x29, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000240)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000001300)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0xfffffffffffffffd, &(0x7f0000001340)={{r2, r3+10000000}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:40 executing program 6:
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:40 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x10002, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf0f0}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000440)=0x7, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000004ac0)="7e1256e0f56ef3025d64703bdb90f623f690483a96b4f11f8a8513a8bc2211d96aec1a19bc9d5733607eabedfc6b101edd91175086da764fe27472c9b1eea3c70b66a7e42357ba8240d0dafb8e085173b4413ff0be30dad97f52c8b2c52e88321625ac82c3287ac7c86487becc9512caf8cf7a6a376367555448a35d45c8e85794f10c61fd5b818eb349bbac8fcc490772ea5033dcd0e442f69f86bb58a063318818a1fa7f9d37b97e5362638969a3147b7e1015f2c23db355438401105048568c90a1bcafab9b8d0e47921c8e8f50d1383f1cfdd8062dd0a12a66b630c783fde23dfc50984f653c7ab43097e2de95a8c1442b152a65c60bcb2230a6e24f5ca4c3935a88fdd44e1462f9d4379fb2170c34147037b6db8969e5b8dbb4587a7382f52bb041622980045e87b92e0a1254a5b1859a6c79805d0a4319a2d8f50a51cfd3f7e03a4e55bf94f808273439c2f166173a90a972512d79132df312fdf44d1f65fd635c2d9d9efcfa8314afad49cfbe11c156ef17eaa721dc286cf9866b223f4feb3d776d1a2440d0a6ff48d8e4f533ccdbde910d5781a39969d386d04495de464792464b7eb5acb499dd3491389b40733c49e83661f45c563ad8ee130442b2db38bfde99e22ef27683e2ad68dea1f398abf2ceb5b2cc298c74748939f2fc8b6e3a8c6518c9c3462976f365351d168b6768bdc4e276b1a1f37e4a035fb9057e0b1f1e91f6bc3c0968e8a443a8676c050f3da4afa3cccffbed16f945352d8c41b20ce86595f8d2eec7b276c8a50fbc658f78a82dd6fdcbf22d9ae8e18dba0211f462ca04f64edadf108dbc9755f1f49fd071c6d509c0f762514503d4f6377370796e1b861766538ade8368cfa3f31844b0ad38fa111fbd29820d2bd0d1be223aab2cda138d6e1e07a088156865968a00d1663cc452e36a06b4426fb1377bac019a74bf02e8c7dac2737364628e22b74a2085385077265835ff7c4ca363196bb26520bf0d11b128bcc0def9a48425cf3b8256a3f6410038823b1ae12775503635e4a40def2a37417f724820035682f96e76bf6e6936fd0bb9e5b0314c06984f9ea309633d61193030f555e1d36c02ce81fc1b3511543370914cece9b493f0bef995b0fa535a3e59de437f3387d485fec481ce0ac16cc3c974192d68a78f290c9ea38cc9407c3b3a46a65d31cbc02362c4562078f46abc5aa60141339fe6b295b7332bfac3aa58d55a5b267da2870d43a885e9a5d161a1cf3843b938c04917750d7061ef9a2491231bb03c3b36e22564d4c046985494eb79612143610b73b6655ef7b1a08a1a1178620fdc76a87429e2c33b2a1d32531641edf067866156dc421c4783e266ed152252b8132bfaec32d87d74bc0fd7f7b8d205e42dd87f10a6651e26bfcd1010654008283a63b90c6a840211c3361a47abdadbe945cef147eb613fb60806b9e7ecaac053c3e4c285a1d8c3dbecf19a9e5676876acd44f5d8aeb4aababbf9cef48226e6152e99529335e457a4887faf062667e552b8096c79d1116cff0e34228b2f09f2ea0d939ec4a5b474076050abb72edd2dc4f0609185c6a16ee375b26eb1a6c5c28ea584dc0653b8a5f4d8da9d907954c271546bb2cf134ff5b56d4f3bc9349097ebb982ddd0067d0585188ec598f08351b5991dc9f1e53759368a4b8fa36eca8aeedddab7fc675636cfbd87aa4b1174caa712b16ce0e7995b3256b13498a7a0207158362a546e21f2c9807ef385aa3ea45fe4e4fdb80e6d83a94ed09d4616c0728dfa963d169ba7368463831ff47a6cf54a98eb9a35b86c1e77d1c51fe2216d4e4e4da85c14fe3581c5ef587de04021a93c9f6748dcf1543ee39afa034bc61236666472c81aa7e937005db13bce2c046101f6560fa3c96ac8fcb278a9e748a6da2d", 0x549, 0x0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100)

[  397.913865] audit: type=1326 audit(1534808140.009:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=25980 comm="syz-executor2" exe="/root/syz-executor2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0
23:35:40 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00')
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3)

23:35:40 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
ioctl(r0, 0x9, &(0x7f0000000140)="0a9cc0edf727f842da258d2c0b8f9dc43d7401b343cb99b74a29baa7de82aed09e4a950121e478feb3b4ebba4921371ccef0cc33b997f39e66b4e6c629f1f3604ea2c3c2f8008b42b877e52408ebf6f63377a2e4166f44c6b64c7cce635b44cb01eef21a24a39546973f43eb97f924a0af86598fcff58e481d1cb714fc23e32317755b9ad6078dd342ef1c166d7b321fbb79311f08764aef47391a0970e3c221245d9b32f4521b9f626d2e2b9db3dd98612ea12beb9e8ce93531dec5264c7fc6b6b444dd7f7ffe404dfe549884dcd013ddd556938fa789181427bd44dfac2ad7e23b1a844e2df0a8f4fa16326df10240c1a9e2c4")
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001})
ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000000000000ffe6ffffff7fd7b58e"])

23:35:40 executing program 2:
capget(&(0x7f0000008ffb)={0x20080522}, &(0x7f0000009000)={0x800004})
r0 = creat(&(0x7f0000000180)='./file1\x00', 0x80)
getsockname(r0, &(0x7f0000000040)=@hci={0x1f, <r1=>0x0}, &(0x7f00000000c0)=0x1f)
setsockopt$inet6_mreq(r0, 0x29, 0xd657c672c687eae1, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x13}, r1}, 0x14)

23:35:40 executing program 2:
r0 = socket(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="f3ff726ba9f85329aa2f7f84840e3bfccc8e0aca4e1bd5f685e69e582ca5443cfd260d9d123826616b19c3fcfd9061f33c54313f215024ce334e78a69ff2048e7ec9f3f84da89f66d5b55f3fd75816ad895291e1eb38875cdeffd1108655093d6e216dc4b7a7cc18b17bb3bf")
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
getdents(r1, &(0x7f0000000200)=""/143, 0x29)
getdents(r1, &(0x7f0000000080)=""/71, 0x47)
getdents(r1, &(0x7f0000000440)=""/182, 0x115)

23:35:40 executing program 2:
unshare(0x8020000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
setns(r0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
unshare(0x40000003)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000013c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
dup2(r1, r0)
nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180))
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x7ffff, 0x0)
pipe(&(0x7f00000000c0))
writev(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000011c0)="2faea62c", 0x4}], 0x1)

23:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:40 executing program 2:
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/157, 0x2000061d}, {&(0x7f00000001c0)=""/247, 0xf7}], 0x2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/139, 0xffffff7a}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/39, 0x27}], 0x3, 0x0)
stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0))
ptrace$getenv(0x4201, r0, 0x98, &(0x7f0000000040))
sched_getparam(0x0, &(0x7f0000000780))
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r0, 0x12)

23:35:40 executing program 6:
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040))
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000400)='net/ip_tables_matches\x00')
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000080)={0x16, 0x7, 0x2, {{0x9, 'user.syz\x00'}, 0x6}}, 0x16)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000000000000002340000000"], 0xe)

23:35:40 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
connect$inet6(r0, &(0x7f0000000140), 0x1c)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x21, 0x220303)
write$P9_RLINK(r1, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r2 = getpgrp(0xffffffffffffffff)
ptrace$peek(0x2, r2, &(0x7f0000000000))

[  398.480418] binder: undelivered TRANSACTION_ERROR: 29201
[  398.525050] binder: 26036:26038 got reply transaction with no transaction stack
[  398.543098] binder: 26036:26038 transaction failed 29201/-71, size 80-8 line 2922
[  398.577576] binder: release 26036:26038 transaction 308 out, still active
[  398.596222] binder: undelivered TRANSACTION_COMPLETE
[  398.607662] binder: undelivered TRANSACTION_ERROR: 29201
[  398.615456] binder: send failed reply for transaction 308, target dead
23:35:40 executing program 6:
getpgrp(0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000540)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc)
fstat(r1, &(0x7f0000000140))

23:35:40 executing program 5:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x2)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="46570de08184ba3dba380acded1f53d7", 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x0)
setrlimit(0x2, &(0x7f0000000280)={0xffffffffffff2a61, 0xd7})
writev(r3, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:40 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
sendmsg$unix(r0, &(0x7f0000003540)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003480)=[{&(0x7f0000001300)="0b5aee8b242ad49be2be3b96fcd94a39350c2233d87f62621b51c7a78391381bf9c17f72d1f5021d354fad6740b90ae018d1dc62837f91887c435da9a639f858ff9d10843fa19c0ec82c85a5c160d3cca4b2353608b839a8a1369ba7de556e1a8d634350a0fef4b0213783f28fee75c773bc20d1264266cffd9b7025cb3fe76b41dd70a174ae76c78574e0368cd378decbba5df719760a8b0b52fdc18b06e6d6f531c40d0fbaef8e60dd845b5fc99ee68204a929599ab70315f020830ada09261a855e222e158166cb6db755e5f3cdeec80f18377960920bfcd22ceaf692e413586b6fc7cd3c1acdf3bcb2104636909f3759442d86461aef7494c22d25472544171f94cc2e0283c67ff6c52b295d7f0529ca7fd6682cc978feb4a25b10d3982f9a3e4285ff9cfe6e14bac412a8d04fcb26ce10a46cdf2e6160a9e47b78070bc2b7f36d32668805d2113a512fb9e904c4bfbed223f29bc0e6f5718bf16a787adf1097273707ac97afc5333eefdb2247e670785293483c76396ee84c76eb78c9242528faf7f4e6f649578756dc7436ac702adf5bff1fd944faffc3aff46ed0a243b602c42b7c18bd3c1405eadd3879bd0b4c387d954df5be428a85b5094921a53623d634473829729060c732690df4582ef259bc0d1b727d5fa35fcbacc7dfd0d6c298f8d7c7bf71d5383f1ecf01e6a1ea00778d7684a0bf886ef48ce27fd5409710e33c8b3d292f27b73f4aa46962a2da4431ae4d05802a35c931cc908f049f1c1893c261c498486c4a97e8b4c81d4a5ef805b2e0b6d2a772b5095e1b136254e005bd7b63128c3d22ae2eb734f23e0c37cdf2177ce39a19632decf958f715a40f1fad4af64dc637a3a4300788cbb5b1afeb33ca00b6690fb2008ddbc280143e41a7f0eb23884b5aac891b508d30f559e1f6028a7d76866f738cb530fc166d8fab0e3b649ba0bce70d2684687154419d46f5eb38cde4b5c05f73b0adc932a7944a6f8f881e9341a6df7a0e7745f8bee918f244a85b8a9ef8702cd1ecfea9f45f990c62fa31bc913a03d38396588040bd9c902090114ed24b7d273501aad6e8bd961cc4859c30732e2066f24fecab1ebcc39cb90d9525f52d4418d8c2557f7289bd60a354dc6386e7f5a38087b2845cf2672c30cb3bc257a3453e7781de46ad30a2ca67cd7f1dd19f9a2e681aa452a3018c3a4aeb01aa2d7bb1b6705cdd7c1783245761be467f6660995af21822b5771bcdda9f84b223173e3657468b185b63e54cee2db9ca9db4d7236cc59f8392d0e06410b7945703b6acbb556e97c8943bb810d56335f1057c5880addde5eae61a324e6ae05f563761a2dc7eb276d3e9ce20aedd1d2340797c658693b29f88eb7a8d04c3c122d15b0a7b14c8c68462bec2e30f41ed3b9c4181e850f882ae613455658a796762190a018c39c7837704282284739e554c0c290c0f608311133a2493f409cf9a5ad292efb6b9a51cfc980d5054e099d00045be98868e0c4b41d049d7a17b161cb06f4ee1e68a556f2c4f915433b500240893fb332cdc855c4683c5e798301a57dd5120dd5a0d8fbb4a997a923b116f76d5282bd95433f10115c5401ef2c75605afc3c6aa9c2acb2782a727549433619c01484b6c8389cd40fb5435a6c2dd52a10e6f9c44278d2dcae0b3e6e6b1e5228b1ba7e440d95bea0da38907a1738502ece0188b1fe0856da736dc008a2951fcb4d7ac1c6e05470c853b41899b7e0ce2a81ed9a9882e65136e74209d2abb35f5afe5ab1cb5b604301853b55717a4d912cb6ab222b0f47405287fc4cfc40073c6dd0303d6f20eb3be30f4cc46c6697a5fd72231c2ea6c821130db45e1b8de639957b9ee1339ce30c81c61f557f6694724412b8be4b708b25ff949ebc5a971adde104e6d0189e5b90decc7ac8f4ff0c3d69036566647b1531186071d6c827eb4f59ff40ec54ffdc000dea7f5b73755d8cb7c0cfa1d581e6d0cb4569538c9db526baae2124aad9f3faa52d907041abcc0642dd8c3a0eeb2c2004f1f410166488d4420202b413cdf56f5476f3256e872eb300d8cc5d460f290cb46ea1fa08ac5cae6c133607febb83a7885caec531b5803f18066fbc45ba45d8e989d96a56fe76d399b72bb8e81ac9b2ab3f206f07d8fcced8906e861c9700b72c7e0e8f00f27793c47bc702e7b31a252ea1365df01136b5425333a6578cf8c653504dd9b6774469782179cad2771ff34b0b9c7bf6fbda225bc2914f88f4d97f74d7f20b73a05aa3460de6d0ccc0700340d5b7e402a34ea15402a586e8dc3ac3c85f1f0cf13c38f18239d606375a8346525c02bb0608c4d4f4f7287fd7c09a3ddfd77b5460c17efa8ccc2cb93a3e62ab84e849f6cd944f16f1b1a31f43037f5afd7a16b5b37d0bce56cc0d4f6ccca371e46d3e4299a9763e4227241089b496e113fe1eac592f9e2620536b79e2994e391e00b2b3d93521bd09685f90a1b168462fa2df140e84ebaa0f2c9b16847e4729e89edd33c674d3a0e480b0fffb50fda660b66d8eda263b1570830eb293a245a191551e88963942a661c60478f0e019f4a89c713f008530f1f2cd250a96bbfdc11a0768d781a7356efb65cc125dc8d856ea9d156f17ba4b2510a6846c9ae937eaf4b02d6375c1417769e13001d00410d29b4d12a42419efac71843004b7c4082dc315137b6388d22673b545f4acff8b964406aa2e48fc426a5083d86c0ccadd1c03ef2cfabaf533c31d457a6829c56452302394a49de872201bd881bbad9ea45e1768431ba4cfba74c1bc3271ba720dcbd26643f67a74e8c02d9303790065c4a4db93599211a6ac55f6e005410bc96a097e77644f419e5bdc6b3a9d0a7aa5bc0d63c01310cfda8b2e779b569a01a0ae5c1bdcbef3985f4915a2f734c4bdf0b0521d63ebdc0608d93bfe4cd054b1ccbf0a10434f1724f2e7bec9a7cdf334849792514751b2e490c448f862796ac4ec84e74af371bfd6087adf16171ea43d277b73860afc2d48147913c58f3c90f3aba06459033f3e65ed5505f330f417c4fa394f73c1ab02b56acf21ffb53a8781a08a6b7e10fed9f2a7f25a57fd80187bccf2c691d072a11a131e9e3ce1c36150e63a41f3f5eaa0ab15a879d0f4263738a9c8b537f8079747dc89d622c16f7a97d8627cad26653457ddb13cae97b269cc3db86017e5115a0f4f49ddc75602db499aa3947c56e7ba5390a1391213993f8f6e74eee1c87e21d380b54d9e1e49d01de9f0a9878a75d69dcb98d1fa84dac356b51282c94a2f489d0e8d9b3cc707ce8954d1d4403c0034fba42f099f59c6b2edfff5cd1ad2f7284c56bff12719387fb49ccac745206b6037c04ad3658388fde91c067d7618374834a9a96f5fd7171a053acdec39e399d6438329f9a6d431d043494d41c9778bc567b883c6dbf7a9e507deeed1dbe500bb97e65cb1ff14cfc1438f61a462e6e870713806edc0141fddd14413dd53b74f9a5b65483f44b14e6e5a98c13f0211696061ec8d026b0106064b497c63f25a9c3ba137790b6a62c6273e90063581c0a1c8cd3a0434f1e49c6f6947d40c66c2035a4641b99a61afb21f9616b6b7839941a2af8753be8e8c8bc2f4e3c0b502766d0c1a55b0d1262fc9f77ec2381811caa62a9648306a9e3cf695456480f4f90d30a9cd85debb2e404018344df9bd77a9ce21dba7fa25e994aac28c47f974347f1238c6a8331b2bb423a31560aa3e8768412b3ab2feb26ecc1d9aae8768124a250bdf978dbf4c66949bc51ac58ceb4015cf9fdf2ccf28367728e39cf2435d85189eb0c85f775d6ea9eaee699f7130292da7e54c6c3f4524787f94add866bca7e496ce88fc172d04deb84d054cc799d85fd487aed4891dbe71524209fafd2a32315fdf4dc6f270335f18caf07488f0259d5d5196605968c094fa57c7c8fb7446709aa470bf946c2271fd082c5c1e65dce9632d7d64dfe68c250102f5c068baad6e49ecb847f124a2a4b3b46ccd98f8ad1a0db4d8942be392959a51cfd13ee54e770f0e085784ef025096c2c30dc4a8da0a574fe907639601311b89b2e7d266045f5411c28cd11c4982d42a30f136eb4ca2a0f5c97bf5c1297594419d160a21c90d3eeef6c394f947499f744fb11a215c697da8de2518fc137e632529ec99dd17504acb440e265e81fd2a06e392bf5e207c30eb0778509e66a7199f8b3466b660848ddfb5873fa4d8ad6658a0a445ecd4ef2cdb68226b66f41bf8cd77c328f18d7226180ad8ce2fe1f051958b473cb691ce06b787d19dde77ed3420a9ef5654e52658f537e322587d90663de7397d6e5b3ef11bdc77ad5470325fce4c4029721d1c83ce92c5941497ca835babb70f6acc16deabd9355a6c25a8aaff0de9218b433945beec41af865658bcd8f1c606c0a5f04fcc381c9c86c39eb0001a970a3b7aed649d8192a1c545b340a1a0699f560f45f203a9263b5f98c545d90df1a64951b9aebb4b7a5d1be0f36d0303d52e1bfc6f37d527373e33264dded4e8d0a6032e9d033b2ebcd0473c5386a763139a1176e58226634e240ff32cbfb65eed16f3cd32b507833a938c529a5a3f002572ee2ea1bfc892b449ae60f63814d008c68001e0bec459277ec20b9fd1038304be79075d020534d9f0f4a70ae3ee97cea4c1cf207ecf16ff2f0c7862cbadc01b1f8f828d1b9551773846c0ed2504065de62552f1fd8a17e3a4a233388f551b03da01d1f1a422932bd35295ea0c8d5698d131ac2be61c62cbb58dbb4e739b7386d95728a08aec2f45aa602b40b074a1ed4a5d414094b08bdc78bf08b096ec5c290ce724ee1ae20261892dea46c6367219143cc44932aa4b9a4aedf45c79b29696fa53536f6e774f776defb18b553ce432ba7c92fb6d303cbc163083cd10a1e2ad89701d85ecfc328252e18857ed398f3589ae60caf744a3345a6d92c746f0a785c853a66e287e83790bccf1f6dbe7451a573beb6d80a68c37ad90e7f07a87c5fa3a22f98f899cf9721392306eb50af02cd1d5c9521856035b2872f1c111c781571cd53e000b8637679d95a3920256e226d18004105cc12c911c10f43745d5b84c3abb048fcd55bc835aa8be3bf6072844056773f809bf0b515bc542f78f87d4935f730fa2e37dfe00aa3d6aff6f1d8ad9ebbe8d71a5c2df519e17f0818e97ae2f5b958c425c71383920e8f1588ee32c85ab2a03a8acada7a68610f87da261fd7173e05392f51befa60670969f5b77abc8224d9ca92e5ac8fefdb4486e544702fb03506ce2c7a55cc932d9cf43cd2b48ecd8f46d72236e9ee45798a4d8f99da31e9b98f462dea06aee83e322e89044f25ddf2a1d452973f8d094ecb05ef9dfbc7336439b1342b7ddca6ac3eec6d553586bfd68cffcbaa849d9c95ff5c706281e9a3e48bb5b787b94276b1b9fb18760a4985aea07e3179ec0daf3f02ffdc1027c55050031b3d8ef85764f7d072c4c25ee8edc4c9bc344267d3b4566389f4f790be6bd1cb485fd3e88fc55f2c026d6275679552e937e61fa7d1d0d129036ad2f38aa597e3ba917073a07985f05259584e59444ae9779cc7464ecdb642170bd99f706877d1ba7db4fc98b092bfaf50b090adeb3200c39bf67d7a523b1cf0a3acf0e751f5afe27954d90635f28f508e306344d4844a101935371c5883b9a6630295455d3fdd2785425d0180231ef6b1f7ba6b74b5fd2271d2a3ab5cc883facab26ebfcb132898bcc78eb56c04678059bee1266efc94f08537f73f3fafe90ff68b7f0d1ec0aeeacf8fd3a9cbb51a7d2f0855da8389f13b2902bafee94f", 0x1000}, {&(0x7f0000002300)="6a23ef67cfbf15830619b17cc97e5e70be5061cd380f06dc26a55172307377d71a4021018a1c5cc25504da890cd8", 0x2e}, {&(0x7f0000002340)="d9a3f95ddbc867eccdc0099a17f47c3e1fe677e635e933eaf04a9620ab2a0b4929d8f561a2a6d8e887a43a856188c865afb5dd1204f592e64df78f7cf8599902787e5edfc6e0b752556d6a115404c138a8cdf9c5a41b2c2efb7ad6881d29ea13e27b5a8fa33acdca3fa649f3e8b5faa739091258fe2c496fd82db8ca2be799419496caeff8fd7a67f15fbdc5628fabf81dd0cfd2aa7aee2d7330cc0413663278b2446ff1e4a4ddbb7d69567e90b18b4dc5c9ed925c75cac06bda048a6cdba425e1ab1a4d9d6598d020b87d18235602aa16093a3f9312d01e252fb0a33d1c7d6732b948cc597094671b45a7bacb94844e0eb917943272c13a07a481f81f6e60e52d50c7e1d8161c276ddaa1761f0b34cdb25b8d9c42677d1e7387027f4cd1ef94b5292ffc95d6676463dd574560ad2ae759519e45b1a5c215777ffb9f7d32fb8d270d9dcbd6ceb1c728b4ca44d25ce38dfa083ccab1922917263efd2f7181072f9a1d358f178e53134ea24ba659462d54e6d605002686f45f3ab247c379d9085400886257a2e7a4e5371e7b85806dffa51b34063367cab7f71ceef86d57223ffba9ad7dba04ab3e8a23f1aa1e3f2f56d525a22bc0e69386560f576f8c701f01197d280dc117a686e4f6a2f65d0e2681072877f0788d7a8c1d137dbafd3c414db3a2d175aef4903541f0c9da0d6bc016471aa17814df8208502ea9fa13bf3315dd0cefe08691c6634672fee3c1a7087e5671ac5ee6a28600ebb640846d2c3a8964d60735102633a2a7212e85eccf2aff5ab7a490ffbcaa596d7d155a20c4be1ee838bb1ed754b781e8bac9f12c12f50916cd490f28e7339007cb033ed61c2facbd31f3661893187ef7d72fd91424edbf271512046a784a78445de4c2f7d16490562ddb37a8a6fe6f7b037438a84c423eb809de9a674c35cdf1dcc69b73df1a7078247913cd141e1c0d6486004c72195be8c9a27322d630d93904f979c8482a4239518032cffbb45dc6fd594a58416bc73a2290800bee60165e11ae6d2245a867169df267e87508e27e7dd0431c8de83a6a8371a41f29e3bea971bccdee739d39c98c89925cb9bd3d86ba85288ac44a80daa6f9813dfb5c87ce207689509c4b2e5f018cfafb4b3a5721a43359a7c32ee5a06e1047c823f652c8d6d2d1c2084d9232130071ea6f501275b225cf26b5490c2ca24f4f504915f2898c3cc1119b72da3666952ae73e035afde16d7a5de251fd5e19be90a87f1037f27ed9af25e514817450440f9a40e0afdc21b52a22a4fb4ce9a7cb20e94d6813e7faff13b5db47cf65c6a6a97135fefdf6a6a70a6dcfc2a86a816143c55f3d35434c61b671cd7948f505fe328bb02a4428db509fd30f757f291057805855ef139879441dc3314ac0c8c384e723f392454e7d8d34ee90444e834aa426ceb22dfffe6d753d9b3fcce3e318012ca8ca676de19b1cdb0d1dca735e6cb84a79f040144ddd291198aac564fd02b4bb99e481407d7117d498771e5356d7f2048875d8576b9f5e3196e810e18771e3bf3b5958384392b1df3d831f95acd38c14516c78a1411ead388f59ca27181c83d5e017ad5c648870fe681a19c94ce3c57ccc6e3fef113e65dba6976bb6d3664ecfb7dc22b8592004c67f50e56e3819e144cb449a4e2df17cd6efe1c3e484a4c6a275a1cf51ceb0ec2b26aae45d9daed5ce91a4c605c9f9e47e279c7c80da5de779d6ddde340c732576db5e8da05d070a69aad6296ea10c9e4770389fccac0448ff2756c56b160cb1ec69056f02c9a75dec3459c08422141800130900bd72fd5e713aedcf3b64856dc2afb49ab4ad868b2303d9a4a072da15e423376004c5de9e87452d4e0611a6278253047200868e83c0a9f9fae0522bde3a1941de35f1493edb7a905856d53be37bbe7e237b65f91503e91f1702aaff609f53dabce8213666e9cd0ea9fe5bc64637fddad9a5ce129ec0d13c9e7b7ddb12c19ab44979cbd8dec0c706c6619345980c9ed47d0b24e4ad17f2ae2feb8e2bf1c7cecde21882398bccb41b57100152c1a28b38edef87d4f416ec8b9359de0b71fec799841bc432d9bd0d94ffc4e7367442607999da9998ee90f9e715d0b3e6224b5cf0e002f1a216a4aa8b8506905737c1ec6c8489737825314d8f69ac65162066c8b1d4d5c87051cf213256b72ac91f86d0d6b16a3ed34124d177221287c63cdf8f29fd90baacb816d32d1dcc7cc279e8f499b689141c5ff6dd3540e67f55c3ebb39dc43bc30b75a6b33b3f485edf5fcdca5d8f6280956f0c8da79056c34a797eba8a6206936726becd508cf89dc6db6dbd1d4e1b55d980dfd90d22f7dc85d7dfe2c33ed7a882cd37a4537d1cec95afaa38b907a050bedd67369f5e3101f1762ef5afb6047d07a4e8714be7727d400b2e4bee628feb0e4ddc382cbd982eae8a51fb565f060b0aa9d52e99e8f8e14e09da18e063d1ff89aea62b4d8310024c111adacc306d40e868a66d1b9f6ef0b7aca29b415f191cd3e6e1e945d9b2f80c2d27a2af50092e391a9bd31de1385c52414610ac0e72839e3fe273e8381fb10f4847224c568bc8254d1802afac2f85ac3c183e1dca5b97c51563edfd9bbfd91a09ea219365638d5c1c864da2a057f330422df1229f8ee221f7a9ff73c0615d77df73d6cb1b025fde07aaf95de3f4dc310c2933553f0f8d1e8a299772f1ffd3b2abffa41d2113faf360c60d2713349e03072be454c3c4652b4276309f34cf48cbcfc8ec17eff8e98e9957f78ef6336ce46c35ad182a1bfe930a8d07884d9172dde05e0907d684c552f81bebe22b185e75e6882bd5fc2d19a9ca7b12cd1565d4f410a48e61592ea9dd4a76adf1af17569b59b0ef57d75451edff5a559c062e99e27e7b6f7e59e152a79f9bfd4155da04baaeb960909ed8dd225007276676bf43ce5009e095c8d3a45d5b4d7772ac20562551a8c0bc26f024b7b646ff177f5f16a8f899081f20bcfdad6ac0ee72032b1611dcf656a61dd9dbb38e6a16b74f066d13960adec6f868fe34f019dc562bea2b7cfdb049873559d5a002d8221c6f6abb18109c5330e5fabb46355e56b53e6ec14d9b9f985ba736305aea3dfb4d0d928962eebac8a99087cfdbd2f5b26fe892aea7989a267b796f8e599a26ff88e5b97ee66327c00f1fbe822451d8de9481ea574d4a9e7c57232c5d4532d1290ed9079d3655c84b69ada4b0e7e06ece8fe902fa839e485e9601aaec864580160b22b008cdc94e60a55b555cf6d670a53c0e846fa510c969d20d45f0a083d8c7bad984888f0baa0fc097aae287f77ea10f5f570e4ca869e94366c75d5303879afb83af6d683f2b74f02967d88c5d23619f857016c24b93db67383c90e48f5406c725fb3744387ea5a7af4b12f54e6187f7efab59af5aa7b7ed387b063e1663011575dcf973c320fda013fd7f22b80488ce4bf517f8304fba1d8c7cbfd1aa225bf1741789cb38bc33febe35924de037e09ca501c3cb8fdfdd683773a8c784d16972d1450a8e1b6e65417dd94e95039484e27cc1eb8b0f977cff1facdc0d4de94ad093559d024cefbb9d6b1e1fbe0b3ff93d42770ba5613a1d0e2e13cff25e110d025e32cdc94c8a604d8feb3885de3c0f0d3f8f95750277678bc159e86783def9f3cd816250031ad14056d298e8bc6fbaf3d338fa6e1736800bedb053ac02094cb674334b1ef136cb437110a5a7cab0784912d94ac6192e824c457b54d8e6b2c068ce1f52953eba1234498ae42f7f8d955ca229b5e6fd980f447f8d6d63fd75c8fdb63279aab83a3d7fc0dcd9618b8ed6ad35cc014b1c84dd249037b53569b81c072d629e0f91396edad98a2a299298955f1d8b2965c18e6350d799e821b7f6ee2fa2121459d66da5d5d036a799e06128945dfdc2083e64f69a9a5379516e25b0f44d38dafb2862c862f9dbf3126ca39e893e55a238a2e54b63d49c7809fc078d07d0cbdafa602ae3ad96fdeea1e81080f6950dda66647306dabd1d45d3acdec4f4c6bd75f99cc2878649447e394062727bdd24ceadee7f72f56cb318cabae57d94fb716e503762a02db09e98341bd19936b96eb6ea674fcccded5e97eb28e1bc9bfa1ba6131579d4dea1a2712a498cefceed3ec5625fa78c1f7a392b680847486ee12ab9c1900d58a6ee621465e29e842754c47f2213a27ea3471e30dce826895a5ca23440769175068b69c31359ca58a2774424e9a36ca0a617696eba7d9960ba5b55cf61e36636139be98f37823eeededbfbc26f018d5bde51d775befde1769e70577086293b05099819763256f6f4fce965300b4be28054dfb9ad9d35c79513a0c720daf5d5e3099866e95841dca33208939769da3d921b203fc573735283523ba09bf5d5c9b483b30bb3486731c141b6b249859019c2a6332651cb238b3206d17b271b9caa1ddd138b72230ab322bf0c0616d08a5471ce417f91f64529d3f76886380375c79c5bb825e4752738eefb2b9090a98b7c0495388a09f508437fbc4f4f8ec87d30e8e3f21322e7d7c33b1ba6dc99d0f811194657420e176f2e55f95aa0e37058dfe5f0b3edc6fb8d61709b33a6694d6ff8ddbb82df41aac6193326c2cada63a4b5a1e931fb99ee4812f503e4113bcdfaf3aab6a0094d8dac4a3ba41055a67aaa3e0c1bba2b39004cd38fac6a72a28d0b066095414e4fdfea72fd225e8774c145b9bd5ade0ae23f36ca27b39eca2ce1695926baa38088a04f2f0c46451ced6dd780136352c8d8a5d49be6e14ffea8da59cb644fd72c5c216e18250e7a91ad71e8597bbc822739bd6fc114705c73b3ca01e80df17a8b956f2b97baf28be60076fa6e0207cc2f217907c61f690542ed9d767ca15979fef99153ec2db5b9a1892c6c12034ed9b6c44a577bbf5de11efc7d48ef2654970adddccc5457368c152cd132983fc9e5ef762ae808640e68108b4abf25acd24e4ad8efdc49fd6ab6daba7ec743d77f5df40a8b37b5e82065872c390a31d51b235c63a2369081d72d9dd2ccda52999918b56f2f2b317190699077ba1c28e1543aeb082226d52dec4f9eb3181e800debff0561a8aa431575668371182ee560d4c44dc460d8978482096d2b1048a06cc2a433b80ade3d0de742078ceefb325e653bc787d5874b395738c084d2165fd5fc694d5fb21762150f73aa9df95468ad5a752fc46e8505d4b5377c4ea9a0e4f2a55863e4d64bcec9c2852350dab48d8a234691a394cc8a195b09a037c2662aff55652c4660c2142ee36702261a452eb937752b82e7d58a8290d8093a992765cc39e0092ee790ef13643ca3e6b726a466804976e5bc53bc00cc95a11400125c8065f833c00027ca4529fb468446fbccd80f0967e912ceb771376ff350a96af214c72e46433a6571ab28b3c76dcadef499f0db27ccde5d812bcb304c01cf990218954200e6958497716192b9ec2211fc3c8fcb40b027c1dd6ad73f40e615cecfcf92cf5e3c0c73ce9a6893443b2503f3570ccbf1c065551ae21e3de881362c084e199074c8d3a916f8a3cada4d90d876f4174ab82c4a2515857397e86ce2b311c28b64586efb38adb9727f645eb702c69f9526e003340658140fdf7291285bc8f1dcec1e377830b26c6859b27a918dca7ad781c14db579e723a87515730e73c0ea3b5eaee9f1a8e9fade038cd33b81355746c57578597f4ae19f4b3d1ae12528ab33b06af0ec827325050f823e8a7cb4b6f963f1c414ed5480feca8573f058ff1ab2c5cdb1418e8d1552566b7198999047abd20c23108ebda8383edf98a0631dbd7ee05151", 0x1000}, {&(0x7f0000003340)="c28f93dcbc97c0f446d567e01aefc3df8201283c4d38b366e87b9983d5cce7dca9fecf5e6c7af146a3ebf3ee3300729cf4a5c806661115789d8c6fc13b20ec96c6aa4bafb4a29e5e0e5c88049896efa9d70248427df36c10e561f31cac61d68d3a8bebf708019ac813e687d829b84792bd2fc2e0aa74a6586e8844c9deeae271143f56166b618c5ab92d2ca473f4bec4690aa429de8491f063c7e424e17464188ef69753130ec877211b606a231c6ff77d9e325b5135732073daafaaaa4cc428490d67c29b18ce6eaf4cf1c454febc779bce2fa54644a4b57c091b25aa5287291c38e700f09fb9", 0xe7}, {&(0x7f0000003440)="378fdd47b487cb101dee5c900598fd65c9", 0x11}], 0x5, &(0x7f0000003500), 0x0, 0x4000040}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
write$cgroup_int(r2, &(0x7f0000003500)=0x81, 0x12)
prctl$intptr(0x3f, 0x9a0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:40 executing program 2:
r0 = socket$inet6(0xa, 0x2100000000000002, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x1, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x14}, 0x0, 0x0, 0x20000, 0xfffffffffffffffd}}, 0xe8)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

23:35:40 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x1)
r1 = dup(r0)
ioctl$TIOCSBRK(r1, 0x40044591)
inotify_init1(0x800)
write$eventfd(r1, &(0x7f0000000000)=0x7, 0x8)
write(r1, &(0x7f0000000080), 0x0)

23:35:40 executing program 1:
r0 = geteuid()
setuid(r0)
gettid()
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x1, 0x3, 0x1}})
unshare(0x8020400)
exit(0x0)
timer_create(0x7, &(0x7f0000000040)={0x0, 0x35, 0x0, @thr={&(0x7f00000000c0)="30f19efced31a46d1e4f4561e888f9504426bc0c9253b07e1ab8ef5b99e4c76d81d240dddcb42a551984671b8fb0580467f12ed9f032a809f703e8e301d7563f07c5b856d518089cd3ab2be9eaeff8b33ef6d8b0c9e659ad8a3c42cdd7c946464e770eb4e6556b535ea9da520832a5fcd0c4afeea4b6b81ce390d28b07005d757591bfc47b35e8d7223631a963f643ebff191958a018dc32d045a56bf49db34d691f3ce476931884dd5680a3989a3c52599194cf4478aedf39dc99d3516feb5123340f9a9271aed5d876c565", &(0x7f0000000000)="ba1814b4fcd4353b0ad3213798f27b8b4b7c757f5c1e95"}}, &(0x7f00000001c0)=<r2=>0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000240)={{r3, r4+10000000}}, &(0x7f0000000280))

23:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:40 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x800, 0x0)
pipe(&(0x7f0000000040))
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x3ffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0))

23:35:40 executing program 2:
r0 = socket(0x18, 0x0, 0x1)
clone(0x0, &(0x7f00000002c0), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
connect(r0, &(0x7f0000dcd000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x2}}, 0x2e)
clock_adjtime(0x7, &(0x7f0000000140)={0x100000001, 0x4, 0x0, 0x6, 0x20, 0xfffffffffffffff8, 0x7434, 0x8, 0x2, 0x7, 0x2, 0x3, 0xbe90, 0xfff, 0x6, 0xb5a, 0x40, 0x264, 0x1, 0x2, 0x3f3e, 0x8, 0x80000000, 0xb9, 0x100000001, 0x8})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x210001, 0x0)
write$P9_RWALK(r1, &(0x7f0000000300)={0x30, 0x6f, 0x1, {0x3, [{0x30, 0x2}, {0x4, 0x4, 0x1}, {0x2, 0x4, 0x3}]}}, 0x30)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280), 0x4)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RRENAME(r2, &(0x7f0000000240)={0x7, 0x15, 0x2}, 0x7)

23:35:40 executing program 3:
r0 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x1b, 0xfd, 0x4000, 0x100000000, 0x4, 0xfff, 0x90d7}}, 0x50)
rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000000000), &(0x7f00007adff0)={0x77359400}, 0xfffffffffffffeb3)
rt_sigsuspend(&(0x7f0000000100)={0x80000000}, 0x8)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)={0x46, 0xfffffffffffffffb, 0x9, "1a0d3b3052b140de6dbd78dc69f3ed748c0e760fd09305c9da93bc39f58e5c6398afbbb2d21f8fd8232377d191c83b8ff8e1d4b44a9079a20bc0e0f2dfa08c1203216242f3de"})
truncate(&(0x7f0000000200)='./file0\x00', 0x0)
fcntl$getflags(r0, 0x3fd)

[  398.803500] binder: 26061:26064 got reply transaction with no transaction stack
[  398.823920] binder: 26061:26064 transaction failed 29201/-71, size 80-8 line 2922
23:35:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  398.856546] binder: release 26061:26064 transaction 311 out, still active
[  398.883687] binder: undelivered TRANSACTION_COMPLETE
[  398.900338] binder: undelivered TRANSACTION_ERROR: 29201
23:35:41 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x38}}, 0x0)
r1 = getpid()
fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xffffffffffffffe8, r1})

23:35:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000001c0)=r2)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x3ac5, 0x4)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={<r4=>0x0, @dev}, &(0x7f0000000080)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={[], [], @rand_addr=0x80000000}, 0x53, r4})
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001ac0))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

23:35:41 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x20)
setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f0000000180)="cd54659649a6f5ff8db4f7bd22de6d58461a710243c2adecfb0ed878508e25973249ba26cf560111b6d13324149c1bc1284360b6d988b5a74d3b6002f596775fb81a0ea452aaca9fd5f114a60481f8aee24ce012908ad7afa645a159b175beaf", 0x60)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x180)
openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0)
write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7)
syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x2, 0x200)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))

[  398.909487] binder: 26086:26089 got reply transaction with no transaction stack
[  398.931024] binder: send failed reply for transaction 311, target dead
[  398.951367] binder: 26086:26089 transaction failed 29201/-71, size 80-8 line 2922
23:35:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000001c0)=r2)
setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x3ac5, 0x4)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={<r4=>0x0, @dev}, &(0x7f0000000080)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={[], [], @rand_addr=0x80000000}, 0x53, r4})
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001ac0))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10)

[  398.988927] binder: release 26086:26089 transaction 314 out, still active
[  399.012404] binder: undelivered TRANSACTION_COMPLETE
[  399.039103] binder: BINDER_SET_CONTEXT_MGR already set
[  399.050156] binder: undelivered TRANSACTION_ERROR: 29201
[  399.056413] binder: 26107:26109 ioctl 40046207 0 returned -16
[  399.065251] binder: send failed reply for transaction 314, target dead
[  399.087604] binder: 26107:26109 transaction failed 29189/-22, size 0-0 line 3014
23:35:41 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x2, 0x0, 0x10001, 0x3})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40485404, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, "6964300000000000000000000000e8ffffffffffffff0000000000000001000000000000000000000000000000000000000000002200", 'timer1\x00'})
clock_adjtime(0x6, &(0x7f00000001c0)={0x7fff, 0x7, 0x9, 0x5, 0x4, 0x3f, 0x4, 0x745, 0x5, 0x100, 0x4, 0x7, 0xb8, 0x8, 0x3f, 0x101, 0xf2b8, 0x1bae, 0x32bb, 0x7f, 0x8f, 0x4, 0x71, 0x65b4})

23:35:41 executing program 0:
rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffb}, 0x0, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
rt_sigtimedwait(&(0x7f0000000180)={0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)={r0, r1+10000000}, 0xc)

23:35:41 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

[  399.152328] binder: 26107:26117 got reply transaction with no transaction stack
[  399.163361] binder: 26107:26117 transaction failed 29201/-71, size 80-8 line 2922
23:35:41 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000000f000/0x1000)=nil, 0x1000}, &(0x7f0000000140)=0x10)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r2 = socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10000008031, r1, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x1)

23:35:41 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000000)=@known='security.evm\x00', &(0x7f0000000080)="001ebd50b6fdbf76bd0628e61da6ee61e481e3e7d40f7a7205776f207cdb", 0x1e, 0x3)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000002c0)={0xba72, 0x7, 0x1f, 'queue0\x00', 0xfffffffffffffff8})
fsync(r1)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
write$P9_RWALK(r1, &(0x7f0000000040)={0x16, 0x6f, 0x2, {0x1, [{0x40, 0x1}]}}, 0x16)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000200), 0x4)

23:35:41 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10040, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x102000000400204)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x101000, 0x0)
write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{}, 0x1, 0x2, 0x1}, 0x18)
clock_gettime(0x7, &(0x7f0000000180))
syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0)
sendfile(r2, r0, &(0x7f0000000200), 0x80000007ffffffe)

23:35:41 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)
socket$nl_route(0x10, 0x3, 0x0)

23:35:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000140)=""/4096, 0x1000)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0))
r1 = syz_open_pts(r0, 0x2)
write$binfmt_elf64(r1, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x10000, 0x7fffffff, 0x20, 0x3, 0x9, 0x0, 0x0, 0x800, 0x1ea, 0x40, 0x278, 0x7, 0x80000000, 0x38, 0x1, 0x3, 0x6, 0x190}, [{0x6, 0x7ff, 0x0, 0x8, 0x1, 0xfab, 0x1, 0x8d5}], "28b506fe09b68dc090cadba409e326746bc13ff63c0c447c", [[], [], [], [], [], [], [], [], [], []]}, 0xa90)
r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000001d40)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f0000001e80)='keyring\x00', &(0x7f0000001ec0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$instantiate(0xc, r2, &(0x7f0000001d80)="76878abe20ced149cfa1a32bca3d2708994af0106630e9d9e609c6241c7fae92cbde9220e74196b3e346fb8bb818591bd91f88262a3ad2042ab4978b18612278f2b37c5eb5d8e640758b1b57515de5915d1047debed1b86b07dc02185a73e9afc980711da6fdeeef96151e2ca61de01fd5f2c4471d29433c3190030a744f5e67770c03e56a3bccf24bd823cdcb9a691e58b24ea937c3cbe4093497b8599c640422ceca3edc63acb4486c01cdbe426194d4ef5f4b8a14ca83e8b099bdbd61ae9bfb3e415c896b5ed36c03b722710a908f492a58f000fd4a9929940847ddd68863550ca2a126bb78870d948823e916dc425d8b9751", 0xf4, r3)
poll(&(0x7f0000001d00)=[{r1}], 0x1, 0x200)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r4 = dup3(r1, r0, 0x0)
write(r0, &(0x7f0000000040)='\x00', 0x1)
ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000100)=0x28)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000001c00)=""/214)

23:35:41 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=<r2=>0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=<r3=>0x0)
tgkill(r2, r3, 0x18)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = dup2(r0, r1)
ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000240))
exit_group(0x3)
pread64(r0, &(0x7f00000000c0)=""/147, 0x93, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
capget(&(0x7f00000001c0)={0x399f1736, r3}, &(0x7f0000000200)={0x7, 0x3, 0x2, 0x40, 0x32a, 0x4})
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl(r1, 0x1, &(0x7f0000000000)="401b20ad42121ecf6ec73e587363e9183537e26e3933f1")
writev(r5, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
setsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000000280)="0417e0a14586dfacfa27907d2188246fdc72389abc8ec630ddc0fc8c49177a89681982b2a3ca80f9dd4f20793415f5398256098357ddad00b29e585605a71d798fa03b72dad964a3801f2c6232d5e6a86309f0a346cb7b02", 0x58)

23:35:41 executing program 3:
prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]})
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sw_sync\x00', 0x800, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setfsgid(0x0)

23:35:41 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)
socket$nl_route(0x10, 0x3, 0x0)

23:35:41 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:41 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)
socket$nl_route(0x10, 0x3, 0x0)

23:35:41 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)
socket$nl_route(0x10, 0x3, 0x0)

23:35:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:41 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000080)={0x0, 0x0, 0xffeffffffffffffc})
close(r0)
ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)})

23:35:41 executing program 3:
mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x103, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c4000040000e22a966a3a2ce97e4ce55f"], 0x0, 0x0, &(0x7f00000000c0)})

23:35:41 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)
socket$nl_route(0x10, 0x3, 0x0)

23:35:41 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$inet6(0xa, 0x3, 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20)
r2 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20)

[  399.827798] binder: undelivered TRANSACTION_ERROR: 29189
[  399.833597] binder: undelivered TRANSACTION_ERROR: 29201
[  399.875745] binder: 26185:26188 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1024
23:35:42 executing program 1:
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
rt_tgsigqueueinfo(r1, r1, 0x34, &(0x7f0000000080)={0x0, 0x0, 0xffeffffffffffffc})
close(r0)
ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)})

23:35:42 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$setsig(r0, 0xa, 0x29)

23:35:42 executing program 3:
r0 = socket$inet(0x2, 0x0, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
creat(&(0x7f0000000000)='./file0\x00', 0x70)

23:35:42 executing program 0:
unshare(0x400)
r0 = timerfd_create(0x0, 0x80001)
fadvise64(r0, 0x0, 0x0, 0x0)

23:35:42 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pwritev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="54358a433ffc53337d3e98a18e94a9d2bea06d469ed5bc0dd47e776e5c07e57a129c502b9a7a9d028e80bff6c2d93aac7fb8d91e551cb0ef1d96b9093839c009018faede531c3c58ecda53c47397608c3810fbcc2e6fe30427e220d8d16f2f538bdd7260cb6f4cc5aefd74ff137a094c953dc7395d70c6ee217a2f", 0x7b}, {&(0x7f0000001300)="cd55ac8f9d2e5a73fee1416d22f605bbe7f0fd4e71e5b2901896ec9da6737b395ed46f10bf60b5096b0e227582e3b1ec339af1bd53b2af7627b5a138da3447af742c063e265c43fc228c815b382814940dc8906eb9e8420040fd556f972f71798276df85ba79ae0d9d884376e339e306ede4e6f80200b4b0ccb2c67037a6d06473548b94e9e5", 0x86}], 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0xfffffffffffffffd)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:42 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14)

[  399.944905] binder: 26192:26206 got reply transaction with no transaction stack
[  399.952396] binder: 26192:26206 transaction failed 29201/-71, size 80-8 line 2922
23:35:42 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:42 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10040, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10001, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
personality(0xc50000f)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087705, 0x1)

23:35:42 executing program 1:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100c0, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000280)=""/208, &(0x7f0000000380)=0xd0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8077, 0x0, 0x3ff, 0x12, 0x80000001, 0x4, 0x7, 0x1ff, 0x80000000, 0x80000001, 0x7, 0x8})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b3fdc))
write(r2, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46)
r3 = syz_open_pts(r2, 0x2)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080))
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x57e, 0x0)
write$sndseq(r4, &(0x7f0000000000)=[{0x5, 0x4f1, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x5}], 0x30)

23:35:42 executing program 2:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x9208, &(0x7f00000001c0))

23:35:42 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400220)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="e2fba57f82276e9e04a20089c390c15d23c5c100dc06c7523285f0028a93a2c609f065f9f4666d6a8e7bbd834277e5fd9d76f0d34ff73b845d44ccff7fe7182374b3e3bbc9cd182b977a765dde67c1a4e0c0b358", 0x54}, {&(0x7f0000000080)="575ea47cb3348b79a3ec60502386bdfbf54eec53b586", 0x16}, {&(0x7f00000000c0)="060d0bb9a29f4308185aebb2e22949c08e84b6cd153b558f0754992a98fe44a5d3babd70b89f4db5fb90047f175b718923cd45c7a847d3eb6a9b42e43f3739854851a40cad8fd722c10b5728c398f6e7d255ed5195d15d340e9921aa7fae8956bea54824b78074619062a4efc45f84e90bfeeefe0d", 0x75}, {&(0x7f00000001c0)="8ad31025e76e99d17595ba475f08257f85c5322bef259082c75e377e36c9b3bd85536573c1307db8e65a8b87d4fd83126fdc6fc14949d9a6ca2014a460e442cd81a250b351caf2a6ce1f70a3b8a21ddcb9b33610779afeeca851a8e1c8c903d6acf7d7f683c7a68613902124063a4fbea08660d746cbfe", 0x77}], 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x400, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x4, 0x1, 0x400080000000000, 0x1ff, 0x3}, 0x10)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
syncfs(r0)

23:35:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:42 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000380), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = dup3(r0, r0, 0x80000)
ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/170)
shutdown(r0, 0x1)
close(r0)
recvfrom(r0, &(0x7f0000000100)=""/146, 0x92, 0x2000, &(0x7f00000001c0)=@sco={0x1f, {0x4, 0x7fffffff, 0x0, 0x1, 0x1, 0x101}}, 0x80)

23:35:42 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x9208, &(0x7f00000001c0))

23:35:42 executing program 1:
sigaltstack(&(0x7f0000286000/0x1000)=nil, &(0x7f0000000000))
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0xe8)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0x0, 0x5, {0x7, 0x1, 0x0, {0x4, 0x1, 0x1ff, 0x3, 0x1, 0x10000, 0x9, 0x8001, 0x1, 0xb11e, 0x8, r2, r3, 0x0, 0x9}}}, 0x78)

23:35:42 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2)

23:35:42 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x101, 0x8000)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc0109207, &(0x7f0000000140))

23:35:42 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x400, 0x40)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000200)="ed362d5726b01c2dfa4704bf2d09ce1947b3ffff1911a9803e7d3745c4f611fd3221ab7809a62d849c86f3e6fb7cf63978851ec901b81564a9afea1decd86d898449715fdd79ecdbd65636383fbe7dd2bfe5faed47e2193aef7b8c65eee32c7fccef1d475afd3e2ecc741ea82b03cb", 0x6f}, {&(0x7f00000002c0)="923830babf2eb00f15c5c19ace1ca8f4153546937c728f5a783557c49cb1491aeb50b5f725e95192adb1b1010e600b943faf4e75aad3cef1482d33c1d13dc8d74ce47562c964b28a4abed64e5004f9a00659aecb0dad36e5d9fb30d1f35bb280f924969c3958197f4c0f739fb663bfc26295bae4234fe230904727b81d9142", 0x7f}, {&(0x7f0000000ac0)="cfeb91264a8a9dc8bb77a599ce319ea1cba7d9545375b19c4f8ae7d0f5aedc12073e37c4f1c2925c9487f7390059176ca84ed1b2b51fbe9ae809e06acd10d2670761b1ef3ce77fa6e6c86701f4f04d78b6dc2bf6bdc9fb44610a0f4dcf7ee3a7d30246c15b728735fdf3fb0e", 0x6c}, {&(0x7f0000000400)="f071715284134657dc9b3566c00add3c66930da8de3746bbf42a56e6e84a8bbed66f8dcd64ec3a181eb1405b3755a501588b0cd2aa3f922c5384a455cf9508ef4a6fc042d9b0b2e190ff06a2f1ec7239b98f2b162850c0ec47c5a23063478f", 0xffffffffffffffbf}, {&(0x7f0000000080)="7bf59d448035716f86bf56ca29eaa6808f63056cfb308923580673c2d0331e7eb06892158f06e0383d9dce1e835320c6eb49b3", 0x33}], 0x5)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {0x7, 0x8154, 0xfffffffffffffe00, 0x92a}, 0x2d, [0x2, 0x1ff, 0x0, 0x0, 0x0, 0x33, 0xfff, 0x8, 0xfffffffffffffffd, 0x1ff, 0x7, 0x101, 0x5, 0x1000, 0x7, 0x9, 0x73ac83a2, 0x5, 0xfffffffffffffffc, 0x3, 0xe3, 0x5, 0x99, 0x6, 0x3, 0x0, 0x2, 0x100000001, 0x1fa1, 0xffffffffffffffff, 0xb7, 0x1, 0x9, 0x6, 0x81, 0xf77, 0x9, 0xa8c, 0x4, 0x5, 0x7ff, 0x5, 0x4, 0x847, 0xfffffffffffffffc, 0x40, 0x8, 0x4, 0x6, 0x4, 0x2, 0xcfc2, 0xfffffffffffffffe, 0xfffffffffffff7a9, 0xfffffffffffffffc, 0x234, 0x2, 0x4, 0x39a9, 0xffffffffffffffff, 0x1, 0x45, 0xffffffff, 0x3f], [0x695, 0xfffffffffffffff8, 0x80000000, 0x2, 0x5, 0x6, 0x0, 0x47, 0x1f, 0x6, 0x5, 0xfffffffffffffff8, 0x2ad, 0x32, 0x40, 0x240, 0x3, 0xffffffffffffffe1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x1, 0x6, 0x8, 0x9, 0x8, 0x1, 0x8, 0x5, 0x8, 0xe97, 0x0, 0x3, 0x36ec, 0x700000000000000, 0x3, 0x100, 0x0, 0x6, 0x0, 0xed0, 0x1, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0x2, 0x800, 0x80000001, 0x9, 0x1, 0x4, 0x1, 0x10001, 0xff, 0x3, 0x80000001, 0x8001, 0x2, 0x2b4a00000], [0x1, 0x81, 0x7ff, 0x3, 0x7, 0xfffffffffffffffe, 0x3, 0x9, 0x5, 0xdf, 0x81, 0x2, 0x7, 0x8, 0x9, 0x2000, 0x7fffffff, 0x9, 0x9, 0x6, 0x8001, 0x9, 0x400009, 0x400, 0xfff, 0xfffffffffffffffd, 0x7ff, 0x83, 0x4, 0x101, 0x0, 0x5, 0x0, 0x1, 0x8001, 0x9, 0x7, 0x1, 0x8, 0x200, 0x3, 0xe99d, 0xffff, 0xaa4, 0xffff, 0x39, 0xf2c, 0xffff, 0x8, 0x20, 0xfffffffffffff95e, 0xf6, 0x7, 0xfffffffffffffffb, 0x8001, 0x200, 0x54, 0x665, 0x1, 0xd1, 0x4, 0x80000000, 0x4, 0x2], [0x3, 0x0, 0x3, 0xffffffffffffffa7, 0x529, 0x0, 0x72, 0x4, 0x970, 0x7, 0x7f, 0x3f, 0x0, 0x80, 0x4, 0x100000001, 0x9, 0x0, 0x3, 0x4, 0x5, 0x5, 0xffffffff, 0x3f, 0x8, 0xfffffffffffffffe, 0xc000, 0x5, 0x1, 0xfa4b, 0x8, 0x2, 0x1003, 0x6, 0xc0000000, 0x101, 0x8, 0x6, 0x40, 0x9, 0x4, 0x6, 0x0, 0x5, 0x2, 0xb4, 0x6d, 0x7, 0xfffffffffffffc01, 0x8, 0x0, 0x4, 0x5, 0x8, 0x3, 0x10000, 0x6, 0x100000001, 0x0, 0x800, 0x8, 0x6, 0xfff, 0x4]}, 0x45c)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000b40)={0x4, 0xffffffff, 0x8})
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000380)={0x1ff0, 0x4})
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
set_robust_list(&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x5, &(0x7f00000005c0)={&(0x7f0000000580)}}, 0x18)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000340)=""/35)
write$FUSE_OPEN(r1, &(0x7f0000000000)={0x20, 0x0, 0x8, {0x0, 0x4}}, 0x20)

23:35:42 executing program 5:
socketpair$unix(0x1, 0x1000000000004, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socketpair(0x11, 0x7, 0xfffffffffffffff9, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x40000, 0x10)
write$UHID_CREATE(r3, &(0x7f0000000740)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000640)=""/193, 0xc1, 0xfffffffffffffff8, 0x68, 0xc129, 0x4, 0xaa620000000000}, 0x120)
sendmmsg$unix(r1, &(0x7f00000002c0), 0x0, 0x20000004)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/access\x00', 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x7)
epoll_create1(0x80000)
fcntl$setsig(r4, 0xa, 0x24)
socket$inet_tcp(0x2, 0x1, 0x0)
writev(r4, &(0x7f0000fdbff8), 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xa5, 0xebd, 0x0, 0x10003, 0x2000000000001})
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x2000, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180))
fcntl$setpipe(r4, 0x407, 0x0)
getdents(r1, &(0x7f0000000440)=""/143, 0x8f)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000280), 0x4)
getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
fallocate(r2, 0x0, 0x385, 0x8)

23:35:42 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x6, 0xb05, 0x8, {}, 0x1, 0x4f34c8df})

[  400.665163] binder: undelivered TRANSACTION_ERROR: 29201
[  400.670683] binder: send failed reply for transaction 319 to 26192:26193
23:35:42 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x200)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:42 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000300)={{0xff, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e23, 0x4, 'nq\x00', 0x1, 0x4d3, 0x25}, {@multicast1, 0x4e22, 0x10007, 0x8, 0x9, 0x1}}, 0x44)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
socketpair(0xb, 0x0, 0x200000000000000, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000240)={0x658, 0x8, 0x7f, 0x80, 0xb78, 0x6})
connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r3, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000002c0)={@empty, @local}, 0xc)

23:35:42 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x12200, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0x1f}, @in=@broadcast, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x80, 0x80, 0x3f, 0x0, r3}, {0x3, 0xa1, 0x9, 0xb9f, 0x7fffffff, 0x615, 0x1f, 0x5}, {0x0, 0x200, 0x7fff}, 0x4, 0x6e6bb3, 0x2, 0x1, 0x2, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x18}, 0x4d6, 0x6c}, 0x2, @in=@rand_addr=0xaf0e, 0x3502, 0x3, 0x3, 0x6, 0x8, 0x8001, 0x100}}, 0xe8)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@release], 0x0, 0x0, &(0x7f0000000080)})
r4 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000000, 0x90010, r1, 0x0)
r5 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x13, r1, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000380)={<r6=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x90, 0x0, &(0x7f0000000580)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000280)=[@fda={0x66646185, 0x4, 0x3, 0x12}, @flat={0x736a2a85, 0x1, r4, 0x4}], &(0x7f00000002c0)=[0x28]}, 0x3}}, @acquire_done={0x40106309, r5, 0x4}, @clear_death={0x400c630f, 0x4, 0x2}, @acquire_done={0x40106309, r6, 0x3}, @dead_binder_done], 0x6a, 0x0, &(0x7f00000003c0)="25875e21aa8e99fba0e300779ffe9e0f5577213c2a9471b5671b195b00c7350336fe54e4a2d62bae9a62b636b47e0c29eddb5a27d038ba2a371b706de9d92a1e058014aa3b3964b00544e4bd794a2f403df165b76f94be91e6015b08ebc74ef96aaca9fdfc29a55030c7"})

[  400.724667] binder: undelivered TRANSACTION_COMPLETE
23:35:42 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1, &(0x7f00000000c0)="125cc80700315f85715054b5524f01")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETNOCSUM(r1, 0x400454da, 0x800000)

23:35:42 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x20000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000100))

[  400.770933] binder: undelivered TRANSACTION_ERROR: 29189
[  400.793843] binder: BINDER_SET_CONTEXT_MGR already set
[  400.798176] IPVS: set_ctl: invalid protocol: 255 172.20.20.32:20003
23:35:42 executing program 2:
r0 = dup(0xffffffffffffff9c)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xfffffffffffffe43, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6dcc}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x21}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x961f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0x9208, &(0x7f00000001c0))

23:35:42 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x11, 0x201, 0x4}, 0x14}}, 0x40880)

[  400.823779] binder: 26285:26301 got reply transaction with no transaction stack
[  400.844454] binder: 26290:26294 ioctl 40046207 0 returned -16
[  400.850859] binder: 26290:26307 Release 1 refcount change on invalid ref 0 ret -22
[  400.856210] IPVS: set_ctl: invalid protocol: 255 172.20.20.32:20003
[  400.888242] binder: 26285:26301 transaction failed 29201/-71, size 80-8 line 2922
[  400.897261] binder: 26290:26294 got reply transaction with no transaction stack
[  400.914358] binder: 26290:26294 transaction failed 29201/-71, size 56-8 line 2922
[  400.937442] binder_alloc: binder_alloc_mmap_handler: 26290 20001000-20004000 already mapped failed -16
[  400.967459] binder: BINDER_SET_CONTEXT_MGR already set
[  400.979438] binder: 26290:26307 ioctl 40046207 0 returned -16
[  400.991563] binder: 26290:26307 Release 1 refcount change on invalid ref 0 ret -22
[  401.000007] binder: 26290:26307 got reply transaction with no transaction stack
[  401.008008] binder: 26290:26307 transaction failed 29201/-71, size 56-8 line 2922
[  401.016469] binder: release 26290:26307 transaction 324 out, still active
[  401.035127] binder: unexpected work type, 4, not freed
[  401.049859] binder: undelivered TRANSACTION_COMPLETE
[  401.057223] binder: release 26290:26294 transaction 328 out, still active
[  401.065107] binder: unexpected work type, 4, not freed
[  401.070372] binder: undelivered TRANSACTION_COMPLETE
23:35:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:43 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt(r0, 0x7, 0x6, &(0x7f0000000040)="85c67644809b8c37a7333d59201fc1000e23f3becd88f018385f51d75ff5748d62bc5f5dd32acb50fbcfd1ae9626c47bcd9db49ed6177e2a112e1f0f53203816b69e3f09c7fde97818b8ee8b006d2c92f625b49638cc5171f2ea8c1109160cee3d88199a7b4261de69e77abf363211551ef3e26a16d0807b5ee790d2b486", 0x7e)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
r3 = dup3(r2, r0, 0x80000)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4421}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf2510000000080005000000000014000100080001000a000000080006007272000008000400040000002c0001000c000700360000001b000000080004004e2100000c080001000a000000080006000600000004000200f8854912610f644003ad0000000000000000000022dddf7d41d617999d34204085afdb831ef0314ed87cbaff425b2596e094985c1145f48b387f0035c446416e6e5b68441e3f5940567af8a96f2fa8660e539e14c8561db234b3174ef504aed034a1f932d688845d258a5c3e88a953f9845ed134eeae25007db832f653c3c1ece8f0aaadccecefde6064af59a889e63b"], 0x70}, 0x1, 0x0, 0x0, 0x40081}, 0x20000000)
getsockopt$sock_buf(r1, 0x1, 0x2e, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10)
fcntl$setflags(r0, 0x2, 0x1)

23:35:43 executing program 3:
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000040)={0x0, {{0x2, 0x0, @loopback}}}, 0x88)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000001140)='/dev/md0\x00', 0x80301, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000000)=0x18)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sw_sync\x00', 0x100, 0x0)
read$FUSE(r1, &(0x7f0000000140), 0x1000)

23:35:43 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
getpeername$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
getsockopt(r0, 0x0, 0x7, &(0x7f000000a100)=""/173, &(0x7f000000a1c0)=0xad)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fsync(r0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r2=>0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
stat(&(0x7f0000003fc0)='./file0\x00', &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = gettid()
r6 = getpid()
r7 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000009bc0)={<r8=>0x0}, &(0x7f0000009c00)=0xc)
stat(&(0x7f0000009c40)='./file0\x00', &(0x7f0000009c80)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
stat(&(0x7f0000009d00)='./file0\x00', &(0x7f0000009d40)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getpgrp(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000009dc0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast1}}, &(0x7f0000009ec0)=0xe8)
ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff)
getgroups(0x2, &(0x7f0000009f00)=[0x0, <r13=>0x0])
r14 = getpgrp(0xffffffffffffffff)
r15 = geteuid()
r16 = getegid()
r17 = getpgrp(0xffffffffffffffff)
fstat(r1, &(0x7f0000009f40)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
r19 = getgid()
sendmsg$netlink(r1, &(0x7f000000a0c0)={0x0, 0x0, &(0x7f0000009b40)=[{&(0x7f00000002c0)={0x2194, 0x1d, 0x0, 0x70bd25, 0x25dfdbfd, "", [@nested={0x211c, 0x9, [@typed={0x8, 0x4d, @fd=r1}, @typed={0x8, 0x14, @pid=r2}, @generic="5b3ea43b15ca8bbdf8930169ac16a2549a61f716589a93cbf0085bfd743acaaa30aa197a75fbc3b00868e9f776cc5f37eda3dc7a356b6252e6c09236e60e959c48d66a5e3851265cc6afae262d1dc85a1e0645fc7564370419003ddc61a83840b022f46a2854d01c13386d4690ff8b6353e26156bc55", @generic="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", @typed={0xc, 0x33, @u64=0xc7e1}, @generic="8a9ed078242bd063fdc5ef843a8d58df47f1b1119938627c5cf2e3af810246f7eca90a3f1c1cb6b3d1f0df22b82270735b0bbbff17ea2361ae43c836d34901734c0476b3d9ade215ee4f65b2162cb96effa86c9940e63b5e4464ee079adc72b114448ed359c42d6f43b9d1c0fed5941b02a622dbc8fc742c408974812faf7cf44a7881cae0", @generic="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"]}, @typed={0x4, 0x7}, @typed={0x8, 0x2e, @uid=r3}, @typed={0x8, 0x6e, @fd=r1}, @generic="cde0de9d6a546938f9e51f807bba990286f324f284ac7f102ce507e0182de61820b9dd1146d7176cdc53247ce3b82ffc1253ae87c5a7c97313fd8f8df3619435cc9e41eb3ae97c8b9aff532cb365647891fe"]}, 0x2194}, {&(0x7f0000002480)={0x520, 0x1f, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0x510, 0x4b, [@typed={0x14, 0x6f, @ipv6=@ipv4={[], [], @multicast2}}, @typed={0x104, 0x8b, @binary="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"}, @typed={0xf8, 0x6f, @binary="fd41ddb466e91dde7b966b68b46dd8eff6662ad21499c48fab1a2c8d626f81ab300e4625071ba57c5e3a62c69a9f021c353b0652a77af8b2e6fa942dbfbe46f82b5e3dd7d72c903fd2924991e102a38aa4541e06ae6d5caeb5de1fc6f42204642804f8e9a214b63e880e1227b90fdb5e1b27529a9d5342235074fb330be9d3d2707730e7e6963acca82bf7227acc2065033c2ed6a9438a6af2b6851d2688607209005cccd34569b7817e6b4a8d0c5066049f031986dde017e3a4bd6b8c6c7d37e4b9587d905348e6e83efff82257b802ee595d6ceeace3efdb72f99a628a27087bd6e30fbd3940c5054f8c16192c445c7c0edb7c"}, @generic="7fa76a733eba67e63819c3e748f1f7ea91c7b30e3ede2c9bd380984130e11a4e82560c95a33111077b9a40fdfa", @generic="e2b81fc28aa674f7c54487a0357fdb11f9afef0cd0b92f98b3c05cee299d7167440f872564d7762559d6b680dc77d7d49e49dda5c05e28b8aa3db60a6d70cca82eb8cb239ce16d08fee17a8880029ba6a9282cd8b92802d2741bb5c359fc73c0cc2d646c3726eee895d66c64586f25a34e18a89c8535874e4f279240570a6d3af940ab28e3e63a455e92c36e45b6dca2c3f607eddd3c3ad5f5250150b3c3761ebb3bb87fe22816a490b5c6d1378db044eacddf513d6d33cb32b7f79a4f82a5293a9b835d9b040a6fe95f41013904b66030c6b07978e46a9ef6ae5a6c4145d4a464f719fc9c1d3975ae17e14ceb495a8d5b", @generic="fba377e2fb4ccd06725837f33a88cd7c9c1eba7cb179a21d1e0ef76921b5f127a8f7eb84284c9cbe1daacf8668193f21ae0f28d5489c79c0", @generic="034eb50d7917162e6b229bb36be7c594b54f35b545592e3718ae1068881f07345b5449e459860b6318380c28a0909ca71704e38af272582b1e07b022086bd3f425a7c6c1922cf66ce714f313433c85006575e1623a7d87d812f2a44698efc4671cf0d75f721c06ea9e6d638bac115a6c1a2bd2092fa6ed1798f11c789bed0606996f3036ec8acbfce91407e5adb7cec87ced15c502cb098e99cf6f", @generic="930d101bf020a08324647d79e9bb0dd47f6e6ee2af32fa078435d1a395b173f21e26eb8809b58489089b715a686f5fdd3f91407699b0d95b525b79d054aa3af51e3c26", @typed={0x8, 0x48, @fd=r0}, @generic="6e71420740d53b4801372719727ed74e2ed38c7edb15f660ef0b83c2b2e99d2dca01c44b5744b102ebbbdce34c0114170c5ccb59776b35b2b2ef0e63a19af91714730c6f00fb03285dbfac5d1f6bada0c7f3f05baca2f0dedf649e4ba6dd3b39352eec2669a21bc6bdca73efba13599faf53872298a63f824fa9aeb408bc6d96d4bcfbfb53890ee880e8eb0caeac00164357aac257a8c08cb3a7e0d29861c7d2c7d49c6e1279b491c0806c3d1ddd71169595b14b375258dec161b03dd8"]}]}, 0x520}, {&(0x7f00000029c0)={0x14e8, 0x1f, 0x300, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0xa, @fd=r0}, @nested={0xf0, 0x62, [@generic="ed478e1e8d31c8eef9bd9a4876c1530a1c6cea962f22388896b691b97f841febbaebab7331f65ba3695e46233b4548cf289c158aa577d0576e0b0d76f8deab3abfefcf26ac4fb9c14f3c83f54e9fd9d8677732e7e72c540c2d7199041acc069bb467ec802c75f97eca08eef216b907159e6ad478397b582591ff41e089ef42a8033c980d3e6171365ab54fc9a8d56498e151cfbeee92b832cdbb3d18c2dfb9168207b6a246f4a8887ca856c404face491c1b83c7c83cd5af4ba58d866e998966c8647f60c884d3c4a9c21d43e7f8f8cf2fd210654a8207fa9f023fccbedeaf39350a705cd7259be9695b"]}, @typed={0xe0, 0x38, @binary="4c466e40d36b3d02ad115d2d1363a989c1340bcdf275b4097090d458b6f7d528eefd1796318dcaaa6467e1f38e40d0671018de455d1624ff9b2fb619f33f207c16c7a8cf96888532ab44facd58313786e50de73034ad9c4dec918e8595124a49f701f9f3b66e78a9c5fc2041b88ebdf5de6e8906e785c056738c0f0ddc89a23481639d12f049df3c20e94685f0b360346745fe1bd77a9c6eab8ab38eff48ee9bf9f93e55825cc967d604a0be104c868270dda11bd468b4552c36ec28177d0adfff06a106a7e756f68cf8ea29f6bf0c62a72cdb215529e1c7bc9c"}, @generic="6b80451e93f8c37fbd1cbdf23a7f1b68d51292b4f430bb035b6fd5a17bdaab8dbf1858dcbf11a798165b460fa4ae3170ecbdda8df32740d934330fc981aecc408c173a4942a149eacfe7cb9f06421f90094fb3e94fad556ee25bd1fa2b7fe5794caa93774d71df090e37566485ccc650359a4a73bbac0d06ffc56659eccd917af8de64ad05488f1dc131185c427c7bcc2431d87abfeff3b051b6ef6b18073dada225ec1817f720bd793f40db9277c9f987fdd42bdd070771376c1b8268b96f22063e05ac389c6d26e4f0944d56c4737d", @generic="eab2ba8d9205511807b0dd083542336dafc5e9ce8d6d6dcf2132d1a08f03fd3655f9846b0e96d96db0930d8894cb3745dd00526c20970a6ab6fe4589ec6979bfa790c95378ce87c49257d3606c389300256d27fe77417431b55a915cb343615f4d84478d50eeda5f40ddeecb4cf3b4861763a273e666bba1a853e77731bfece0bf1d064a0c0813cfc498d671f2a06e9a35f04a4d57aeaf1aafaa", @typed={0xc, 0x7, @u64=0x100}, @generic="10c49e0fe691e1fb807943017378b71ae0f52382a098b8d23a05d2cba2a8319b3272a24c1fd5925521807bfb1a564d0b957e7e0a3504f65d5536e179da6f91ac6b091904139cd3ac9d8ff66a18607d3612a15a8d23139368d11bc332dd26dbdc5a86c818669ce4a671fb0aaf161427f19596f23712dc38cbd1534ec4e05c3040ad2a32377f9af30b75b4eed3fa57f719fe3cf5ff9e8adc1b29e7bd06b5", @nested={0x10ec, 0x45, [@generic="4caf41365dc83315e3adf2bb04ddc689fb672c96a168a182a8d9bd236165ee8bee75a7e567572a07e48a58555bb3f385f89cc82e773e2e02b8e2b1050b74b8e0850828c6050944b33f460533238e66ac4da9c78450958a55f27408428440cabacef19581e92909040efc82799cd9b922d4b4ac53cbf426835a6c0c5dcce23a02bd0aec9d6ba8eb502b3bc255356e83e7c404dc4cf646d63385e22911818275d666636e38dd603c58fca0a46477cf48e1b29d555dc3052d0fb00a80be3a285b2385934ddb8f20a257a87eb7a092268bd756c2b2fa1b2e1c659f37bcde502ad458884a938e9f", @generic="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"]}]}, 0x14e8}, {&(0x7f0000003ec0)={0xe8, 0x3f, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x3c, 0x4a, [@generic="729cff532570920c8d07b2433d770717360042c000bf7be29f88cd69483c5e0ad3e7a859526a955449917c046d16a9b65038e0d6aba19e"]}, @generic="a2efc82b61fbddbe621456811d46e9679afa0d592cdc79c53b5d4c88f4756ea13ff670d5ee3420b5cfc52cb0b57b706c20d78e1e2a1f82ea0be558a56532f45d756b3e18134b4c14e7fb3e1448aa041e41ba47aaa0255800c4a168ea3a3a961644dadc84a6485424a60efe27dcf52d69d7a0f8dc3ecbd9606607e846f4a8e2feeb05087942c91baff7bb5895496263a121d98640778fe32907496844"]}, 0xe8}, {&(0x7f0000004080)={0x110c, 0x38, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@nested={0xec, 0x78, [@typed={0x8, 0x76, @u32=0x7f}, @typed={0x8, 0x91, @uid=r4}, @typed={0x8, 0x52, @pid=r5}, @generic="27d15879d8b7f2004521a14fafd042449c5bd9a06a71c364c1e15f62f4328624eef192ae8208d17f2210eddb5e3f276bb4c78365b685e919fca55a6107de7e9ce062d91d45b57c1a91d92d15f4ea30f848f66174c7b94ee7fcb64fd282f4884359b890774b7a38864638e2ef6ac61f35dc56917ba6b1db98a2e569876b16989aa483f24a9d63d9243129b2fd2dc442c9cb45b7326fbced9fa0851c0628ddf8b95a09ad5ebda244cefbc0df3b0d3877e4c8d50f6930d0a2cd6c18690557874a047d4dc395faa66c3ff5a574e20dfc70"]}, @typed={0x8, 0x7e, @fd=r1}, @typed={0x8, 0x43, @fd=r1}, @generic="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"]}, 0x110c}, {&(0x7f00000051c0)={0x33d4, 0x10, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x164, 0x20, [@generic="240b811a2db8b4ee93d587838e82c0e1e2ab6ab8b7b9fc850e90f7a2209794760f1e3c7d5ff4f6e92e0e0de0ece2018f9a1d096652723d00f6d8fd608164943873e4471353", @typed={0x8, 0x17, @pid=r6}, @generic="f73effe45f674d08ca6e816745dfc26e5adc9a1e7d08c04281", @generic="6d2d3fec114c11786147ace6649eddba1262232b07679ea7ee2ea350540580b298a4dde93cdbe58562040f8240dd8f3fcb986072c325d311122eaeecf226dc6e19869b9c167d7bd14c8305a86c422e1d15661382f0e69e1110c0b0bd4b976debef98dcd7e979b483ed7af94f7a2612363fe6d9db8e3ff24320da0cfdff42bd38033553353b707b58782069750b5323877932eabdc6a0d3d6372e6363771c673f8b2e4a5d86f3e4d906de79123ec0a5f9f2df22fc82404e709b7c5122b6b93c144bd500dfddd749563c9aaf36ff0a5e436fae9c434bfa119c4d5e07da16", @generic="137d8afc0bc83d4e4e8d66120accf6d3e8232dccd0", @typed={0x8, 0x26, @u32=0x8}]}, @nested={0xdc, 0x66, [@generic, @generic="412235a3b903369e95baafc24473065774670a8b54291a6d56e265af79d5b92ef06e70e8ef29483e9930e5354a3e914fac7917cc71412c30a9a60715f94728617ab59eeea33660e8524c462e417048f74fb3efb05b0d027f2a97d95449c9202361f592a0815cbe13678dfb4e157b80e5fdeb8b5e55ee4229929d5f1a250055f9ec42f3860c73298e33bb33c40e6b93890fc40a7683be5b0976739be7d3fa9de826aeec857b0fb7c23eead55006cd8549766c9d1af0535e4fc0df175158a5ba8db74cfe1af8689195fc7d0fbb3f06", @typed={0x8, 0x41, @pid=r7}]}, @typed={0xc, 0x1b, @u64=0x1000}, @generic="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", @nested={0x2158, 0x3e, [@generic="b1eb8a92852bb271ae1b6bdd3089f9800d4bddf40177a6cd4af80bb98ab960b30dca2234588b2580b75df857a206e11a869f1f084866943557870bca76db7d677b6e270a7f9eeafd5b279e8973c415da08275125d180f102806da6e3ecccdbad4797ee19e04f8cad7df14798ec151feee22e26604948522630a5b9421c40edfe5ef15ba0c2046441bd2cd83ebcff1b0d951b4233151b7f482a1f668cf8f25078004824d32912251d8abe9a8431e0d3f087", @generic="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", @typed={0x8, 0x3d, @u32=0x1}, @typed={0x8, 0x36, @fd=r1}, @typed={0xc, 0x4a, @u64=0xfffffffffffffd08}, @generic="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", @generic="be7bd449f68ca7fc0ec18fd2a356c5e44dee5a81a861d42ecc2e965815a13764c3a14082d26f07af44212c2beefd25ffcc704c7bbe70e89098f52cad9f6a86d6f1acc0d5da1df646639e55e19f0d8e61c69720ff6fe1a9a659797306ae4ec4736e81f65827829a4539e50d6aea4b360d40402c714c225b74bbd3469bb2df826cdcd288d36d"]}, @generic="76bffc7ef0fbddad02fb420c33f9f65eff5d5f5bdb91c5849c451f63b0d8"]}, 0x33d4}, {&(0x7f00000085c0)={0x1380, 0x11, 0x10, 0x7fff, 0x25dfdbfb, "", [@nested={0x11fc, 0x7b, [@generic="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", @generic="55d59ce936c703c5ed0185515f7ed70fc4ca0d37b04f48ae99bee8cfce278fe95a159f28bb97e3c0b6bcb83de82bceaabc493fda632b7717476f0ca5", @generic="fb647e47abb246fc228c6d9257", @typed={0xc, 0x8, @u64=0x1}, @generic="229a0885ee5143935503974a85953fc09e0bc8e031e1a7f0baf6b2b18a864b131b850bd173f8c570956b2878a2ef2e14ed4f859e02c8c0299c0cf062b369f82288c6e045ec7a31bec8efd21f846b3ca76030c6de5ae43a9fd4ab2c43c585f10d57c5e07e4029d53e6363f8a201d48f6848833297defd19409068fedf3f00f601d43ce0f9a54c7a8de0ba43dcf09367893b02ee6e506ce64c96d9ec991387d61e9d090daf1b211c61c1e596ae7eff347e6a626eb78cba29f864792cebd096382aad5f7772836012df9154664ebdf02bab427efe1b73cd055d13049aed0f04", @generic="9fc719f123c7687801215f7f90d5c16abf40b4e6f5dad7ef59cfc07cb1d8fa0d858edbdc35d837845b3d314602a55910a66c70efe9cbf6584beec9e5220a21755f8624a25e53c9685e410f165259cd9e81ad2f0736948534947531486e14b0ed3e4ad9371bf4ff161723c0afdeace42f15155c89577eea76c9737cb7590cc81fc8440c5db18c32ba3f8d9267a2be55f22e691e417bf97eafb8d66e7972f6dd30c51d2a0be5470ffcd77bd5b2a1f60e8ca87af5cc21a7797d02993a7fc1e19e8a8981"]}, @generic="44eb527cc810838976ed4e2f0d1e532f89de28ff4f75d4d28bd0b327beae83362ba4bd6498a082d53896818931e83cc1a291910a1e6ef10b42fc3e60167c35e4ef93b2af8091e7ef6103e0ab3e", @generic="b8123388b5c0b016004b43a6151550cf2ca1dab546d146cd", @generic="1c4959e913e5277f33f5fc1916d0cce8fa00820f17a462da1901aa81220b35ef201bcf647dc17f417fa6b11bbb45cfda9ae62c76b2e8da815720e2c4a01df6237e38e3ee0fe0f3fcb1b768dd68bdcf7e389b04aecdebd3ed0e13f911f61aabd4e7a875ed05a247286cf01718b3b6d9dbfdffdc1707eb8eead730785ea886e42db56320f3cb0ee31bed392f3fabc47fd46dee666ffedf706850211da5bc6842ce5168db369cec18967ec08d957596cdb22fad4d48296eed4121a15049633bd454e6bf9cac9c77bc0dbb43d8a079d60cd262", @generic="b64e834cd5e70f0259957eff2cce67e91b30856d9f499319bd0efe0ded5b59b9417979f8c93634c0e5956aadb15ea1cf79c8901b07", @generic, @typed={0x8, 0x6e, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}]}, 0x1380}, {&(0x7f0000009940)={0x1cc, 0x27, 0x300, 0x70bd27, 0x25dfdbfd, "", [@generic="b08e1a4ecd225189d83351189d949c9a2b7bb25a1418c646644f39e2fd6a82c1cd75eba88aed79c4441edcd8f81c1b18900a5a0b4ad440ce0aa56a7c066a7280555b892c0712ab8c2023600979e672587422778f9b3be7cb25fb3faee90eec8ff395eac978beede85639dcccd977b284880a135dc58dc2cfa758231027", @nested={0xc4, 0x62, [@generic="178f1bc340416c997211cb82f4ab73948991f679978863b54c574ff8dd30cb85e50f66d0e3f71f08807f31b42d07830235afcc1c8fab5c2d1a0bae89431fa279473f0b064cb549926b60e1d8fb1e85f5b3a723ed9f157947e831cb8e5c8c84829a5473be2f41007361634b583fa82767e706ee000f38807a134f5f25ab3f19c236248f3c423cc057a3309f9d4ff3648d7a225e6aa6f46b48c50b4328feeec6984435fb133b", @typed={0x8, 0x64, @u32=0x2c}, @typed={0x8, 0x69, @fd=r1}, @typed={0x8, 0x7d, @u32=0x4}]}, @generic="4442cd1904687cf25b5a7dab1bdbc7d6b2a78b51cbbb0e2c31ee7745a9c1d6644cd5ddd0915e586fb2894acb2f09f814483b29dbe62ca686fbf765f6b4d092f4d590edc34a246e21fd92059791d7c761cdb8d1a13d175dd0a4b3c74dd84d981ba703b5233925c670705bb5cda1469e01c2c34441b35d5d8b"]}, 0x1cc}], 0x8, &(0x7f000000a200)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2000004301000000e0ffffffffffffff00000000000000002ac34cb5d22f05e025276135341ab844b2a965be69d07a39c473b6c1ac727e7a6e0bc74b757d98af576b3b607984f6", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40000}, 0x800)

23:35:43 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
accept$packet(r1, 0x0, &(0x7f00000000c0))
socket$inet6(0xa, 0xa, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:43 executing program 1:
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="02")
mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a94000/0x1000)=nil)
mremap(&(0x7f0000a94000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000a95000/0x4000)=nil)
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e)
mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil)

23:35:43 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8)
r2 = getuid()
setreuid(r1, r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000440)={{{@in=@dev, @in=@remote}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8)
ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000001c0)={0x26, 0x6, 0x0, 0x18, 0x2, 0x6, 0x2, 0x3b, 0xffffffffffffffff})
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000380)="290000002000190f00003fffffffda060200060000e80001040000040d000a00ea1100000005000000c48fb9795883cf931bd0c7cd5affeee4482e95be0ab76a00bdf3fbab0c7a0b5def85ac6b6ea6b70e0bacab7f16224bcbc1a37513b904f62920edd45d1f1255d9541e6b368113c897742575e44819297f3ebcef4d29961d60f389d373b41b8cd7fc5a45fa09d3a924e273b4ed75d841b3f0b2", 0x9b}], 0x1)

23:35:43 executing program 6:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000400)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

[  401.557308] binder: release 26285:26288 transaction 322 out, still active
[  401.566146] binder: undelivered TRANSACTION_COMPLETE
[  401.594438] binder: undelivered TRANSACTION_ERROR: 29201
23:35:43 executing program 3:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0)
read(r0, &(0x7f0000000280)=""/206, 0xce)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x2080, &(0x7f0000000000))

23:35:43 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={<r0=>0xffffffffffffffff})
syz_open_pts(r0, 0x400)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)='bond0\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000))

23:35:43 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x6, 0x6, 0x9, {0x0, 0x989680}, 0x1000, 0x1000})
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/159)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000280))
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x5ef0, 0x0, 0x81, 0x1, 0x100000001}, 0xc)

23:35:43 executing program 0:
r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0)
write(r0, &(0x7f0000000080)="a8", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
ftruncate(r0, 0xa00000)
sendfile(r0, r0, &(0x7f0000000040), 0xff8)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000140)={0x21, ""/33})
execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0))
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x7)

[  401.615027] binder: send failed reply for transaction 322, target dead
[  401.639730] binder: 26352:26355 ERROR: BC_REGISTER_LOOPER called without request
[  401.653962] binder: send failed reply for transaction 324, target dead
23:35:43 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
socket$inet6(0xa, 0x2000000000000800, 0x800000000000000a)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80a}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400005c9b7a00000a5cb41924b38b8d0bbd90145169b0454d15b181c9fff42fcbd1bbf409bfb60dc256fcea3ff31f0d298b52113875d9087351ff664f8dce6391872a8cc7177316bcdaffb13e5d595d08dfa30810c81258572cb2ae04a6bd2478eff631ace1a6c05293e64b0a83d95baa549262621aa3343818a94ce8345ca75c243a76f311d1350967d8dff5b1d56", @ANYRES16=r1, @ANYBLOB="200025bd7000fedbdf250d0000002400010008000900090000000800050001000000080004004e220000080009006d000000080005009b060000"], 0x40}, 0x1, 0x0, 0x0, 0x4c010}, 0x200400c0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000240)={{0x1, 0x2, 0x9, 0x0, 0x4}, 0xb, 0x9})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000000c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0xd034, @remote, 0x100000000}, {0xa, 0x4e23, 0x100000001}, 0x1, [0x3, 0x9, 0x3ea7, 0x2, 0x81, 0x7, 0x9, 0x5]}, 0x5c)

23:35:43 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x9, 0x2, 0x80000001, 'queue0\x00', 0xfffffffffffff800})
readahead(r0, 0x3, 0x7ff)

[  401.697168] binder: 26352:26370 got reply transaction with no transaction stack
[  401.705428] binder: send failed reply for transaction 328, target dead
23:35:43 executing program 0:
r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0)
write(r0, &(0x7f0000000080)="a8", 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0)
ftruncate(r0, 0xa00000)
sendfile(r0, r0, &(0x7f0000000040), 0xff8)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000140)={0x21, ""/33})
execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0))
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x7)

23:35:43 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x111002, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x400000, 0x0)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/pktcdvd/control\x00', 0x20000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6)
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x80605414)
fchdir(r0)
r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$P9_ROPEN(r4, &(0x7f0000000340)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x3}, 0x8}}, 0x18)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
openat$cgroup_type(r0, &(0x7f00000002c0)='cgroup.type\x00', 0x2, 0x0)
fcntl$setstatus(r5, 0x4, 0x6100)
r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
write$FUSE_STATFS(r4, &(0x7f0000000240)={0x60, 0x0, 0x1, {{0x0, 0x3, 0x6, 0x97d, 0x3, 0x0, 0x4, 0x42a2}}}, 0x60)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r7, 0x0)
ioctl(r5, 0x8, &(0x7f0000000100)="883aa8413f0f1e96bd9857f58d6fa11690b120d66470391e8a9c1c54802058f020ea641a704bffe03a03da7ee1")
write$P9_ROPEN(r7, &(0x7f00000003c0)={0x18}, 0x18)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0xfffffeb3)

[  401.744252] binder: 26352:26370 transaction failed 29201/-71, size 80-8 line 2922
23:35:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  401.793243] binder: release 26352:26355 transaction 333 out, still active
[  401.802692] binder: undelivered TRANSACTION_COMPLETE
23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x82, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=<r2=>0x0)
ptrace$pokeuser(0x6, r2, 0x5, 0x81)
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608)
r3 = getpid()
process_vm_readv(r3, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/191, 0xbf}, {&(0x7f0000000180)}, {&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/92, 0x5c}, {&(0x7f00000013c0)=""/124, 0x7c}], 0x6, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/184, 0xb8}], 0x1, 0x0)

23:35:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x1, 0x5, 0x7, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x20008884)
sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)

[  402.005367] binder: BINDER_SET_CONTEXT_MGR already set
[  402.021758] binder: 26389:26392 ioctl 40046207 0 returned -16
[  402.047159] binder_alloc: 26352: binder_alloc_buf, no vma
[  402.060078] binder: 26389:26392 transaction failed 29189/-3, size 0-0 line 3137
[  402.077772] binder: 26389:26392 ERROR: BC_REGISTER_LOOPER called without request
23:35:44 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000002900)='/dev/input/mice\x00', 0x0, 0x2)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000002940)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002980)=0x14)
bind$packet(r1, &(0x7f00000029c0)={0x11, 0xf7, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  402.094669] binder: 26389:26392 got reply transaction with no transaction stack
[  402.102180] binder: 26389:26392 transaction failed 29201/-71, size 80-8 line 2922
23:35:44 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

[  402.140961] binder: undelivered TRANSACTION_ERROR: 29201
[  402.146790] binder: undelivered TRANSACTION_ERROR: 29189
[  402.152558] binder: undelivered TRANSACTION_ERROR: 29201
[  402.158869] binder: send failed reply for transaction 333, target dead
23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000000c0))

[  402.212317] binder: 26409:26411 ERROR: BC_REGISTER_LOOPER called without request
[  402.223952] binder: 26409:26411 got reply transaction with no transaction stack
[  402.232590] binder: 26409:26411 transaction failed 29201/-71, size 80-8 line 2922
[  402.268350] binder: release 26409:26411 transaction 338 out, still active
[  402.278627] binder: undelivered TRANSACTION_COMPLETE
23:35:44 executing program 6:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='fdinfo\x00')
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10)

23:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:44 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
socket$inet6(0xa, 0x2000000000000800, 0x800000000000000a)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80a}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400005c9b7a00000a5cb41924b38b8d0bbd90145169b0454d15b181c9fff42fcbd1bbf409bfb60dc256fcea3ff31f0d298b52113875d9087351ff664f8dce6391872a8cc7177316bcdaffb13e5d595d08dfa30810c81258572cb2ae04a6bd2478eff631ace1a6c05293e64b0a83d95baa549262621aa3343818a94ce8345ca75c243a76f311d1350967d8dff5b1d56", @ANYRES16=r1, @ANYBLOB="200025bd7000fedbdf250d0000002400010008000900090000000800050001000000080004004e220000080009006d000000080005009b060000"], 0x40}, 0x1, 0x0, 0x0, 0x4c010}, 0x200400c0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000240)={{0x1, 0x2, 0x9, 0x0, 0x4}, 0xb, 0x9})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000000c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0xd034, @remote, 0x100000000}, {0xa, 0x4e23, 0x100000001}, 0x1, [0x3, 0x9, 0x3ea7, 0x2, 0x81, 0x7, 0x9, 0x5]}, 0x5c)

23:35:44 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc0080, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x43b, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

23:35:44 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x0)
ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x1, 0x5, 0x7, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x20008884)
sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa0}}, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)

23:35:44 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
socket$inet6(0xa, 0x2000000000000800, 0x800000000000000a)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80a}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400005c9b7a00000a5cb41924b38b8d0bbd90145169b0454d15b181c9fff42fcbd1bbf409bfb60dc256fcea3ff31f0d298b52113875d9087351ff664f8dce6391872a8cc7177316bcdaffb13e5d595d08dfa30810c81258572cb2ae04a6bd2478eff631ace1a6c05293e64b0a83d95baa549262621aa3343818a94ce8345ca75c243a76f311d1350967d8dff5b1d56", @ANYRES16=r1, @ANYBLOB="200025bd7000fedbdf250d0000002400010008000900090000000800050001000000080004004e220000080009006d000000080005009b060000"], 0x40}, 0x1, 0x0, 0x0, 0x4c010}, 0x200400c0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000240)={{0x1, 0x2, 0x9, 0x0, 0x4}, 0xb, 0x9})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f00000000c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e22, 0xd034, @remote, 0x100000000}, {0xa, 0x4e23, 0x100000001}, 0x1, [0x3, 0x9, 0x3ea7, 0x2, 0x81, 0x7, 0x9, 0x5]}, 0x5c)

23:35:44 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001280)='/dev/ptmx\x00', 0x0, 0x0)
r2 = getpgid(0x0)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000000c0)=r2)
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0xffffffffffffd6d, &(0x7f0000000240)=""/20, 0xfde4}, 0x2000)
r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000140)={0x3, 0x800, 0x822d})
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  402.335266] binder: undelivered TRANSACTION_ERROR: 29201
[  402.363330] binder: send failed reply for transaction 338, target dead
23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x80000000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$FICLONE(r0, 0x40049409, r0)

23:35:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, &(0x7f0000000040)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x34600)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  402.431100] binder: 26439:26450 ERROR: BC_REGISTER_LOOPER called without request
23:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x12000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  402.501645] binder: release 26439:26450 transaction 341 out, still active
[  402.510989] binder: undelivered TRANSACTION_COMPLETE
[  402.531203] binder: BINDER_SET_CONTEXT_MGR already set
[  402.541603] binder: release 26439:26450 transaction 341 in, still active
23:35:44 executing program 3:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getrusage(0x0, &(0x7f0000000180))
mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
clone(0x200000, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000440), &(0x7f0000000480)="a8611aa8fa34207fb2be6a05d2db4487928b841e0ec23c2494c3136a3cd5faba90ae45e14f415cf27984f17bce6fdcd15e694e15f07218cb02cbc4d156975659df2494db6aaec9ad20f18acf558d03eb8f71de9c2f31a6e65f73c46f4c49910b19ef44e2a32b633db85f6a832a1cb86a770061bd6c3867820a8bcb7ebbe22ce2f891be4337042b006496edb5487898c9f31e14229e560945e7bd4ed9216d0d5d90b09f1fc8c43a89703d6cea1e30dd352b76c0bdcc67f4c553224e22069fbd1478643971aa5d9c50f4cf73203768882b29205497d5bf1b1f93b3d6940abfb942b3512a825ae30c7bbc6eb89899ca75e43dd9")
renameat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00')

23:35:44 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
syncfs(r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x49, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, 0x5}, {{@in=@rand_addr, 0x4d3}, 0x0, @in=@loopback}}, 0xfffffffffffffc2d)

[  402.551398] binder: 26466:26471 ioctl 40046207 0 returned -16
[  402.557898] binder: send failed reply for transaction 341, target dead
[  402.569817] binder: 26474:26476 ERROR: BC_REGISTER_LOOPER called without request
[  402.587662] binder: 26466:26479 ERROR: BC_REGISTER_LOOPER called without request
[  402.611630] binder: 26466:26479 got reply transaction with no transaction stack
[  402.633626] binder: release 26474:26476 transaction 343 out, still active
[  402.642036] binder: undelivered TRANSACTION_COMPLETE
[  402.656932] binder: 26466:26479 transaction failed 29201/-71, size 80-8 line 2922
[  402.666801] binder: release 26474:26476 transaction 343 in, still active
[  402.709308] binder: send failed reply for transaction 343, target dead
[  402.734597] binder: send failed reply for transaction 344 to 26466:26479
[  402.741854] binder: undelivered TRANSACTION_ERROR: 29201
[  402.770230] binder: undelivered TRANSACTION_COMPLETE
[  402.783639] binder: undelivered TRANSACTION_ERROR: 29189
23:35:44 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000040)={0x3, 0x3, 0x0, [{0x0, 0xfff, 0x800, 0x264, 0xd, 0x5, 0x4}, {0xa73, 0xb472, 0x62e32171, 0x43, 0x1f, 0x9, 0x81}, {0x0, 0x0, 0x8, 0x8, 0x4, 0x7, 0x7}]})
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040))
fchdir(r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
r1 = getpgrp(0x0)
getpgrp(r1)

23:35:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:44 executing program 1:
prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x20000000000000c3, &(0x7f0000000140)=[{0x6, 0x0, 0x9, 0xfffffffffffffff9}]})
lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974792e75736572276c6f3a5b2c6e6f64657600b1b10577a1885f0987644ab61cf88f7ae9e214875f746f2a5b4a56fc96004b1a3fb96e4e7d81f2553bbb9ed7240f64f5a610146e814f0932"], &(0x7f00000000c0)="657468302940656d3076626f786e65743076626f786e65743173797374656d776c616e3028e4b3766d6e6574312a766d6e65743100", 0x35, 0x0)

23:35:44 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000000c0)="0a0e8a304f315f811e0000da52065bd9fe03006c494bcf2261ffd9dd7846f9a4496cef5a41ebcfb559f62b75f249e38108381a058b8e28e0c13ac0e462120c8d2990b9b922ed809feeb12aa3f003317323411cb680e8668bba823cc57d6d500ef0a6325238b1ac62f51d916e225ebf3e146d2aa8e1130602921ea3de308ffd3f1035d8dc87f9f1eeb3fb7b3eb876ba5f3404334bb1924f6643bfc7bd67f84d6b28ae27dc21d67b66a9858bccabdaecc6aa31611aa476ad7be35b5fe5876a5330a173f49847af")
r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x6, 0x4000)
write$P9_RLOPEN(r1, &(0x7f0000000380)={0x18, 0xd, 0x4, {{0x0, 0x0, 0x8}, 0x8000}}, 0xfffffffa)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'bond_slave_0\x00'})
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}})
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000002c0)={0x1, 0xff, 0x43, 0x9, 0x7239, 0x1ff})
ioctl(r0, 0x1f, &(0x7f00000001c0)="eee878dee0a538185619540058a1e3b07b5506084b0cf3bb8b2a9507c6c83319537823d1efdc3369be5c3b3bed93b4cc038e43e3aa615a9da84d6d09ff7279e02b9ae87794b207de9b0432af05a89f2b52a019773649aeeda9d0daf65b3f97217d126005d5406b30757faeb0ed4e38b3169caff83cd7472e2d48dbfbde2e3f015ecbdc5f8303b1a20cc25368355c70ee229094acc3838806a8e26c40e750ff2219cc949d39c36bf8d88d1de5a1619e2b3b29ab7e953e64a0d6310a6f220476c763d09645669154213839d3e1ed0dd637a56b828d5e")

23:35:44 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c04, 0x2000000000000007)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a00020000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)

23:35:44 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:44 executing program 6:
r0 = gettid()
getpgrp(0xffffffffffffffff)
r1 = gettid()
r2 = syz_open_procfs(r0, &(0x7f0000001400)="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")
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000100)=0xfffffffffffff3ce, 0x4)
timer_create(0x7, &(0x7f0000000200)={0x0, 0x38, 0x0, @thr={&(0x7f0000000400)="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", &(0x7f0000000000)="8ac92939628496176fb02723b8dd8742b1f1a380bdf313626a65e1c729f925516b7728a8ed7227f0d153c302716b8c1f22ebc7e118513ecaec1d808d5c03d59223f5926aa093abb8dcfaa200346489d370b5abe42dc17c34447deeca81f8382333425da134e8a787dbbba501f1fe34ae0014746c5ac744d55ed10954740554ab35fe91440b67b221c491486ff0ff06b854519d6237032a78c1c496a4983f14c0a4a6d58f119df8685a4f92d9b125"}}, &(0x7f00000000c0))
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000140)=r1)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2)

23:35:44 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r1, 0x2081fc)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000048c0)={{}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
fdatasync(r2)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x8927, 0x0)

23:35:45 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000002c0))

[  402.884531] IPv6: Can't replace route, no match found
[  402.899966] binder: 26518:26519 ERROR: BC_REGISTER_LOOPER called without request
[  402.919962] IPv6: Can't replace route, no match found
23:35:45 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c04, 0x2000000000000007)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a00020000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)

23:35:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:45 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
signalfd4(r0, &(0x7f0000000040)={0x4b0}, 0x8, 0x800)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  402.940932] binder: release 26518:26519 transaction 347 out, still active
[  402.958237] binder: undelivered TRANSACTION_COMPLETE
[  402.972865] binder: release 26518:26519 transaction 347 in, still active
23:35:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @fd], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:45 executing program 2:
r0 = open(&(0x7f0000000100)='./file0\x00', 0x14000, 0xa0)
write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a30dea212b7637b0be414e7359f8bf50ca4a634f3278cdece3d46a7780306ffcde41e64231a44559328ea0668cd890a9d4706f107185b233f4d3e4dbc1926ab3c7460ba83f89ce4c84a7f9a196d9e0e7294045e5ebacbe10c02a6e0f607c854d2f514"], 0x65)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
modify_ldt$read_default(0x2, &(0x7f0000000040), 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
readlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/132, 0x84)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff1000/0xe000)=nil, 0xe000}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="3fe757ad8f6c25ca9e62ac388d91cc8f52ad989a8d054404d7a22efcdcb927df4535c18e8f9dbaf25d229a53dda065c01cab78705df44268d122d1b5693bd30264b4ea5b82acbc091cc563395401b5261b7d77536c21d54684e434a8398473cc688b943a2357038fac23a5ee836261fbfa0e06d78d50a1c0f87fd0145457f9677b57092902be9198a5b3ed46172b761749f9b5da4216c7cd1580e6d609933bd161fc6aad15d844b095c6fb406132a8cfd9c7da42d284ffa3857628aa52ed0c73dd494b9ca672c7ca5f1f5b73c546cd5b3bdd177f4dbd9e0fa3e1caee0afca499", 0xe0, 0xfffffffffffffffa)
keyctl$set_timeout(0xf, r2, 0x7)

[  403.023522] binder: send failed reply for transaction 347, target dead
[  403.031947] binder: 26534:26536 ERROR: BC_REGISTER_LOOPER called without request
[  403.063275] binder: release 26534:26536 transaction 349 out, still active
[  403.071678] binder: undelivered TRANSACTION_COMPLETE
23:35:45 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = gettid()
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/98)
rt_sigqueueinfo(r0, 0x0, &(0x7f0000000000))

[  403.099857] IPv6: Can't replace route, no match found
[  403.118295] binder: BINDER_SET_CONTEXT_MGR already set
[  403.155003] binder: 26547:26549 ioctl 40046207 0 returned -16
[  403.155009] binder: release 26534:26536 transaction 349 in, still active
[  403.155018] binder: send failed reply for transaction 349, target dead
[  403.179623] binder: 26547:26557 transaction failed 29189/-22, size 0-0 line 3014
23:35:45 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x7)
writev(r1, &(0x7f0000000080), 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000)
ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000040)=0x81)

23:35:45 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000040)={@loopback, @multicast1, @multicast1}, &(0x7f0000000080)=0xc)
socket$packet(0x11, 0xa, 0x300)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x402000, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2, 0x8}, 0x1c)
lseek(r1, 0x0, 0x1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x9}, 0x196)
sendto$inet6(r2, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)

23:35:45 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00')
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000000)=""/9)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x1, &(0x7f0000000380))
preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0)

23:35:45 executing program 1:
r0 = socket$inet6(0xa, 0x202000000802, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='limits\x00')
sendfile(r0, r1, &(0x7f0000000100)=0x2000000, 0x10000000000)
pwrite64(r0, &(0x7f0000000240)="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", 0x1000, 0x0)

23:35:45 executing program 2:
r0 = getpid()
getpgrp(r0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1)

23:35:45 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
get_robust_list(r1, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000080)={&(0x7f0000000040)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, &(0x7f0000000340)=0x18)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

[  403.207678] binder: 26547:26549 ERROR: BC_REGISTER_LOOPER called without request
[  403.256538] binder: 26547:26557 got reply transaction with no transaction stack
[  403.264026] binder: 26547:26557 transaction failed 29201/-71, size 56-8 line 2922
23:35:45 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom(r0, &(0x7f00000000c0)=""/158, 0x9e, 0x20, &(0x7f0000000200)=@rc={0x1f, {0x4, 0xfffffffffffffffc, 0x5, 0xfffffffffffffc00, 0x4, 0x7}, 0xfffffffffffffffc}, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:45 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x0)
ioctl(r0, 0x5, &(0x7f00000003c0)="b7cb6f79a4981bc8b9b551cca463787ecb81d31dc417917706d4d7638a84a13b3f7a37e1ebf73c5a418bb7e3cbc76be838377a2a912c9a46bfa7b830e25722a4a890708c65ab6401b93d95d359c384df52dd5f5e97e5ccc343ae2bf28ddeab515cf7f1d4de9bc947099221a85fc5c79fec6219d9842c1121f1992d0e2e1a30516a9cd13f432f57ba8bca6d34cb35f1f574567faa1f939bbc1670")
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000180)=0x30)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000080)={0x40, 0x1, 0xfffffffeffffffff, {}, 0x9, 0x7f})
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000340)=0x4)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000240)={{0x7fff}, 'port0\x00', 0x20, 0x0, 0x80000000, 0x800, 0x7, 0x8, 0xffffffffffff7fff, 0x0, 0x4, 0x1000})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x200000c, 0x32, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x8)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000001080)=0x1e)

23:35:45 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070")
r1 = socket(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000380)='./file0\x00', 0xa0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000000180)="b02b94571642a6a95b8ee0e5e4134e71f253110778fe0b309440f44c539687fd7f522bbfb68472f1f1f4b46ddf81b632ce95f4965d5f2d7ab1eea6b6327c47c8d3a4b1dba6a98abb84063c018ca7f84fd1b4249e5812d6bbae9c25fd0e6f675fd048eda7d7cd5fbefbc91eb2acef736b60adf352c3be94ad02e5f5bf5ccad6cd022c0d4633fd47868a90512f1c66e468e6bb5984ca381f407a5d25d6e76f4cec7f0c1469c8e8c12b3f3bc03661527264cb486c62f8e423d5c65ad0aba89e54c6ab1c8eff585aceb06a46785c0000000000000000000000000000")
acct(&(0x7f0000000140)='./file0\x00')
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f00000002c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000280)="80333692d2c9a6242709a33e13ef700e7d7ab7a40000000000000000")
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
sendfile(r1, r2, &(0x7f0000000000), 0x80000002)

23:35:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
exit(0x1000004)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080))
write$cgroup_int(r0, &(0x7f0000000000), 0x12)

23:35:45 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c07)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:45 executing program 0:
r0 = socket$inet(0x2, 0x7, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000440), 0x0, 0x4, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001180)=0x80000001, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r2 = dup(r0)
sendto$unix(r2, &(0x7f0000001040)='\t', 0x1, 0x0, &(0x7f0000001080)=@abs, 0x6e)

[  403.381540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13617 sclass=netlink_route_socket
[  403.473172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13617 sclass=netlink_route_socket
23:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @fd], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
inotify_init1(0x80800)

23:35:46 executing program 0:
fcntl$setsig(0xffffffffffffffff, 0xa, 0x36)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0x0, 0x11, 0xfaa, 0x9, "cbcb9501fcff1e2f894393d13f349ba8ef63128f8b8d3071ecb1dfa37293b49f"})
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000640)={0x30, 0x5, 0x0, {0x0, 0x4, 0x4, 0x6}}, 0x30)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, r2}, 0xc)
ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000200)={0x8001, 0x7ff, 0x9f9, 0xffffffffffffffff, 0x5, 0x8000})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020200090c000000ffffffffffffffff02001300020c00000000000000000000030006000000000002004e20e0e3ff00000000000000002402000100e00000010000000200000000030005000900000002004e20e00000010000000000000000"], 0x60}}, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000400)=""/188, &(0x7f00000004c0)=0xbc)
unshare(0x40000000)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
connect$netlink(0xffffffffffffffff, &(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x40020}, 0xc)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280))
mkdir(&(0x7f0000000980)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
unlink(&(0x7f00000000c0)='./control/file0\x00')
r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
lseek(r5, 0x0, 0x1)
close(r4)

23:35:46 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="48daef0afb488626248648fa8b159b983afc0f6a20add17302767bcf5945880d25291fec13ba757ad2b87e20e5e5bd89a03416cebb55bfe1c42084f3b5b02900380d00e2830e31090d8b9a402250", 0x4e, 0xfffffffffffffffc)
r2 = add_key$keyring(&(0x7f0000001480)='keyring\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$instantiate_iov(0x14, r1, &(0x7f00000001c0)=[{&(0x7f0000000380)="70780245694e44a7bcca81c153cd8d0bfedf2f589114f205db791d8de078e7c1e765596912dfb8a9f7677505cf6e29e9f4cf6db9dd0f84e68b4c3ccf377b8f1b74901f10171803dc34505bca65fae87643ff88ddf06c85aa7361c708d34cbb05bc9aebf1bb142bc6436529992ec5511bd5e50e4094271318443239c6b2cf4edc7bb81142a2a95e0b29f624c91fdf188b84bcf83ddfafdef1809f81e18e408a730060492593bf9d4804ed3c718188227e644e0d4911c0aa83b64d66ff697b27f6e322e164adc5", 0xc6}, {&(0x7f0000000480)="c8bf2d9f7ac90f2cbb20b9a143ced016dbd34dab3d3678bf3202233ab1550917c5b1782f832d231db53fdfe050e195b8a635d2346a6dc6bfb90b991526d3c1b5cd85adb09054eda0d546520a6da2b83b48af400441870420ddc786537f9bb83019098c71becb21ee0fd6d668e78d965ca2635f8fb95e5bb01d7e8acd9368ad63b528b519001e6a52d7ea6479bf6175a1e344b582a1f8c64b5dd3bdf91d1aa0563d45bd39b393a77966d6db1785c6b380648d87fb9d19acb1212ff2d2d675655cbd99c64ea2420b0b3044e2826eb27ff06b2a3d6c05a6afacb3b3138c995a3f50dac25bda49d03f98b1f0366891fd392ca49beef57c6961c0061a52e32e0d9ff9539645dcc97bbec0c7aa6866ebd17ffd4e11d213684038625c103e3c41f98d39366af02a6b67ca761074720c11a08a4bab98dd3aa6e60372d3a482ef208c1f873309831b0e5a77c2074032bd9b6ece4dca681ee7aca0bf0d4ea7b95480e9711281d0bd652e607318db5341580bfebb9e15d6932ca5d499dc43cfb79b886b804b0ccb64979dba40dfbe4e8798582ea9d0b375b74c559fe4dacad92fcdc70308316b650509502e04c42b8c2c4e0e0f207ccf5ad39eb29b558edfc040eef63d70aae7da925669c703a1808ee8cfe25b5bf0a9f968fec9325e809c5055fa9b718eb440c6f5a367ed1cf2ac3c9004f81e04b3b1a1ca2f2604d5fc329de2f17cbcc37d92cd351dbbce8437a5155be70a4225e42b8c5df7ab17573979d8ec0a104adda9f372dbf1f280cbbc1e554e1deb20ea0dd9b74b7e6bf5dacad7599905ccaee88f39e8095fc3c96467c0e0ee94b0cb0fd6d49a08ed9636505be4e9a4e082ef85970cf80898b1bccd7a2e0748fc2251004ce6cf7bfa9ba61fa61afe8df3ae1415804f8e061659c8f24f1c23af087d1d242781de00cf056479f9eb5763ae6b1ae37655602548a1423fba201de49d6f803f51e0ac6a4790554fe18cb1e0ace9c6403a855bcc9169d3896465b528287c8d99120e46694bb4c57720200b5b7c3790be10185f12691d3384366a00c9145c101372f8f649969c2e387ac56936ae1f997442f86fdb7ec2cd7e3cd20eb467b8303c280a19c9d236677fa66697e8315c6f9fe27ef2db003ab722887e5c5b5abc8f3a49d431dfe098a12d7f7032e1e7772b70c4d03491954faa8e8cba0ec12b0306db8c2b28dd85c824896b8113c31da14fc4636d1976d16954f718054d4f90b202ecd4a9de0b70d8e91e2a8b6c4389f5b08a36b6d6f9e661661c301a8c0b9f933960c1192cc9acfc5d3ac5f49e12d0949da4583004f90f2a7d2681391d14ff1c3a67aede7448d2e8604f8d61da726587e092c0219d1198a7046d2a34ce0aebaaa46456111888716603b0cc341d51b094fdd9a6de73de0605f5a4366ea8a3b4aae1607285d0ab6708020e4f109acd911864427fd7feff99c5a0f26307f2b744bd4015449dcb0d8e19185c5dfc13fdaba528da23029c6f339a390800344e67ca8cb85f48dbe6f1a5329937bed8d356f6cc4b437b10c9d447cdb494d9bb0136da057cde22669a63b79a24a6c0299d003ee7c7846d5a604598534c5b2f81dcface5fc633f0efca1122e8c08e71f0f2575fda90abe04784d0fef0a4a63c7fd9892faadfbe63ed025464dc3c31f489b492d74e7cc89aa9228b8c7561c4fba5e332c29ca47379f239f28f457bd80b6bddfe97eea2d174a6e60cf98eb5da7d95a9d794b6872d78909d97ad3ec7aa8728c2c2b800c025b4e4172fe23a5852ccefe425ceceb8245a84de42e36a7fee8f8ed1560fce8e57b6d3ab184ca948bc2f6cf4373d1158b5232b414590ee14817e15e79ea00bfd7a9ba0695d7662a27cc113253c79383f3be96a6ce824f81259280b90cb9f5a4ac878a7ee500ed8b6cfa2bfa1e8b207e0bd3c72595f7075052e5943f1af56747abed79141182685186179cfdd04b86e23ef8e8624327c00d3f2c1c76a0d573dfea9b1e3cbca4cda0b480ccd4c4d14ef15d97f11276468a01e23166f61c0005a1aa48e977e97a30e6ac8ec024bdf95de2908f4c287a854b0ffcd460e6900d4126108e093680b5be43d93dd58ba6eb19adb777a53b257e5e3acdf66ead833cc4540bde44e8983f9135bf7c514346156f261813fe1aec32b3f751d476b02b5ba6b7310555f7eee6d60910128ada2d17249363c362a1b7d00acf9d61d09de59be1ea419d7c13cdaec945c3fb64d1fd2494570538bb328dbc379126eb1df64d6d07612e51a5c4872ee199d48c8d0ae457580babd4e4853555811e606df3c8d320017495f953a72f325106769364cfb356d9689bf5ba39fcf323ee2765e8dcc89aae14947f22bf657cdb608d327102e349a0f9d478498d470fde512c921e024421a603290e949e66e311d34f8de18a53bc67c393d0a29fb3631c8b52bf2890289c75c62976354081ffca00c2f4f2209385f9a4552f7aba58bf41c72ae83d0b01a484146bbbefe23b048898ae95e3f7308deac03a3aae6a3ed6036454f817aa60bb0d2bbfb2b616c3a398d0470c32a9dc5515fdfed028f520e33e8399c6c06ac3abf151aabe21d37150cb587776bc7e0730f454b1ca97459ea18b43fe368790fd8d3096b2438a3e20b151cccdf5e950433a5889b6d6af99f2cdd6d082cd69926bd1403d87190fa60a0ffa1cd1572d373ca4459cd6d8ad77f02e13a92e67e1dea9c416b10245fc5001632d4bba48983c946c2e91d32b25e141b50df1031deb8dccd8ee5d815ee72e8e349b3b5b589c2c9d74afa1d6f0343a956e3374c8e3bd0c8fcaf413b10cf4b4221bb4a292efad08dbbf7eb4cf11d8787841fcf93cef6b93060755e44f735c375f266ff657f7bd01dc50a5d1bc6cde6638c5066ada058bfff7463f950923b297e47fccbff3151cc593bead9dbafbdb20ac1eb395b4a7f2d2a71d7b367bf816b9aadf2717b17f427745ed49b8c95fe95741cf9b995ed6144fbadb94f03306b32f852fe73ab04f79cda65ca348baa05e7670e4a8a39134a604abe9e1999f0cce8e70c8d6e6e30da796b99074b3f0e9bac78614df977eb1f512d32e8e872a42ec7b16c973e7948339df034e1b1bf9cd888a0c48f44436c83ee5a99bdd4ce378ffad10235ed27d8028dfd514e49a2275e42c841f430ba94f116f5caef9459b3a97536ce674ba082da36063692390096b46e1b74609ec088bbc759379c41323e1c14df543a28a3bbdf24edca6f13a5c8900a3373d778c9865fa01337253dee050fb35495aa855f8cb9fefbc6f19c365bbb365fb010b1f6f1ba545621984c703e03c5d20661f868aa6d88658a0c1d055f6a27f78eca641fffe7a542bca01a564b942245bca683a2f42dd54cd95abdf3ae170f20588843c32d7e9ea88a37852fb70c7222a09c4efafd3ee8259c1d7d069c7f1ef71bf5c60bda3687b42baf21f6222cd3c28417d470e2b3ffc53c7834051b1987b2c921d622e1c14275c33e4dd5f83fba93b5e05c23a1028721ff22584139312f27af703d1afe72294a115526bb3221bfe2c7e2c2462c6865e03a23bc01e48a29781708f9321fa0c5d347a1a35e605bb5844d491b42490b840e1b21b973e49c312f2f334a5a8273bbf27cb04729943b78ed7c268d2d524928775d3143acf148b80938ccf6139a5c81faab072cad05a6fe581bfa3adff1c1480f4d0ce43d8ec68a4af2d6f5c65e649de8dbe950153a22e0195d8e2fe39bcf046a4c19bbe12432f7ae96235424fbb42d4aafd2aa4f2fd795571c23877414f9d8d992641235ed6916330dd9f7997a2a6959fd4f853d88071acce98c70ddff02aae588c63cb7f4b7a0f0bb3dacc2d226aead7e8c7b64714d11dab03dcddb197d9ca840f8c9f8dadfa6c9de3f1a706d024d46c018bb490e21183bb41dde6ef478ddc3525c953557de99202fc059ae657e9598c92295612fac3b950f56824266bc90f9b4f8603f36e8fb7914928c88c538661dcbf0f0f103df6e33641c5b225d0f700c41c6526e87d604b9e2ace0211f683ff266f18bf655667e8770846d79edd163b78de407c36173c273b8b9bac29bb91b80ac8f3f225aa3a5df841b79b0a583516858ee8f19a5445553f1d658b6433be23b8f8908c1f0d7868c591b82e0defaaff33b4c08050b66374667ce1a792e694ffa72ded55138b33c1d950542a1060290f4661b54e4a8afffa9964eac6fc5a5446785a31d884b16fd5d963fe0a1efa87387073b802a7c806e6962f400fa5ab82527dfc52881044c0147652d3a18af5528ea643e1f58c92d1934307b29b9a47c2c08727352b7612aa11d3804313c616544d210fd27b07bb65f05b7e6786304a932543702cd587ff17cb15a70b62e8b4d5a653f2432292232061da3a2365a94875a82626781859046b9cb9ca5f20d8a8549791523f270807ede96906ab68c19b2a4aa593043681f16f810bcd4fc04ce1fc737a1650323bf8bd2d412cf75fb236076ce18a01824551d32d17a7e04aaff6cb33f6dd335f909a9e1bf59502e1d3c60f55afa67fa0eac09be5340a2ae0c3b77789d06561c6417c3fd2ef38acca005a4eb6bdeb7308f0689c85c37c632473fc90f9080418441ba42c59480ea64db551cf2225ab28baf0212d78b8dea6815f43391b88cf1fa15ea1b7f0e215cc6b44218af253ae97ca760e4f902c0a15829bb4f61b5ceaf2b476f011a5c5be5c604620f12c35f8c6298fe8c900f4284c192e1a151724d01faa83825ba5af175e12430d8931b7efb6e404b3b6ebb3b82102bd2724aacdff79dd8632967e88cf653588c1f1d129bab85221dbc14eeec12ac1d49aaac59a3ba7079501a900ca3485dc13d343d9327915706032dbe37f16ef2d30a946db7956b0e9ffb59d7147e5b9f23133e5f1a31f8c98a5f87305243c6c91cee9f18823f022b5c816f7c770dfb6549c556f7242c45797607bda3824a6c3b7124570d435a6dd1d5d45bddb932907c758321059e198802741941cf1eb002cb42d605102d6f62b8961539583f59a864977e432d0496624333c92738141463fecdb7d30d16408fcd25565f8d90506c101eceffb6e658ec37765e6d5fb19c3b86b6acd5971affe0b6de196cf6f303427e1b4a07c830387582fff4396d20872c8d907958c3f85a9e53376d646f9f36643bb4a7ff7abd2032affe0304479fecbd32b5bdd1f22d10c35b00d87cc1cbd46476b0c67bffe35c7113ef6bcccceb7d5976e80e979a7db85aba7a380a4b62d927c8875a6517cf1f17f09fe6b42574ba706929a85db7753d24684a093e1ec0bcf953e3cf934a71b3826a4a737980394c090033688d8d988a2f693901da91b552c0685ed29a2626e3729226f3062d5837363a7be2366172724e820b1efa00286fdf1f07a2cb5f0b95697065a0d48d99e207b59f0ef7e1335bb2c65af7c7562c9ee0040471a23eebce711ed3ae1ebbc55783b44fe7dd8f3727dc2df1b92301df9c0017dbd39ef8f1cc8a8fb8f1f1f784de6c58724edbbf5522338a6d1a73488e7d4de0d0a9297efde1d645b31b676630408f8df70308b4496c4b791e001d61a285b3c195c5d09451ba735c5a8d698c045095f6575117ee4ce556194b152526bd605e7da7c1a2b31978269a06b5a6c586e4e9539bf9a511f6c6bcf054c84d9db16a0dc8f649c5705320c34685071e2c0ad269169c8e7beded2c23fcbb6503862382a9ca3e68a621b52ae2366c67c0118324449372f33f51bc91f2128d80ca1bacb4d75a4eba4250926b3bd9e2934e4c43ef39fb0ea7ba4e9f0dc0c5f2d51d4c9a9547507bf5051b0e79d529ce179a", 0x1000}], 0x2, r2)
setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="d25b72abbf5bbe611a412b930b9f559e4921d203ebe65f06590dc395e03d48a4549415dc8f3cbd54c82a712c0fd5925f0147483c86cf94282f57945b7b9071e842bb596841fe0d3eefd51f6b6a798f5c9601b80be7d89d88b604d5e4fbde4ed0dff776c9114299d0c745848723baa9374913e5c8c56f5230551d839fb5bf691f8e1cdcbf2a93fe50416fe9d6ee344293d22cc1", 0x93)
bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10)
shutdown(r0, 0x2)
recvfrom$inet(r0, &(0x7f0000000200)=""/179, 0xb3, 0x40000003, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x70a000)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00')
write$eventfd(r3, &(0x7f0000000040)=0xffffffffffffff81, 0x8)
r4 = getpgid(0xffffffffffffffff)
prctl$setptracer(0x59616d61, r4)
write$P9_RMKNOD(r3, &(0x7f0000001500)={0x14, 0x13, 0x1, {0x4, 0x0, 0x2}}, 0x14)

23:35:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000300)=""/4096)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
socketpair(0x5, 0x2, 0x100000000fffd, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001340)=0x14)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4, 0x4e21, 0x0, 0x20000000000000, 0x7, 0x2, 0x20, 0x80, 0xff, r4, r5}, {0xadc, 0x6, 0x1, 0x0, 0x5, 0x3, 0x2, 0x2}, {0x95, 0x1800000, 0x100, 0x5f}, 0x80, 0x6e6bb2, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x4d2, 0x3b}, 0x0, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x3504, 0x2, 0x0, 0x0, 0x6, 0xfff, 0x7}}, 0xe8)

23:35:46 executing program 6:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sw_sync\x00', 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0xffffffffffffffff, 0xa, 0xfffffff7ffffffff})
fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4)

[  403.893704] binder: undelivered TRANSACTION_ERROR: 29201
[  403.915503] binder: undelivered TRANSACTION_ERROR: 29189
23:35:46 executing program 2:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/125)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

[  403.949898] binder: 26642:26644 ERROR: BC_REGISTER_LOOPER called without request
[  403.958503] binder: 26642:26644 got transaction with invalid offset (56, min 0 max 56) or object.
[  403.975673] binder: 26642:26644 transaction failed 29201/-22, size 56-8 line 3200
[  403.990052] IPVS: Creating netns size=2552 id=26
23:35:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x80800)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz0\x00')
setsockopt$inet6_udp_int(r0, 0x11, 0x40000000066, &(0x7f0000000040)=0x9, 0xfffffffffffffd60)
nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180))

[  403.990762] binder: send failed reply for transaction 353 to 26642:26644
[  404.006064] binder: undelivered TRANSACTION_COMPLETE
[  404.011466] binder: undelivered TRANSACTION_ERROR: 29201
[  404.043881] binder: undelivered TRANSACTION_ERROR: 29190
[  404.123485] IPVS: Creating netns size=2552 id=27
23:35:46 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file0\x00', 0x0)
clone(0x20000000, &(0x7f0000000080), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080))
socket$inet6(0xa, 0x0, 0x0)
mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f0000001400))
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f00000002c0)=""/4096, 0x1000)
socketpair$inet(0x2, 0xf, 0xaf, &(0x7f0000000140))
wait4(0x0, &(0x7f0000000100), 0x40000000, &(0x7f00000001c0))

23:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @fd], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:46 executing program 6:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x200000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000002c0)={0x2, 0x7, 0xdfc, 'queue0\x00', 0x6})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:46 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

[  404.212874] binder: 26678:26679 ERROR: BC_REGISTER_LOOPER called without request
[  404.234407] binder: 26678:26679 got transaction with invalid offset (56, min 0 max 56) or object.
[  404.251167] binder: 26678:26679 transaction failed 29201/-22, size 56-8 line 3200
23:35:46 executing program 3:
socket(0x20000000000000a, 0x2, 0x0)

23:35:46 executing program 7:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000140))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
clock_gettime(0x7, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0x8000f, 0xfffffffffffffffc)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0)
getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000001300)=""/4096, &(0x7f00000000c0)=0x1000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:46 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000180), 0x4)

23:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x0, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  404.259185] binder: send failed reply for transaction 356 to 26678:26679
[  404.281781] binder: undelivered TRANSACTION_COMPLETE
[  404.287533] binder: undelivered TRANSACTION_ERROR: 29201
23:35:46 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket(0x10, 0x0, 0x0)
mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0)
mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd)
sync_file_range(r2, 0x0, 0x4, 0x0)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0)

23:35:46 executing program 3:
r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x4000)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000200)={0x40, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}}, 0x88)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x3f, {{0x2, 0x4e20, @multicast1}}}, 0x88)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0xfffffffffffffffd, 0x4)
creat(&(0x7f0000000180)='./file0\x00', 0x82)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x3e, 0x0)
accept$packet(r2, 0x0, &(0x7f0000000140))

23:35:46 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000140), 0xfffffffffffffff6)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x3, 0x9, 0x2}, 0xc)

[  404.313960] binder: undelivered TRANSACTION_ERROR: 29190
[  404.350955] binder: 26698:26702 ERROR: BC_REGISTER_LOOPER called without request
[  404.381882] binder: 26698:26702 got transaction with invalid offset (56, min 0 max 80) or object.
[  404.409168] binder: 26698:26702 transaction failed 29201/-22, size 80-8 line 3200
23:35:46 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getpeername(r0, &(0x7f0000000080)=@can, &(0x7f0000000140)=0xffffffffffffffcc)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0)
getpid()
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000))
getpgrp(0xffffffffffffffff)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f00000003c0)="e20e2aa8a9509c60013824c283a5ca0cebc539f95de40f25904fdb6ed25feef842357f4033b0b190016fe5b941ee61d1c5eac27a7fe31359e2e112cd97af3b097ec05e1beb80273df6808d3ae2a10e30aa83aabbce6e4f3a51a0943986f117e963967afb8e3e6bfef4e73d0c6418b71ec12942")
ioctl$SG_GET_NUM_WAITING(r2, 0x80086601, &(0x7f0000000040))

23:35:46 executing program 0:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r1, 0x8200)
r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x0, 0x0, 0x7}}], 0x30)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000280)={@mcast2, r3}, 0x14)

[  404.429640] binder: send failed reply for transaction 359 to 26698:26702
23:35:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x0, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:46 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040101ff0080fffdffff2e0a0000000c000100010000007f0000010c00020003de369ddedb0000"], 0x2c}}, 0x0)
fcntl$notify(r0, 0x402, 0x1f)
mlockall(0x0)

[  404.469903] binder: undelivered TRANSACTION_COMPLETE
[  404.475228] binder: undelivered TRANSACTION_ERROR: 29201
[  404.523226] binder: BINDER_SET_CONTEXT_MGR already set
[  404.534466] binder: 26728:26729 ioctl 40046207 0 returned -16
[  404.534469] binder: undelivered TRANSACTION_ERROR: 29190
[  404.559340] binder: 26728:26729 transaction failed 29189/-22, size 0-0 line 3014
[  404.571752] binder: 26728:26729 ERROR: BC_REGISTER_LOOPER called without request
[  404.617985] binder: 26728:26745 got reply transaction with no transaction stack
[  404.634236] binder: 26728:26745 transaction failed 29201/-71, size 80-8 line 2922
23:35:46 executing program 2:
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x401}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x9208, &(0x7f00000001c0))

23:35:46 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/82)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000010c0)={0x77359400}, 0x10)
r1 = socket$inet6(0xa, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00005c8000)="c340", 0x2, 0x81, &(0x7f0000e66000)={0x2, 0x0, @remote}, 0x10)
clock_gettime(0x0, &(0x7f0000001240)={0x0, <r2=>0x0})
recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f00000011c0)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000000140)=""/112, 0x70}}, {{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000028c0)=""/87, 0x57}}], 0x400000000000313, 0x121, &(0x7f0000002a80)={0x0, r2+30000000})
sendto$inet(r0, &(0x7f0000001300)="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", 0x1000, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x2}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r3 = gettid()
tkill(r3, 0x16)

23:35:46 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/11, 0xb}, 0x11c)
write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x34)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x145}}, {@max_read={'max_read', 0x3d, 0x52}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2c0000000000000}}]}})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2471)

23:35:46 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r1 = memfd_create(&(0x7f0000000040)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801)
dup2(r2, r1)
r3 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x2000000000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/31, &(0x7f0000000080)=0x1f)
write$sndseq(r1, &(0x7f0000000080), 0xffffff17)

23:35:46 executing program 5:
socket$netlink(0x10, 0x3, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:46 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
mkdir(&(0x7f0000000000)='\x00', 0x90)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:46 executing program 7:
r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000))
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4800)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x20)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'team_slave_1\x00', 0xff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0x308474d34bc034d0}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000001340))
flistxattr(r0, &(0x7f0000000040)=""/149, 0x95)
timer_create(0x3, &(0x7f0000000100)={0x0, 0x30, 0x1, @thr={&(0x7f0000000240)="2f526cc9ade4d84527540e00a9249d2c696f51d3dbb196a4c1c8b174699e40ac2924c13b8213161fa362e8bed02a47709c61ff4801e6188f2c2c83f596c0d4127b9d9e1b5c5e03976ea9d73f758fa2f6a3fcad0debc4e400ec01fd2b6f578466cecdaa677479de4fea8d14f5dfac0657c18f627c4cbf3b0408d65337cf20d7dd18f8ff8739c2437e4e838c962c9849f39f512f4b41f08961b65082fa36eca79600b5dd201a125bb7defb349d028e353c99a6d9c78b581065847a5cf37e79b75c8d2ad455ff178c7b560cbf3c593db693414b6271b489ae1b75ae98da2f31e2c4cc", &(0x7f0000000340)="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"}}, &(0x7f0000000140))

[  404.849021] IPVS: length: 31 != 24
[  404.853189] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  404.877743] IPVS: length: 31 != 24
[  404.883171] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
23:35:47 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070")
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x1, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

23:35:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000340))
splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x3ff, 0x9)

[  404.900451] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
23:35:47 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080))
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xdfffffffffffff01, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

23:35:47 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0xc, 0x4, 0x6)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x1000, "eab317879d41816cf8d44d229bc9e864877d20526be481958c7b10eb80db2e67936c4c8a2585a2171a6ebb0872ea450e254d0ef612b538ab1ddc109a833a9d085eeb67fb68119c4b1f59f4e9086f0b47c4b47f75f5f2f0ed07cc066c298b6ac4cc1a073e209d508339009697c51c8d526eaab22fef081b29e045ba8b12e437e95ed93a23c16f7a71067d29ec11d26672c02bfd742c78ca7ca598b0c4d6c2bb73cae48effb5e0640d60726b18ffac373b3124e44ba6eab08c94816e7d4609b522cf54aded64b33a9bd65f05136f3ecffb5fea0b293fc87f931d94665f1a4478464e3200fd6e100eeb240efc9c663a079defed537355e64b8e4acd4a86feddeea3e36efd4b446370ae0e7c6410f5e41ccb3d0df209a24e1977a4bfa305e41ddd5d10b427005d76381b96f66b514db99eb37102f77b14f857a3b9404128c17a5a63b1f00cc47b6941feaaca2d7df3c38d105f047837e31499d50327fdacd8960eeb29dc09c3ec8769311fec615b55390c6080d0762f3a7ae9a99d342fcd1fb5a800c26c9f16bc66cc181857a3bdbb0b1c41d5b8f372c14d7fae594cdf75066c4e7ebb132007167a40de17ae45986ccff4b918156f2e613feb7b91e5c952f0047d491cc2ec1f8fd1287efc6613fe82f5df8bb518b74bac206f36cbeea7533c159c7d2902f25e90134786e8f1ab343a98b34f5ca99b98117482716b6e59acb274eb2e3b819b5ac405dcb2267a1a0b69c3d88fe7e33a0f422c2fe47eb8a3a33dd2e9ebf554a10f4b56bdc34141b819c6ae3afccee47903f5b15c0326873651f86b3bf538e20143ddfb76dace438f004db5c76c8c9b75f065c0363a7e0c954561befb78c4768c1578648192a950499875c1fb9568492f75a76d1cf6ac30d8e23683a09fcccd5a9bb5dc910318593da2b765c4cd4dd162b1ccf411eaf429f227f858147b2c3db35c845d989e074d36e7e412b312333b8915fa076747aa1d1b6e23d694c1d4205390ccb2c2247c287c8f6e7d56ebf4cef2db27aafb09c4b7f225e2b9df3e65ef3c78ba269175b4f5dab925a2885ca827771ed75a8fed1e99b681f7f60b7e33eba850787582e3e4d6865959eaaf1c5220cd42447491703494f761151ee5a8e394d09fc37cc8054483cb12e10ccd49d6007de0d8cbe9db57a7a1d25e3ff5882fcfe2e714049d811222239d8cff082be28b56562a2889c0a718c98ede3b59abdb8ae6b954d56e44b6e31c8b297d8a3985b6802f6492dc26524d552eb6531e0c4a8f4a8debe089b3ec1781259bd53712a2c3496f940c7f4b435981fe1c12c875bd5a95dd1b0df3bcb522a6e6ea8568737fa57597711e329cc605f90f7ef2fdddef3cff769d633887340c7870a82f3714914a508e0ab55b6059abf59c44177e195893e5af42f4c313616874ad31fffbb4f65862fdc639d5eac2936be02573214470c92f8e991839a69b63322251ebb02494a31a0a8f63f113c9ad28775dd733cbde3e3f5c136df38dd748937957f5a99bc19ae07cbf32b394f3ecd607287e89f74bc85f0ef31f51d2cd03dbdb6a128e5132ca67f35c977508ef6bcfd611772d44ac7ee51a5b06dbaf3bc2243251b7cb418e159a28e683baecfc5a865a5d1368808d27c5cc8522551d670a661cddf050edf1c3933f3e48e4af3a23697991d7ca6ff5a307276a0ae64d8ed359ceb4e37e5510334afb9d514772c84a6807a5e6fe2dea0cbbedfcf2b0dcec109d6fd07a8865261eb2a7e3ba59e4b70ceeaff348cf03e2ece6056a9cb874b9964dac0109e4cbebba45b2a354deb73d53906c05457a27f2aab5e65b5fd8dd38f87b50f3d9865580f9df29950160e3c4b6d255f9e5ad8444e833e6bc52886e3b463d97f4b4c3289ad11967070e76b844c96e753336330e8bfd139aa351a76789cea5fcaab1da321ec3e73768830c706b8384d3d27690c23ddb1ae069de7a5adf76c428c0c094806479c02a8fec77104432243950375faed65eb45ea5ae88fe6fc86d68662a5c3e810b079d976ffdacc409dcc55bd2797fbcd3aaa843dbcaf6d15ec0f5799a02adfb4bfa3150f4cb8e665761370a0e8e59e0f7ec9ed10c96fe55e5d691842f1f84e36a3b1f7fd8180229413e54c2ef86d2f570ab9e886c6d46fc39328a852b5a71c72c5c7a11eae7fccd3a9569beca7fa225819860bf971093dae33a7bf26eb9facd674126048efb9ee23207fa43f0b67592806f7c8ccd8895f03d267a8530fa3fcf94763e9b18b2e21931e381af72cd1bbc80805c5bca22d820b8769f752eeb2967edfbd9d4783c6afbf5afcb70ccf64afb4d51814fa229a7d49da6d6bf829b256557e6aa435bf2440808ed22fff48c72bea4d6d39783794e58d8ac7b2ef9d22149b6db749058437ceb46d096e6f021a807e019fbbde941cbb0a0e447d7ea24ac4923c6073fb9e4ba62a034d26da6deaf2be06555382ba406508a89b3eed54f1c6e7b1fd3218bf89358db4033a4edb0adaba836c142d5f5800c905d1b4512dc779689afeae66d1ba76965b3c462509a4f15cf53c784f83876d027094a4d3c2090d5707c36b20609d8de42eadf61f09ba30688553d18b46ae7af80a1d774cc56dd9344275336e6b240a2dfec1ac35534dc2bb599e1db548c6b7867dde58b933eb8d5013223b03a815f2cb0257ce5ef56ddd41cd35638ac5574627645a2a5f6217644da76e782b085ee5ea6f39fbb6c07df0d993da2fdccc92e8a45a0e2d6c21c2743d80bdde10e3bbe17c64de0b162085e1e5d507fc638c0cc4b90427b47c022406bee18827ec959ad4e3473b7be68ac6187640330e5ba13c33027c9f49201274329eb0af542af3be93874c4daeb4e84257b23d9c482aa8a685bc644a65e012c31b8b246ce304082ba89e955b9eebe92994b4131f3c5b163ed052a5b2c5e64fd959b0f01a3bc50869ecd325e1358db950187c20f4d4249045ebeb5d46f0f81747f0d42a8d51631b79429edd464c7fb9e4b4d3fe2b0bfa32cae7ad46971451dc7fb098830abcbc3505aa60ed19caf0a3664396e62f1bbc0ce5c42662b18eb9ee924451542d8e4344b38a6697089925b6cb3f7b35703b50b45752b842178cfb5abd67483d8d9bbafaee35f6dc74f55a4ddd8a7c43467a704e65b768e66c30f9d8c6f4b1a3624f802a2bcc2fa5cb2473e0b1d8dbd6f6824a8712d4bf50b3239598d11b96d0f478bd8fe1bcc1e4ac8e91f73e5e8ffbfa278bcfe94c1e5eff2d4be6fcddc57976a1dc52775ae2c5c2a9780a93312d2ae03b7720b325a6e302da3126adbbd114871acaa6bc68e3afcc8d33d132976006539cf6056d72957e54de8a7f8047ca79631d83adc5d3afee8795cbf2e1f274403eaaa0cb1c42487091a77a37234d5fd29c91ddb4b96132e98cbc1e06ddccb5c4fb4a403392081af581ed8d09a0cd5b6a414f8c499ad9f2c458d088741f0ac9a535a8d4f1bfab84841e555e939fff71e078ee9674ce754189fe4ce0492d78c0e64b32d481b264a3d5252e3935db3dadae8e4a22963130c9c0a4bb2657b608b1f706fd14d770533089c01a969b54ff804a4f218aa96cfd33f94c69f41399aaaf7100c13550689606c00208b0546b7bef3dda1b0b37a165a0fc5a155dc1c8e2b2cd65da3de927206f0a7a4ebb9c015222a552ccd101f5967ce25ef954f73f23fc0422e2bbf6e9cee572e8fc9fa813c1581f5a7e90b498f4bed32d09c6ccd7327556c18dc62a238237ea5467b88f0e7d26e12342a2cc63bad7a40f7d9093cbd7606f0ef7a81c851c16e5af730bf7608ebcc000b052aa20752e0c3b0f96ed122cee403e65dfd235762739c540e7d064f32546f6a8c44e344e88cad08e0f435863fdacfc6311615c6bcbe8ae40295009c5fbcb930777da2c1351cd9025c19f897213ccba3a47086a67938b4f6ea9c89c076cdf755a41d851e6ea3912f5d151dac034f0759fd5d20c254f5b8647c4a17ad1d83d0cbbbc23866f627bb55c469deed7cf25b84a5970ff1a4c1d2d43fe14b67a86251ce60469a546d62a3eee2f6d74dd2919279d53e3d6b4f72015f4822612d5f4f08cd0629db3aba382017ae3de0693cd4236e64e79f0a753be0068f0b3aa9cabfc089dd03d851647fa93cc724bc03ba8071caa6355e21a9dea7e40a44e4f9cfbe779d99e647578bbd372e3443e8ec095006d06c5b02cc5f382dac58f1734dc96516dc213a5a5e564bedf8143d9d2d93363e1a763e0808cbf2a724ac53280a8468a3eca27dad28f4558a4bc57071cbf8af715e34b09e23718d3ab1d2f725cd4dc651c4683e1e25d2bec5bc7d2b8c365bca2885a4bf173e67b089e619961515cb0addf0c0494574daf3d986680f22a4bb8236fd13d6e983a3497a9ee9211cb8c864d7fdae08aa1b8daf0c843aba42d78719d2231cd74bcd5c09644d589745cf517784ab246b0e11aae339a0a081bc0c24705b1c220cb23ba7ba59ac1df4f59e5c1975d321dffdfa193add35e3ab9966d6a01d63686f76de410b2394f6873ade2d0fad3fdbc68fc5f0cfcd3d347d3624ba12eca35d088336afba4c0029b580fd6efff8efdbb5eb4db99109c91926659ba3357df23fc4727dddfc9268810424709ca66a69463d79b6830ce9802de9109e1175571e6d6bce6e974f4cba0b3b785d97f9bb7689d7b8f103343e3420a419f4b150adaec18b9680996f13d43a837bbf8acb34b4c9870400ca14b969da4e1d54ef9ad00f07d610013364d8db1b68ab816174b3ae7ab5981e9f7c4cd6b8e1b83ef593077c6e34ae235341a5f720c47bb9a47e6e7640a2f5ba71ee39c2637544481f59d18109442e63076348b6ebb72eda8ff43b17de5b73a96362101d15fce27190b89e1b6b30d0a2bbeb0f1c172f1242c8286f7da903c4e341e5fa068bcdd50d70c089827e1931de37f22e165f96ab9673c3dff2cc38423d6ed0d1fb3d0a1fbdd1916d5dd77bc06089999798d553d02f5a63be5bf51715d7fd8638598d3d07dff00e71119fa55f23952af1f3c412e3e05d8913f104b5c2592bce7e81fef32882ae9ec928d28ba3172a31e1972693f1e259c72dcee91beaeccc86672711d7b10ff5c9e5abf3d28fd0f2723866bc0359a2bc9387728db4fe0556bdb09d4b8d34a431d2d3e75e19d80aabda2e1fcedeae060546586fba8c5981e219fe2223adfad683cd03123558e05c6afbd55258788a0f53fd4992ca4eb90856e0e9b1c50d5cea5dc6f14feec7de16f3dd01f93f32b5aad568b54d23154c5e51c8704ad75a069a5c9a4b8b55f4d121eda532529ed19d2785f46badee8d2bdcc27192ce981ca2cf06cfdf02ff7f74e9f8c77ceff033a87cd747658f3cd576da9b66cf7b436fbaa6d078c627cb6cf557e3211b2ee0c81c35ee9e4d4cd72e6b4ff262682571fa379df2492c70f987eb721378cfa8377ff09682a78da5ddbed85ca833fbfabd8c2f9517d7ba6c935c99c7e85eefe82c36474db55f332ce86d8913dddcf2664fcda26a1714b1f4de5b229654a278bbd9c4eacc9eed495cbf170bdc3eea0f4ec3e7d26056b2f419fb500df3f0f6ed39a69e6c85a2b882cd9a3a58ab712465afa076cd7aaa240d5168db4fec6d2fbc0419718fbd5f10746c0486e57e923fb4badaf871aa3edde42481d238a0a0f7c0910e5213ab18ca108c2e4bae4210266795c8e219bc80567575f21cf0323f0a277e86c6f732c442e6be5e7229d84c09e592ebd3a439347662d0c00d7732c5aa83e7aa56b282ce40f6702a8f50363cde28a6fbb6d58cf67821cb65090da3412179c7bb1d91ab61d23cf9a93cc55a42e5730db2563cc2"}, &(0x7f0000000000)=0x1024)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28021)
write$evdev(r2, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}], 0xff3e)

[  404.947121] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  404.970795] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
23:35:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = getpgrp(0x0)
sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0)
linkat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x1400)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000100)={'veth0_to_team\x00', 0x9})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  405.018447] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  405.048489] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
23:35:47 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x20, 0x20000)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)

[  405.098112] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  405.118493] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  405.128921] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  405.150801] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  405.191258] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
23:35:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x0, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
flistxattr(r0, &(0x7f0000000040)=""/215, 0xd7)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
write$P9_RLCREATE(r0, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x42, 0x4, 0x7}, 0xfff}}, 0x18)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000240)={0x2, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1, 0x5, [{{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}, {{0x2, 0x4e23, @multicast2}}]}, 0x310)

23:35:47 executing program 0:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0xcc)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e0000001000000000000000008001200020002e618a4c5000000000006000000000000f5ff00000000000000fffffffffffffff70000000000000001ac1414bb000000000000000000000000030005000000000002000000e000000100000000000000002cfb3e053fbd2568bfd2876b03748714b26cd9ebc783ceb8061c422dddd1c22add253e0d759ce4c578b25aaccf56f6b24b2a75788f92bdcd4e6101be1e9e8320d329f5c93a1f80920c8c67047d6e5ddbed00e796739aa86729b3da070de4"], 0x80}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140))
open$dir(&(0x7f0000000040)='./file0\x00', 0xa2080, 0x1)

23:35:47 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0xffffffffffffffff, 0x1, 0x3, 0x2, 0x101}})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="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", 0xfed0}], 0x1)

[  405.313274] binder: undelivered TRANSACTION_ERROR: 29189
[  405.329042] binder: undelivered TRANSACTION_ERROR: 29201
[  405.360197] binder: 26819:26824 ERROR: BC_REGISTER_LOOPER called without request
[  405.379896] binder: 26819:26824 got transaction with invalid offset (56, min 0 max 80) or object.
[  405.390344] binder: 26819:26824 transaction failed 29201/-22, size 80-8 line 3200
[  405.398503] binder: send failed reply for transaction 364 to 26819:26824
[  405.415459] binder: undelivered TRANSACTION_COMPLETE
[  405.420603] binder: undelivered TRANSACTION_ERROR: 29201
[  405.431602] binder: undelivered TRANSACTION_ERROR: 29190
[  405.644983] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.651689] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.672305] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.680582] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.687756] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.694534] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.701256] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.709116] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.717030] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.723763] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  405.731141] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
23:35:47 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/11, 0xb}, 0x11c)
write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x34)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, <r2=>0x0}, &(0x7f00000001c0)=0xc)
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x145}}, {@max_read={'max_read', 0x3d, 0x52}}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2c0000000000000}}]}})
poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2471)

23:35:47 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000040)=0xe8)
sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x2c8, 0x35, 0x300, 0x70bd2c, 0x25dfdbfd, {0x17}, [@generic="829c5ed86e52ed78631bc2eb5882061a6dec8404a167d6523e7700a4ad98025a94002c59f52bbb79f487287cf1d2c96612a97a6eb13ebd9514638b127cc25c2f7471b959b03fc45175c8de0e94310ccc3536c88739bd702e02095d8986c0f01e9ce01deab375f93504ce06c1d5ec8955018978ecf9a1010f11e8c28f5ced60ac76b07c47f3442a171059581373c1c19e7ac3def754dc9c5835e1f3bfc029469bd230cdeeca0b761ab7287aad4bb303d36cf12955c28ffa8ed3eeff27011c155c1efe94229e2b6de8bebf11f64f25b3589576f715edd19b589193a3941860", @typed={0x8, 0x43, @uid=r1}, @typed={0x8, 0x7a, @ipv4}, @typed={0x8c, 0x11, @binary="cfabdda470ca0c4ed8750a41ca007efaef83fac8df03911c43b6277bf814071142a6015caa27d9dd7f0b8d8e08dc4f6c502a0072505854ef2cbf7516843bab2f551041f02f5372530cbeb649f9ce3c1cd5e8e283defff24b5338529ff6951631f1a6fbc501e8c7c39966146533d257ab9d0e3926c310bf9befcd62cf701d8e8100f865d9c897"}, @typed={0xc, 0x34, @u64=0x80000001}, @generic="7dcfc3dc0ec61a407ab7f63a0c6e484e1a0a24c91284513330846f9da4af54e480dc6995bdad0f8137d4b0a535ee6f0a4b9e2b719e076faf3ca07fef5013d4ed4c6e9415dacc9360b97849cd95a3343bee78325c66043f9d64c8871a8ce99fb90b61c021a8b67d11a5456175f835a880bbcb9737e68b7fa11e814b46b19a51535317c051f2003057620c47747606b18f735f42f48db179b161e729a7bd633f7cddb117667ae9a8077f12203bdb84cc266dfedbebca76ffa3a4ea34efc38d8d2ce1a6f9371a65bbba949edc03506f630394b2298b9117f739c4caf3018fc52d41bcef55e008ed5c4e497e6674", @nested={0x40, 0x6a, [@typed={0x3c, 0x1a, @binary="73f6b795faf087aa69934cb7163f55263b40f2de1723a3c63ba714d6ed8b32028f045acde18a13081d0dc59e2e2840de21dd79a6a66f"}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x10}, 0x10)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:47 executing program 3:
socket$key(0xf, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x2, 0x100000001, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0)

23:35:47 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0x4, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040))

23:35:47 executing program 0:
r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = memfd_create(&(0x7f00000001c0)="5f2c444db6ba31beec0ef6c9fd91cfe948345acb688cb398f8c773e358ab8344b35408a4bdd6db6122a9cfab5b8e4380d7c94cc6552162c7642fecb697dbef382b1b6605f4fd23346c4ff79aa1aa79e9342b4d4b0ae4e342203ae5475c49b3e82d820adf477f7710c8d4da68a5b81eb56d3537dc0c784f9c91f01eb3910cc455f007e5f036342a0468721b9d8541027c43e5d6ac357e9f4e6148858a7d84e72da4c3230f3ec9789ad495c9a8bbe7f64c3403693182efcb05e859ba054d323c4e3bf66ff1eadd8f1355ed14d233c95f7c6d5ebfb53f", 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1})
r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x3}})
write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x6, 0x200, 0x6c2, 'queue1\x00', 0x5})
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=<r4=>0x0)
chroot(&(0x7f0000000100)='./file0\x00')
ptrace$pokeuser(0x6, r4, 0x8, 0x7eb0000000000000)

23:35:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:47 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)

[  405.745481] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  405.803331] binder: 26841:26850 ERROR: BC_REGISTER_LOOPER called without request
[  405.808461] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808475] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808487] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808499] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808512] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808525] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
23:35:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x20121000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000280))
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x200, {0x2, 0xac0, @rand_addr=0x6f4}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast1}, 0x20, 0x0, 0x5, 0x3f, 0x101, &(0x7f0000000000), 0x0, 0x3, 0x9})

[  405.808537] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808550] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808562] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808574] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.808586] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  405.811639] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
23:35:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80000)

23:35:48 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='auxv\x00')
unshare(0x400)
readv(r0, &(0x7f0000000400), 0x0)

23:35:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2}, 0xb)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x5, 0x7fff, 0x7ff, 0xffffffffffffff66})
gettid()

23:35:48 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300))
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20000, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000100)=0x3)
openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x20000, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x70, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x17e2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x4800}, 0x4041)
r3 = socket$nl_route(0x10, 0x3, 0x0)
lseek(r3, 0x0, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0x9208, &(0x7f00000001c0))

23:35:48 executing program 3:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x80)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x82d, @mcast2, 0x3}, 0x1c)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)

23:35:48 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x8)
ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070")
r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x111002, 0x0)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/167)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$dupfd(r0, 0x406, r2)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000140))
ioctl(r1, 0x800000000008986, &(0x7f0000000800)="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")

23:35:48 executing program 2:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080))

[  406.037428] binder: 26841:26857 got reply transaction with no transaction stack
[  406.077406] binder: 26841:26857 transaction failed 29201/-71, size 80-8 line 2922
[  406.173156] binder: release 26841:26850 transaction 367 out, still active
[  406.184860] binder: undelivered TRANSACTION_COMPLETE
[  406.201685] binder: release 26841:26850 transaction 367 in, still active
[  406.208882] binder: send failed reply for transaction 367, target dead
[  406.217529] binder: undelivered TRANSACTION_ERROR: 29201
23:35:48 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9)
write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0x0, 0x7}, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r2=>0x0, 0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='fuseblk\x00', 0x8480, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xe00}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}})
r4 = open(&(0x7f0000000340)='./file0\x00', 0x40200, 0x74)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x30002, 0x0)
setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000003c0)={@rand_addr, @multicast1, 0x1, 0x1, [@remote]}, 0x14)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x1, 0x0)
ioctl$BLKGETSIZE64(r6, 0x80081272, &(0x7f0000000440))
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000940)={@remote, <r7=>0x0}, &(0x7f0000000980)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000009c0)={'team0\x00', <r8=>r7})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000a00)={@loopback, 0x39, r8})
listxattr(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)=""/161, 0xa1)
ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000b40))
acct(0x0)
unlinkat(r0, &(0x7f0000000b80)='./file0\x00', 0x200)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000c00)={0xa, &(0x7f0000000bc0)=[{0x180, 0x7}, {0x100000001, 0x6}, {0x1000, 0x1e}, {0xac8, 0x20}, {0x10000, 0x7fffffff}, {0x10000}, {0x401, 0x99a}, {0x2, 0x20}, {0x3ff, 0x8}, {0x0, 0xcd}]})
getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000c40)={@loopback}, &(0x7f0000000c80)=0x14)
setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000cc0)={0x5bd, {{0x2, 0x4e20, @rand_addr=0x8}}}, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000d80)={{{@in, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000e80)=0xe8)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000ec0))
openat$keychord(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/keychord\x00', 0x40000, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2)
statfs(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)=""/195)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000001080)={0x100000000, 0xfffffffffffffff7, 0x1})
ptrace$cont(0xffffffffffffffff, r2, 0x100000001, 0x5)
ptrace$cont(0x7, r2, 0x3, 0xfffffffffffffff7)
ioctl$UI_DEV_DESTROY(r5, 0x5502)
getsockopt$inet_int(r4, 0x0, 0x3b, &(0x7f00000010c0), &(0x7f0000001100)=0x4)

23:35:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x501000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:48 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x40100000, &(0x7f0000000140)="0a5cc80700315f85715070")
r1 = socket(0x11, 0x4000000000080002, 0x0)
sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000040)=@l2={0x1f, 0x5865}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0)

23:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:48 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r1 = socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000))

23:35:48 executing program 6:
r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x7, 0x9, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x1, 0x4811, 0xa7d, 0x3, 0x1ff, 0x0, 0x5ca, 0xd3a9, 0x3, 0x97, 0x0, 0xfffffffffffffffe, 0x80000000, 0xffffffff, 0x5, 0x7, 0x6, 0x800, 0x2, 0x1, 0x9, 0x6da, 0x8000, 0x6, 0x6ab0, 0x400, 0x2, 0x98d, 0x3, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x10000}, 0x0, 0xa839, 0xfffffffffffffffa, 0x7, 0x3, 0xff, 0x2}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x2)
fremovexattr(r0, &(0x7f0000000080)=@random={'trusted.', 'user.syz\x00'})
creat(&(0x7f0000000200)='./file0\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:48 executing program 5:
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:48 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)

[  406.621574] binder: 26915:26917 ERROR: BC_REGISTER_LOOPER called without request
23:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:48 executing program 0:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r0)
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fffffff, @remote, 0xff}, {0xa, 0x4e23, 0x7ff, @local, 0x6}, 0x0, [0x2, 0x7, 0x9, 0xff, 0x6, 0x81, 0x2]}, 0x5c)

[  406.662859] binder: undelivered TRANSACTION_COMPLETE
[  406.668456] binder: undelivered transaction 371, process died.
23:35:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:48 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)

[  406.703731] binder: undelivered TRANSACTION_COMPLETE
23:35:48 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40, 0x0)
close(r0)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="bb19a998774082ccff474f54", 0xc}], 0x1, 0x0)

[  406.744059] binder: 26933:26938 ERROR: BC_REGISTER_LOOPER called without request
[  406.790515] binder: 26933:26947 got reply transaction with no transaction stack
[  406.820524] binder: 26933:26947 transaction failed 29201/-71, size 80-8 line 2922
23:35:48 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070")
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32], 0x4b)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000280)=0x1)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
read$FUSE(r2, &(0x7f00000002c0), 0x1000)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x3, 0x0, 0x6f, 0x3}, 0x14)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1)

23:35:48 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)

23:35:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000140))

23:35:48 executing program 0:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00')
syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000004c0)=0x282, 0x4)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x1e9, 0x200000004000000, 0x3ff, 0x1, 0xa31, 0x3, 0x7, 0xc0, 0x7e, 0x40, 0xfa, 0x1, 0x7b6, 0x38, 0x1, 0x8001, 0x5, 0x2}, [{0x3, 0x6, 0x400, 0x1ff, 0x8, 0x1, 0x8, 0x1}, {0x60000005, 0xfffffffffffffff9, 0x6, 0xab7, 0x7ff, 0x1, 0x9, 0x4}], "6d6cd91778e14891c27e3b521fc293fcf1f5c33b14d92b5bb26f114d2f15f0315079cdc6ce9e0cf6a038a910fe411de9b7b16d9b2f2cb0", [[], [], [], [], [], [], [], [], [], []]}, 0xae7)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = getpid()
sched_getscheduler(r3)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x4)

23:35:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  406.850781] binder: release 26933:26938 transaction 374 out, still active
[  406.865664] binder: undelivered TRANSACTION_COMPLETE
23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x400000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  406.910275] binder: release 26933:26938 transaction 374 in, still active
[  406.920817] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in;
[  406.920817]    program syz-executor3 not setting count and/or reply_len properly
[  406.927244] binder: 26962:26967 ERROR: BC_REGISTER_LOOPER called without request
[  406.927465] binder: 26962:26967 got transaction with invalid offset (56, min 0 max 56) or object.
23:35:49 executing program 1:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
renameat2(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000040)='./file0/file0\x00', 0x0)

[  406.927529] binder: 26962:26967 transaction failed 29201/-22, size 56-8 line 3200
[  406.927537] binder: send failed reply for transaction 377 to 26962:26967
[  407.006722] binder: send failed reply for transaction 374, target dead
[  407.030689] binder: undelivered TRANSACTION_ERROR: 29201
[  407.048678] binder: undelivered TRANSACTION_ERROR: 29190
[  407.069495] binder: undelivered TRANSACTION_COMPLETE
[  407.086974] binder: undelivered TRANSACTION_ERROR: 29201
[  407.108648] sg_write: data in/out 65499/33 bytes for SCSI command 0x0-- guessing data in;
[  407.108648]    program syz-executor3 not setting count and/or reply_len properly
23:35:49 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
socketpair(0xf, 0x800, 0x1df2, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000000c0)={0x21, 0x3, 0x0, {0x2}}, 0x21)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000200))
fcntl$setsig(r2, 0xa, 0x28)

23:35:49 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020700f8010000000000000000000000"], 0x10}}, 0x0)
r2 = socket$inet6(0xa, 0x1200000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040))
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffe, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
personality(0x4000009)
sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in={0x2, 0xc67a}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000280)}}], 0x1, 0x0)

23:35:49 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x502, 0x0)

23:35:49 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000000000000000000008000000"], 0x10}}], 0x1, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0xe2, [], 0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/226}, &(0x7f0000000100)=0x78)
openat$selinux_access(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/access\x00', 0x2, 0x0)
connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e24, @multicast2}})

23:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:49 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
preadv(r0, &(0x7f0000000100), 0x2000000000000314, 0x10400003)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc8, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1a}}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x59bd}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
lseek(r0, 0x0, 0x1)

23:35:49 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0xfffffffffffffd44}], 0x1)
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10b003)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)

23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x400000000, 0x80000000002)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="ae80014a256e39fb51c685c95157a29262d58576ae7ff1564b8e86d45300dbd2fd37f8888fecb0ec9369ee862ad5a448557b12a21484321efc64af4267e9d184f716a85f703cd03b807ce0431b0a65210419dcf5b51144173aef1d18f30cbdd234b0f430d3e163a376cea90f702049d6bae589a2c7dfc6fd09be9904955c6f00d8f18c3ec8206a4206985564eadc9dbe66c864c9b213ac32799fe1554f613d3c226b3bec767d1df526c521e7d7ca11913a6f6915e739a273e0a7d424531747f7d1efc32bad04774d669e720b60dff1513c41264f765aee935ab2538d34f4", 0xde, r1)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000380))
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
ioctl$RTC_WIE_ON(r0, 0x700f)
syz_open_procfs(r2, &(0x7f0000000140)='net/udp6\x00')
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000540)=@get={0x1, &(0x7f0000000240)=""/119, 0x1})
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000080)=""/186, &(0x7f0000000040)=0xba)

23:35:49 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x1, @thr={&(0x7f00000000c0)="ab143e35815db0304ef1b16afb1a1a950f4cc3d27048102cc092e4037d696d40921ecd91d1ec20c5adc438f0035cc7acc63d4b999a1582aa6c429caf017657e85fd8a587a8d8b6d68eccfd075706929c593d3fafe72b4f64b79c5ab77b11c1d01572a7f6b5985fb8deeec9d4587793f1d3bfbdb995a99ad0cb01a82755303f38f7cf1f4c18019c32e765fbad", &(0x7f0000001300)="8f1e5ef0b3b5ec31aec9230d4246258a4b27aab4daa58ec8099c064dddda9c0288d31f32a107254bf70c31aa96b074dccdcdeb8b4bc1679090711f500ae6c8c256b8ac3061ed321e2119ecdd60139039877e77cfee6f1fda0d4e1d1fb49ab81b0e709c6d4e9220fc14f518e5eef33411885f4993aa0b909de62a7ed15c6fcbcb453f2745d70c26"}}, &(0x7f0000000200)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000240), &(0x7f00000013c0))
prctl$intptr(0x29, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000001480)={0x6, 0xd, 0x33, 0x7fffffff, "9ec31dc9e309448669965305bb81b35d2852f88639f979998f63d1e215f06f63"})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000001400))

23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:49 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, @in6, 0x4e21, 0x7, 0x4e22, 0x8, 0xa, 0x80, 0x80, 0x3a}, {0x81, 0x1d21, 0x0, 0xffff, 0x4, 0x1000, 0x6, 0x7}, {0xfff, 0xfff, 0x3, 0x4}, 0x6, 0x6e6bbb, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d3, 0x3f}, 0xa, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xee, 0xa9, 0x3}}, 0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0x10}], 0x10}}], 0x4000350, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
getsockname$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c)

23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffffffffffff, 0x0)
timerfd_gettime(r0, &(0x7f0000000180))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000080))
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @local}, {0x6, @random="665e84dff471"}, 0x24, {0x2, 0x4e21, @rand_addr=0x8e2}, 'yam0\x00'})
r1 = inotify_init1(0x0)
r2 = getpid()
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000340)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xcc, 0x0, &(0x7f00000004c0)=[@clear_death={0x400c630f, 0x0, 0x2}, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x60, 0x8, &(0x7f0000000380)=[@ptr={0x70742a85, 0x0, &(0x7f0000000300), 0x1, 0x2, 0xe}, @fda={0x66646185, 0x3, 0x2, 0x23}, @flat={0x77682a85, 0x100, r3, 0x1}], &(0x7f0000000400)=[0x20]}, 0xe7}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000440)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f0000000480)=[0x0, 0x78, 0x20]}, 0xff}}, @increfs={0x40046304, 0x4}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x1}, @register_looper], 0x34, 0x0, &(0x7f00000005c0)="d9aab397ab5e97ce27cf919d9bc1378f1f8fce2b20a3dd70b8defd1f67845f185077480aa237a94b449dc90e4ccbdf4d9a0ebcbf"})
sched_rr_get_interval(r2, &(0x7f00000002c0))
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, <r4=>0x0})
clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280))
tgkill(r4, r2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2d, 0x4, 0x0, {0x6, 0x6, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d)

[  407.417802] binder: 27009:27011 ERROR: BC_REGISTER_LOOPER called without request
[  407.448705] binder: 27009:27011 got transaction with invalid offset (56, min 0 max 56) or object.
23:35:49 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
ioctl$RTC_UIE_OFF(r0, 0x7004)
set_robust_list(&(0x7f0000000100)={0x0, 0x8f, &(0x7f00000000c0)={&(0x7f0000000000)}}, 0x18)
write$cgroup_pid(r0, &(0x7f0000000040), 0xffffffcb)
ioctl$RTC_UIE_OFF(r0, 0x7004)

[  407.498140] binder: 27009:27011 transaction failed 29201/-22, size 56-8 line 3200
23:35:49 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
open(&(0x7f0000000040)='.\x00', 0x410802, 0x0)

[  407.539815] binder: send failed reply for transaction 380 to 27009:27011
23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x5)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
bind$packet(r0, &(0x7f0000000240)={0x11, 0x1c, r1, 0x1, 0x100, 0x6, @local}, 0x14)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3)

23:35:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f0000000080)=[@fda, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  407.615140] binder: undelivered TRANSACTION_ERROR: 29190
[  407.630214] binder: undelivered TRANSACTION_COMPLETE
23:35:49 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="e05b3f0a00145f8f764070")
ioctl(r0, 0x98, &(0x7f0000000080)="694f9844426a04d7a87348013d978381a6f342b1b1d0a149209bff3d9512c9c7347b5bf6a097c93ff80ef3dbbfbfd668081a3ec2114ae103e2f0143acfac263769414a3559a463c183b44be2293de7270f11daef5664309ebe2575f628fd344822d9a6cd7c1ab5aeda8eb7ea91b9cf7b690f226a6be95528e5b048efbece4511a7d8c081aa8fca4ffbea77803dba193ea3951937dbcd9c91c71b511b13989276cf2ed55f1ba010656d22955b6bbb1b5c6a08dc1d354abc57")
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x100)

23:35:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x1, 0x8002)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
getsockopt(r0, 0x6, 0x5, &(0x7f0000000340)=""/13, &(0x7f0000000380)=0xd)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@remote, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0x6, 0xa, 0x80, 0x20, 0x0, r1, r2}, {0x492, 0x401, 0x78, 0x1f, 0xc9b, 0x800000006, 0x7, 0x400}, {0x5510, 0x5, 0x80, 0x9}, 0x3, 0x6e6bbd, 0x1, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x10000000004d2, 0x32}, 0xa, @in6=@remote, 0x3500, 0x6, 0x2, 0x9, 0x101, 0x3, 0x6}}, 0x228)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  407.671403] binder: undelivered TRANSACTION_ERROR: 29201
[  407.679103] binder: 27047:27052 ERROR: BC_REGISTER_LOOPER called without request
[  407.765552] binder: 27047:27062 got reply transaction with no transaction stack
[  407.797320] binder: 27047:27062 transaction failed 29201/-71, size 56-8 line 2922
[  407.949234] binder: release 27047:27052 transaction 383 out, still active
[  407.969812] binder: undelivered TRANSACTION_COMPLETE
[  407.981756] binder: release 27047:27052 transaction 383 in, still active
[  408.002301] binder: send failed reply for transaction 383, target dead
[  408.016372] binder: undelivered TRANSACTION_ERROR: 29201
23:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000080)=[@fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000040))

23:35:50 executing program 6:
rmdir(&(0x7f0000000000)='./file0\x00')
r0 = syz_open_procfs(0x0, &(0x7f0000000240)="73746174757300e676e65e3d010000000e617200")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000200)=0x78)

23:35:50 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35)
read(r0, &(0x7f00003fefff)=""/1, 0x1)
r1 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1)
timer_create(0xfffffffffffffffb, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000044000))
ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fb9000))
fcntl$setsig(r2, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080))
r4 = dup2(r2, r3)
setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000), 0x4)
fcntl$setown(r3, 0x8, r1)
tkill(r1, 0x16)

[  408.622506] binder: 27082:27086 ERROR: BC_REGISTER_LOOPER called without request
[  408.638440] binder: 27082:27086 got transaction with invalid offset (56, min 0 max 48) or object.
[  408.657533] binder: 27082:27086 transaction failed 29201/-22, size 48-8 line 3200
23:35:50 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000180)="18000000020001000000be8c4bff8c885800002c0202cbd726093109ce0000400a0033d898056bf748bb6a8807567e59db01f81947b3550400000067a1e20059fc21e3e000000000000453ff1f00080000000000038ebbff06281c2a6be33e7a0fd9b0c30100000b01000000b121ad1474d722f542002700ec008b000800c500000100e9f57406aa010b000400264a64d2078a1864c84310abea04aa56da2d55aee65d7299865d1294333e162eda00b776b553502e0a7c731dc4e94a1ee130b2", 0xc0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0)
write$P9_RRENAMEAT(r1, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7)

23:35:50 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
prctl$getname(0x10, &(0x7f0000000000)=""/61)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:50 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
sched_yield()
pipe(&(0x7f00000001c0))
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
socket$inet6(0xa, 0x4, 0x5)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x10001, 0x1, 0xffff, 0x100, 0x7, 0x3, 0x7, 0xbc31, 0x109, 0x38, 0x217, 0xffffffffffffffff, 0x80000001, 0x20, 0x2, 0x8, 0x1000, 0x800}, [{0x1, 0x4, 0xda, 0x40, 0x8, 0x80000001, 0x1, 0x1}, {0x3, 0x3, 0x6, 0xffffffff80000000, 0xe, 0x4eb3, 0x101, 0xfffffffffffff4a9}], "04d6b0f9891b0bf663bc33805ba3d5e49b789262ee7f9f0853636440b27d9a91ff83a896b35d700b6e5074d9f2e42307557f63ffbfad599753149a793a5d7b77ce177d2c1654fe1fda7c4fac9b73f8e40e0a74a4630d739dab560381246c7c9badb656d9291a"}, 0xde)
write$P9_RATTACH(r2, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x0, 0x1}}, 0x14)

23:35:50 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x11}}, @in6, 0x4e21, 0x7, 0x4e22, 0x8, 0xa, 0x80, 0x80, 0x3a}, {0x81, 0x1d21, 0x0, 0xffff, 0x4, 0x1000, 0x6, 0x7}, {0xfff, 0xfff, 0x3, 0x4}, 0x6, 0x6e6bbb, 0x1, 0x1, 0x2}, {{@in=@multicast1, 0x4d3, 0x3f}, 0xa, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xee, 0xa9, 0x3}}, 0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
sendmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0x10}], 0x10}}], 0x4000350, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30)
getsockname$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c)

23:35:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000040)=""/94, &(0x7f00000000c0)=0x5e)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000240))

[  408.675488] binder: send failed reply for transaction 386 to 27082:27086
23:35:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000080)=[@fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0xfffffffffffffffd)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0xfffffffffffffff9, 0x7, 0x1edbd79a, 0x7f, 0x5, 0x909})
setsockopt$inet6_tcp_buf(r0, 0x6, 0x85e2a82d2313cc21, &(0x7f00000000c0)="396c1eb10a11a99853b64b2c10c817fc8685922c709f5eb80741b64623b8cfec621538a2f6b13ba26785373c9f0de9836328f96cd603dd89e5f2e040b5ff5d176c09c71a5ccfb67aace466662602df7ba9ae5133b459046e541e8e6b1936f6fa98cfbd6188bf050360caea02583b17380d3c4312156e45ac3192ac8ffcb7397c757c02b1b5f874c1b9b7213f6e992bd44af7b46b811c10fe322f0eed9a843dec878aa1fd7e0f715de6c9151758a3011e5506e37c018548d21747009ee4f316da7f9a", 0xc2)

[  408.724215] binder: undelivered TRANSACTION_COMPLETE
[  408.729438] binder: undelivered TRANSACTION_ERROR: 29201
[  408.763751] binder: undelivered TRANSACTION_ERROR: 29190
23:35:50 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xe2)
signalfd(r0, &(0x7f0000000100)={0x5}, 0x8)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
unshare(0x600)
pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})

23:35:50 executing program 2:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x9208, &(0x7f00000001c0))
syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x2)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x5eb, 0x2}, 'port0\x00', 0x8c, 0x11800, 0x1, 0x10000, 0x2a, 0x94, 0x3, 0x0, 0x4, 0x40})

[  408.806822] binder: 27105:27114 ERROR: BC_REGISTER_LOOPER called without request
[  408.831182] binder: 27105:27114 got transaction with invalid offset (56, min 0 max 48) or object.
23:35:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  408.858121] binder: 27105:27114 transaction failed 29201/-22, size 48-8 line 3200
[  408.890913] binder: send failed reply for transaction 389 to 27105:27114
23:35:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mmap(&(0x7f00005a1000/0x200000)=nil, 0x200000, 0x1fffffe, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1fe, 0x4c832, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48101420}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)=@deltfilter={0x1008, 0x2d, 0x822, 0x70bd26, 0x25dfdbfd, {0x0, r1, {0xffff, 0xffff}, {0x4, 0xfffb}, {0xffef, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x100000001}, @TCA_RATE={0x8, 0x5, {0x5, 0x8000}}, @TCA_RATE={0x8, 0x5, {0x5, 0xffff}}, @TCA_CHAIN={0x8, 0xb, 0x2f71}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0xfa8, 0x2, [@TCA_CGROUP_ACT={0x114, 0x1, @m_tunnel_key={0x110, 0x18, {{0x10, 0x1, 'tunnel_key\x00'}, {0x78, 0x2, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x7, 0x10000005, 0x101, 0x100000000}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x8, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x5, 0xffffffffffffffff, 0x8001, 0xfffffffffffffffa}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xaf, 0x8, 0x20000008, 0x7f67, 0x2}, 0x1}}]}, {0x80, 0x6, "f7f0884ab50f8a5cd4b0c6ed84ac5ae6c65e78bdcafb0fbd155f07aff2996f0840dde63e26cf254cfd887119b638655f899815a40d52ebe5ec1afdae2506c88bd7298901c7d3dfd8c2dff6d5fba45e932d0ba99b67976dbb5a5988ee22c1d00ff859231908a6c0ad48c416054732d9da391e460d8643de730d98de6a"}}}}, @TCA_CGROUP_ACT={0xe90, 0x1, @m_pedit={0xe8c, 0x13, {{0xc, 0x1, 'pedit\x00'}, {0xe54, 0x2, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0xffff, 0x400, 0x20000004, 0x9, 0x3}, 0x5, 0xffc00, [{0x0, 0x3f, 0x8, 0xff, 0x3, 0xe7}, {0x0, 0x4, 0xfffffffffffffc01, 0x10000, 0x0, 0x5}]}, [{0x9, 0x1, 0x7a0000000000000, 0x1, 0x4a, 0x6}, {0x9, 0x7, 0x80000000, 0x4, 0x69e, 0x213}, {0x3, 0x6, 0x99b, 0x31b5, 0xfb97, 0x6}, {0x2, 0x2, 0xfffffffffffffff9, 0x8, 0x6, 0xf56}, {0x9, 0x4c000000000, 0x39a80000000000, 0x6, 0x5, 0x7}, {0x9, 0xffffffff7fffffff, 0x0, 0x3, 0x4, 0xff}, {0x2, 0xfffffffffffffffb, 0x8, 0x100000000, 0x0, 0x7}, {0x8, 0x8, 0xfffffffffffffffb, 0x3f, 0x10000, 0x3}, {0x400000000000, 0x1000, 0x4, 0x8, 0x8, 0x7}, {0x193a, 0x2, 0xf3, 0xfff, 0x8, 0xb9}, {0x5, 0x4, 0x5, 0x100, 0x7, 0x6}, {0x1, 0x7, 0x1000000000000, 0x9, 0x6, 0x3}, {0x80, 0x918, 0xf6a, 0xf, 0x0, 0x2c2a}, {0xd75, 0x5, 0x7f, 0x2, 0xc00, 0xa000000000}, {0x4, 0x59, 0xd1, 0xc7, 0x8, 0xfffffffffffffffb}, {0x4, 0xfffffffffffffffd, 0x5, 0x9, 0xffffffff, 0x2}, {0x100000001, 0x81, 0xff, 0x8, 0x6, 0x1}, {0x8, 0x6, 0x44ac8839, 0xf3, 0xfffffffffffffffd, 0x3}, {0x7, 0x1, 0x2b, 0x40, 0x6, 0x1}, {0x2, 0x1ff, 0x3, 0x38, 0x8, 0x3ff}, {0x7, 0x94a7, 0x80000000, 0x1, 0x7, 0x9}, {0x5, 0x388e, 0x2, 0x2, 0x9, 0xfffffffffffffffa}, {0x81, 0x40, 0x9, 0x7, 0x1, 0x1}, {0xffffffffffff6f48, 0x0, 0x2, 0x5, 0x9, 0x100}, {0x0, 0x3, 0x8, 0x9, 0x7, 0x2}, {0x7fffffff, 0x8001, 0x0, 0x4, 0x16, 0x4}, {0x4, 0xffffffffffffffc0, 0x80000001, 0x3, 0x3, 0x6}, {0x1, 0x81, 0x7, 0x703f, 0x9}, {0x7, 0x37a0, 0x3ff00000000, 0x10001, 0x8, 0x100}, {0x101, 0x4, 0x5, 0x3, 0x2, 0xa7ac}, {0x6, 0x800, 0x3f, 0xfffffffffffffbff, 0x2}, {0xde18, 0x3, 0xbf8, 0x7f, 0x2, 0x9}, {0x1000, 0x3, 0xe8e, 0x1ff, 0x203f1e04, 0x6}, {0x1, 0x8, 0x1a2, 0x80, 0x2, 0x7}, {0x81, 0x400, 0x5, 0x9, 0x7, 0xbc}, {0x2, 0x8, 0x4, 0x4, 0x80000000, 0x1ff}, {0x80000000, 0x3, 0x5, 0x3, 0x9, 0xffffffff80000001}, {0x100000001, 0x1000, 0xa4b9, 0x1f, 0xde, 0xa6}, {0x7ff, 0x7, 0x10000, 0x5, 0x20}, {0x32, 0x3, 0x98246d2, 0x6, 0xdc88, 0x3ff}, {0x100000001, 0x3, 0x1908, 0x1, 0x101, 0x1}, {0x6, 0x6, 0x20, 0x4, 0x7, 0x6}, {0x3, 0x8, 0x6, 0x3, 0x3, 0x5}, {0x6f, 0x80000001, 0x401, 0x9efe, 0xffff, 0x1000}, {0x100000000, 0x20, 0x1, 0x0, 0x10, 0x6}, {0x4, 0x762, 0x1, 0xab6a, 0x0, 0xffffffffffff259a}, {0x6e, 0x3, 0x4, 0x20, 0x2, 0xff}, {0x5, 0x5b21, 0x4d95, 0xcda, 0x7f, 0xfffffffffffffffd}, {0x8000, 0x9, 0x1, 0x5, 0x4, 0x6}, {0x9, 0xb2, 0x9, 0x4, 0x1, 0x36}, {0x40, 0x10000, 0x3, 0x7fff, 0xe69f, 0x3}, {0x2, 0x8c, 0x7, 0x1000, 0x9, 0xffff}, {0x7, 0x8, 0x1000, 0x3, 0x9, 0x2}, {0x0, 0x5, 0x200, 0x26, 0x3, 0x7}, {0x32ca4450, 0x5, 0xf2, 0x7fffffff, 0x8, 0x100000001}, {0x8, 0x45c6, 0x401, 0x3, 0x40, 0x1}, {0x9, 0x9, 0x3, 0x9, 0x7fffffff, 0x8001}, {0x7, 0x5, 0x8, 0x4, 0x2, 0xfffffffffffffffd}, {0x5, 0x5, 0xfffffffffffffffa, 0x0, 0x1, 0x2}, {0xf1, 0xfffffffffffff57b, 0x2, 0x2, 0x0, 0x1}, {0xfffffffffffffff9, 0x3cb6, 0x4, 0x4, 0x1, 0x6}, {0x401, 0x98c5, 0x7f, 0x8000, 0x0, 0x4}, {0x1, 0x0, 0x7ff, 0x0, 0xc69, 0xe4}, {0x41, 0x4160, 0x100, 0x5000000, 0x6, 0x7}, {0x1ff, 0x118c9d03, 0x1f, 0x200, 0x8, 0x8001}, {0x10000, 0x50, 0x4, 0x6, 0x6, 0x1ff}, {0x0, 0x80000001, 0x1ff, 0x0, 0x3, 0x7272dfc9}, {0x2, 0x8001, 0xffffffff80000000, 0x6f00, 0x8, 0xd89}, {0x3, 0x0, 0x27, 0x40, 0x7, 0x63c8}, {0x0, 0x80000001, 0x1, 0x5, 0x2, 0x3}, {0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x401}, {0x5, 0x9fe8, 0x7, 0xb3, 0x400, 0x20}, {0x36e2d0fe, 0x7fffffff, 0xd1a, 0xce, 0x0, 0x7}, {0x8, 0xbe1, 0x3, 0x17, 0x80000001, 0x2}, {0x3f, 0x2ba8, 0x6, 0x32a5, 0x8000, 0xffff}, {0x6, 0xbed, 0xfffffffffffffffa, 0x2af, 0xce39, 0x8}, {0x1, 0x400, 0x3e8, 0x7fff, 0x9, 0x20}, {0x987, 0x5, 0xd6, 0x0, 0xffffffffffffffff, 0xa64}, {0x1, 0x5, 0x2, 0x4, 0x206f00000000000, 0x8}, {0x1, 0x0, 0x6, 0x3, 0x401, 0x7}, {0x7, 0x0, 0x9, 0x81, 0x5, 0x1}, {0x9df, 0x2, 0x7, 0x8fc, 0x7, 0x80}, {0x5, 0xfe, 0x7, 0x0, 0x5, 0x1}, {0xfff, 0x7, 0xeda1, 0x8, 0x7, 0x1}, {0x3, 0x91, 0x9, 0x7e, 0x2, 0x6b6}, {0x1000, 0x0, 0xffffffffffffff01, 0x3ff, 0xcde, 0x4}, {0x80, 0xf7fe, 0x7f, 0x3, 0x81, 0x1}, {0x4, 0xfff, 0x5, 0xa2, 0x6, 0x9}, {0xf8, 0x3, 0x0, 0x5, 0x0, 0xffffffff}, {0x47, 0xd0f, 0x1, 0x0, 0x7}, {0x20, 0x3f, 0x6, 0x10000, 0x5, 0xe979}, {0x9, 0xffffffff00000000, 0x3, 0x1, 0xffffffff7fffffff, 0x8}, {0x121, 0x7ff, 0x83, 0x4, 0x5e, 0x5}, {0xc900, 0x6, 0xfffffffffffffff8, 0x1f, 0x10000, 0x1}, {0x200, 0x5, 0x51f861ce, 0x101, 0x400, 0x6}, {0x100000000, 0x9, 0x1, 0x3, 0xa2, 0x5}, {0x7, 0x1, 0x20, 0x8, 0x6, 0x15}, {0x8, 0x2c, 0x4, 0x5, 0x3}, {0x9, 0x42ca, 0x3, 0x20, 0x2, 0x1}, {0x3f, 0x6, 0x8, 0x101, 0x0, 0x3ff}, {0x800, 0x6, 0xff, 0xfffffffffffffffe, 0x0, 0x4}, {0x6a, 0xeaed, 0x1, 0xde, 0x8, 0x2}, {0xffff, 0x5c, 0x39c, 0x3, 0x3f, 0x5}, {0xc0f8, 0x8, 0x4, 0x4, 0x2, 0x219d}, {0x6, 0x10000, 0x6, 0xd888, 0x800, 0x3}, {0xe6, 0x81, 0x7fff, 0x7fffffff, 0xffffffffffffff00, 0x2}, {0x8000, 0xfffffffffffeffff, 0x7fff, 0x3ff, 0x0, 0x4}, {0x8, 0x2, 0xffffffff, 0x5, 0xff, 0x5}, {0x4, 0x1f, 0x5, 0x0, 0x8, 0x2}, {0x8, 0x0, 0x7fff, 0x5, 0x33, 0x1ff}, {0xff, 0x4, 0x9cf0, 0x5, 0xa0c, 0x1}, {0x0, 0x9, 0xa8f6, 0x702c, 0x1, 0xfff}, {0x3, 0x0, 0x3700000000000000, 0x7, 0x1, 0x3}, {0xb65e, 0x767e, 0x401, 0x7, 0x1, 0x9}, {0x9, 0x6, 0x100000001, 0x3f40, 0x1, 0x101}, {0x1ff, 0x8000, 0xfff, 0x100000000, 0x621e47e0, 0x80000000}, {0x0, 0x401, 0x0, 0xac2, 0x200, 0x9}, {0x400, 0x4, 0x401, 0x3, 0x64a, 0x1}, {0x6, 0x0, 0xd4a, 0x1, 0x2, 0x28}, {0x5, 0xb1, 0x40, 0x5f0fd133, 0x7, 0x3}, {0x1, 0x3, 0x7fffffff, 0x2, 0x7fff, 0xcd3}, {0x0, 0x5, 0x33, 0x200, 0x1000, 0x5827}, {0x0, 0x7ff, 0x8, 0x5, 0x4, 0x3}, {0x2, 0x400, 0x0, 0x3f, 0x6, 0xffffffffffffffff}, {0x1, 0x1fad, 0x8001, 0x5, 0x5, 0x6}, {0x389, 0x1, 0x80000000, 0xc48, 0x4, 0x7ff}, {0x4, 0x179, 0x80, 0x96dc, 0xb027, 0x81}, {0x100000001, 0x1, 0x10000, 0x7, 0xf7, 0xffffffffffffff81}], [{0x4, 0x1}, {0x6, 0x1}, {0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x3c18684d063891b5}, {}, {0x0, 0x1}, {}, {0x7, 0x1}, {0x2}, {0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {}, {0x3}, {0x0, 0x888fbc5f5c032ef2}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x7}, {0x7}, {0x2, 0x1}, {0x3}, {0x7}, {0x7}, {0x2}, {}, {0x7}, {0x4}, {0x5}, {0x7}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {}, {}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x3}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x5}]}}]}, {0x24, 0x6, "ee50eb45f54424bc18c6de9c5aa7d9ff5e8fa6c310f1622b2f2018a8f96801"}}}}]}}, @TCA_RATE={0x8, 0x5, {0x7}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
pipe2(&(0x7f0000000080), 0x0)

23:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000080)=[@fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  408.946356] binder: undelivered TRANSACTION_COMPLETE
[  408.954996] binder: undelivered TRANSACTION_ERROR: 29201
[  408.965666] binder: undelivered TRANSACTION_ERROR: 29190
23:35:51 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1000000000000149, &(0x7f0000001280)=""/20, 0x14}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  409.015549] binder: 27143:27145 ERROR: BC_REGISTER_LOOPER called without request
[  409.037015] binder: 27143:27145 got transaction with invalid offset (56, min 0 max 48) or object.
23:35:51 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000040)=@random={'security.', ']\\cgroup\x00'}, &(0x7f00000003c0)=""/2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x4}, 0x10)

[  409.068227] binder: 27143:27145 transaction failed 29201/-22, size 48-8 line 3200
[  409.103097] binder: send failed reply for transaction 392 to 27143:27145
[  409.142316] binder: undelivered TRANSACTION_COMPLETE
[  409.159709] binder: undelivered TRANSACTION_ERROR: 29201
[  409.173945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket
[  409.190563] binder: undelivered TRANSACTION_ERROR: 29190
[  409.400107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket
23:35:51 executing program 6:
fcntl$getown(0xffffffffffffff9c, 0x9)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/2, 0xfffffe8c)
getsockname(r1, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80)

23:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:51 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000080)=[@fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:51 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a000000000000ebffffff000800120000000000000061e64dfa44f468783342f002000000000000060000000000000000000000000000000000000000000000000000200000000000000000"], 0xfffffffd}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x33ab0eaa68c8dfc, 0x0)

23:35:51 executing program 2:
r0 = request_key(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='syz1\x00', 0xfffffffffffffffd)
keyctl$revoke(0x3, r0)
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.sockprotoname\x00')
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x404040, 0x0)
openat$cgroup_int(r1, &(0x7f00000004c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x7fffffff, 0x501400)
ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000380)='syz1\x00')
r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0x9208, &(0x7f00000001c0))
r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000500)={0x0, 0x3, 0x2, 0x0, 0x4})
add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)="bbd5e74ddd5237dd40992f7e12963afa3a4ae92964192f24fd9f127369eacbd50667c2e3af1eaa20a1d990e212f0ed081e8e057d0f0ce2290f0db43bd151d217d5903ded2439e9bda1597ef04b7755afc573254fbc13227f092447924711020680ea94df4c3325bc76d9abf55f8106d22851cfa768df1ae0f7f9f46068c2192fffa154dd2a30e90095258e48dd0a889a69b927f3ed3b830edd255f7d42f1a4276d4d57111c071b27c8179620c6683b13e4e8b6e39bc62f689ef3731f37c44e5d859e6e49fe92578b", 0xc8, r4)

23:35:51 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84800)
accept4$inet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:51 executing program 7:
socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair(0x0, 0x1, 0x40, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x2})
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
pause()
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000001300)={0x7, 0x7, 0x9, 'queue0\x00', 0x1})
r4 = socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000001c0)=""/171, &(0x7f00000013c0)=0xab)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
accept4$inet6(r4, 0x0, &(0x7f0000000140), 0x800)

23:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0)

[  409.585992] binder: BINDER_SET_CONTEXT_MGR already set
[  409.595726] binder: 27186:27188 ioctl 40046207 0 returned -16
[  409.596173] binder: 27181:27190 ERROR: BC_REGISTER_LOOPER called without request
[  409.609464] binder: undelivered TRANSACTION_COMPLETE
[  409.622204] binder: undelivered TRANSACTION_COMPLETE
23:35:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xf69b30f6dc31d776, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x4, 0x4)

23:35:51 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8)
write$P9_RREMOVE(r0, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x1d, @empty, 0x4e22, 0x4, 'dh\x00', 0x24, 0x3ff, 0x1a}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4e22, 0x2007, 0x7f7c, 0x9, 0x7}}, 0x44)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@rand_addr}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8)
write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf42b00000053ab00000000757816000000000000000002ab0000ece7aa2c8a3255879373477bb5f7c68a0c9e171ed06c74cf15ab7663086c9900000000"], 0x2c)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0)
finit_module(r1, &(0x7f0000000080)='/selinux/load\x00', 0x2)
syncfs(r2)
ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000340)="c037e494068b6d5d3f4fb2ca3e654bad6667f28a03cdf830278d6caf3df4e0104b4e1acf607cf870d9510ee0d9a4fa6daf5f425c317485194c3b03ef55af3b412db13363bfb9445d2f91fa21b51735d96811d9a9c3e62d2c97489d2fa6ea17c82629a2b2718aa18b88d7c3c8c548134f65dacd286120b8fcb943b042d7bf2376dc31425e40a873ebfc14dcbbeda0651bac3b53a424be21ad3a67")

[  409.631199] binder: undelivered transaction 396, process died.
[  409.641899] binder: 27186:27200 transaction failed 29189/-22, size 0-0 line 3014
[  409.670343] binder: 27197:27201 ERROR: BC_REGISTER_LOOPER called without request
[  409.680546] binder: 27186:27188 ERROR: BC_REGISTER_LOOPER called without request
[  409.713451] binder: undelivered TRANSACTION_COMPLETE
[  409.733488] binder: undelivered transaction 400, process died.
[  409.734625] binder: 27186:27200 got reply transaction with no transaction stack
[  409.734635] binder: 27186:27200 transaction failed 29201/-71, size 48-8 line 2922
23:35:51 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:51 executing program 2:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x9208, &(0x7f00000001c0))

23:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  409.755605] SELinux:  policydb magic number 0xf47cff8c does not match expected magic number 0xf97cff8c
[  409.765734] binder: undelivered TRANSACTION_COMPLETE
23:35:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040))

23:35:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  409.809433] binder: 27219:27223 ERROR: BC_REGISTER_LOOPER called without request
[  409.837953] binder: undelivered TRANSACTION_COMPLETE
[  409.843231] binder: undelivered transaction 404, process died.
[  409.850320] binder: undelivered TRANSACTION_COMPLETE
23:35:52 executing program 6:
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:52 executing program 2:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$9p(r0, &(0x7f0000000080)="0d3b1febfffe2f89e7fa6406127020d69e737a623406e20e83a4c3d6956f38973d14f15f07c0088cd1f5b85e1dc15a2d2187048d09e421aaf34b56ca37d3c87828412665f3877450e3e6c9ff61e47546a187e1c521b6ab9c8fe41128f56a4ddc4bf16a596921e621632fe59fe01f801e90aa89594e1ddee1d3158dde4d3a2908c03ea7811414d037d6ce67f11565582f91f6c73ed67fb54b20404daf142d76c28751e772169ac379084e0217607ec12c962c87e453e6b336030621331c0f34", 0xbf)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

[  409.883994] binder: 27231:27232 ERROR: BC_REGISTER_LOOPER called without request
[  409.893476] binder: 27231:27232 got transaction with invalid parent offset or type
[  409.901431] binder: 27231:27232 transaction failed 29201/-22, size 80-8 line 3260
[  409.922576] binder: send failed reply for transaction 406 to 27231:27232
[  409.941397] SELinux:  policydb magic number 0xf47cff8c does not match expected magic number 0xf97cff8c
[  409.959936] binder: undelivered TRANSACTION_ERROR: 29190
[  409.971961] binder: undelivered TRANSACTION_COMPLETE
[  409.983315] binder: undelivered TRANSACTION_ERROR: 29201
23:35:52 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@remote}}, {{@in6=@mcast1}}}, &(0x7f0000000440)=0xe8)
sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000040), 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@newneigh={0x1c, 0x1c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x4}}, 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[]}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='loginuid\x00')
ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000001c0)=""/120)
ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000240)={0x6, 0x3, 0xcb32})
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000280)={0xfffffffffffffff9, 0x3, 0x80000000}, 0xc)
getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc)

23:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:52 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)

[  410.379455] binder: undelivered TRANSACTION_ERROR: 29189
[  410.397815] binder: undelivered TRANSACTION_ERROR: 29201
[  410.419472] binder: 27258:27260 ERROR: BC_REGISTER_LOOPER called without request
[  410.444820] binder: 27258:27260 got transaction with invalid parent offset or type
[  410.452610] binder: 27258:27260 transaction failed 29201/-22, size 80-8 line 3260
[  410.462347] binder: send failed reply for transaction 409 to 27258:27260
[  410.477601] binder: undelivered TRANSACTION_COMPLETE
[  410.482837] binder: undelivered TRANSACTION_ERROR: 29201
23:35:52 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8)
write$P9_RREMOVE(r0, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x1d, @empty, 0x4e22, 0x4, 'dh\x00', 0x24, 0x3ff, 0x1a}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4e22, 0x2007, 0x7f7c, 0x9, 0x7}}, 0x44)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@rand_addr}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8)
write$selinux_load(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8cff7cf42b00000053ab00000000757816000000000000000002ab0000ece7aa2c8a3255879373477bb5f7c68a0c9e171ed06c74cf15ab7663086c9900000000"], 0x2c)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0)
finit_module(r1, &(0x7f0000000080)='/selinux/load\x00', 0x2)
syncfs(r2)
ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000340)="c037e494068b6d5d3f4fb2ca3e654bad6667f28a03cdf830278d6caf3df4e0104b4e1acf607cf870d9510ee0d9a4fa6daf5f425c317485194c3b03ef55af3b412db13363bfb9445d2f91fa21b51735d96811d9a9c3e62d2c97489d2fa6ea17c82629a2b2718aa18b88d7c3c8c548134f65dacd286120b8fcb943b042d7bf2376dc31425e40a873ebfc14dcbbeda0651bac3b53a424be21ad3a67")

23:35:52 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000400)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:52 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x320, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

23:35:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fsync(r0)

23:35:52 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x40)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x20)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)={0xfffffffffffffc02, 0xffffffffffffffff})
creat(&(0x7f0000000180)='./file0\x00', 0x4)

23:35:52 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x2}, @release={0x40046306, 0x4}], 0xf0, 0x0, &(0x7f0000001300)="65b16e9bcbce7630999a08b3fa8c5d9d0ccc3e23a80e3df49a5961afb7b6e039414ced43a1c9a19d0c83d34e2e215b097977869b3830a3985b09627ab219eee1906778fcfeaef82f093faae0bc49e50fccd313a9ddb83505644adfaca1d98042f84b0e075e3c97fb4e90aaa5074977af9f1d7a940615910e15b31b2d287e2f6a712c6b818527fc00cf67260bd79902a0566faf161a27343dbfe08fb5595b63825115379ba0c50362061ce94d0d52c4856aced601d2ee14b73e3b55c589a5741ed3de9f5247f9ff58170e361b35f1eb6c6feea54ce16a89d8a5a06911045fa0f9d3eab1f12dbf8fab686c1aa18468f256"})
prctl$intptr(0x24, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

[  410.489943] binder: undelivered TRANSACTION_ERROR: 29190
[  410.544487] SELinux:  policydb magic number 0xf47cff8c does not match expected magic number 0xf97cff8c
23:35:52 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x0]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:52 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8582, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x104, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x40, 0x9, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0x1, 0xffffffff, 0x4, 0x0, 0x1, 0x90000000000, 0xb660, 0xb49, 0xfffffffffffff803, 0xffffffff, 0x7, 0x9, 0x5, 0x3, 0x830, 0xc79a, 0xd3, 0x9, 0x7, 0xfffffffffffffffa, 0x4c1, 0x7f, 0x2, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x2, 0x800, 0xcd}, r0, 0xa, r1, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x101a)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9)

23:35:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9b56, 0x30000007fffd)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc000800)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14)

23:35:52 executing program 2:
r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1, @local, 0x10001}, 0x1c)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

[  410.635921] binder: 27288:27294 ERROR: BC_REGISTER_LOOPER called without request
[  410.658969] binder: 27288:27294 got transaction with invalid parent offset or type
23:35:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000040)=0x9, 0x8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  410.686712] binder: 27288:27294 transaction failed 29201/-22, size 80-8 line 3260
[  410.702857] binder: send failed reply for transaction 412 to 27288:27294
23:35:52 executing program 3:
prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xffffffffffff7fff}]})
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8, 0x4000)

23:35:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200)={r2})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  410.745435] binder: undelivered TRANSACTION_COMPLETE
[  410.759324] binder: undelivered TRANSACTION_ERROR: 29201
23:35:52 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x30000, 0x101)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x101, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @rand_addr=0x7f}, {0x2, 0x4e21, @multicast2}, 0x42, 0x0, 0x0, 0x2, 0xffffffffffffff7f, &(0x7f0000000340)='bpq0\x00', 0x41, 0x1, 0xffffffff})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0xfffffdcc)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
socketpair(0x0, 0x8000a, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fchdir(r2)
r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14)
setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={r5, @empty, @dev={0xac, 0x14, 0x14, 0x21}}, 0xc)
ftruncate(r4, 0x2008200)
r6 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe)
r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000200)={{0x4, 0xffff, 0x9, 0x9}, 'syz1\x00', 0x17})
fallocate(r7, 0x20, 0x0, 0x10000)
getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00'}, &(0x7f0000000040)=0x54)
sched_yield()
creat(&(0x7f0000000280)='./bus\x00', 0x90)
socket$inet6(0xa, 0x80007, 0x8001)
ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xffffffffffffff4b)

23:35:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x0, 0x100000000000, 0x6, 0x80000001}, 0x8, [0x4, 0x8000000000000, 0x2, 0x8aa, 0x0, 0x2, 0x800, 0xff, 0x7, 0x7, 0x6, 0x3, 0x8000000080000000, 0x7014378c, 0xfffffffffffffffc, 0x2, 0x1, 0x7, 0x5000000, 0xffffffff, 0x3f, 0x8, 0x2, 0x6, 0x3, 0xfb, 0x3, 0x2, 0x4, 0x7, 0xf50d, 0x8001, 0x5, 0x401, 0x6, 0x3ff, 0x54, 0xfffffffffffff55b, 0x4, 0xfffffffffffffffc, 0x63, 0x4, 0x6, 0x8, 0x8, 0xfffffffffffff000, 0x716b, 0x0, 0x5, 0xcb, 0x20, 0x5a, 0x6, 0x2, 0x9, 0x80000000, 0x1, 0x9, 0x8, 0x5, 0x1, 0x101, 0x0, 0x9], [0xc91e, 0x2, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xa19, 0x0, 0x6, 0xfffffffffffffffd, 0x5, 0x401, 0x2, 0x7ff, 0x8, 0x5d9, 0xfff, 0x0, 0x6, 0x7, 0x8, 0x101, 0x2, 0x100, 0x7, 0x800, 0x0, 0x7, 0x7, 0x8, 0x0, 0x4, 0x5, 0x1, 0x4, 0x3, 0x5, 0x5, 0xfffffffffffffffd, 0x7fffffff, 0x9, 0x10001, 0xff, 0x5, 0x2, 0x0, 0x2, 0x0, 0x5, 0x5, 0x1, 0x4, 0x1, 0x8, 0xffffffffffffff7f, 0x100000001, 0x7, 0x3f, 0x6, 0x7fffffff, 0x6, 0x100000001, 0x8019, 0x3], [0xff, 0x101, 0xca, 0xffffffffffffff95, 0x8001, 0x4, 0x3, 0x98, 0x1, 0x80000001, 0x5, 0xffffffff, 0x1, 0x2000, 0x3, 0x5, 0x0, 0xba, 0x8, 0x7f, 0x2000000, 0x1f, 0xfffffffffffffff9, 0x3c69, 0x9, 0x4, 0xbdc, 0x8, 0x7, 0x2, 0xb77, 0x3, 0x6c0d, 0x6, 0x5, 0x20, 0x2, 0x7, 0xffffffffffff0001, 0x0, 0x1, 0x2e, 0x9, 0x7, 0xffff, 0x1, 0x3d0, 0x6, 0xffffffffffffffff, 0x3, 0x881, 0x3ff, 0x6, 0x1f, 0x81, 0x7, 0x7, 0x7fff, 0x4c, 0x3f, 0x8000, 0x8000, 0x7f, 0xbb77], [0x1000, 0x1, 0x7f, 0xff, 0x5, 0x2, 0x5, 0x9, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7ff, 0x5, 0x0, 0xca6, 0x8, 0x56d6, 0x9, 0x80000000, 0x8, 0x5, 0x5db6, 0x7, 0x7fff, 0x9, 0x6, 0x82c2, 0x80, 0x0, 0x6, 0x875a, 0x7fffffff, 0x3, 0x7, 0x4, 0x1, 0x9, 0x4, 0x4, 0xfffffffffffffadd, 0x1, 0x9, 0x7fffffff, 0x100000000, 0x3ff, 0x20, 0x100010000000000, 0xd136, 0x1000, 0x9, 0x861, 0x1000, 0x909, 0x0, 0x8, 0x5d5, 0x40, 0x20, 0x80, 0x2, 0x4, 0x400]}, 0x45c)

[  410.788337] binder: undelivered TRANSACTION_ERROR: 29190
[  410.850168] binder: 27316:27319 ERROR: BC_REGISTER_LOOPER called without request
[  410.888540] binder: undelivered TRANSACTION_COMPLETE
[  410.893782] binder: undelivered transaction 416, process died.
[  410.924410] binder: undelivered TRANSACTION_COMPLETE
[  411.070674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket
23:35:53 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc0000, 0x0)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
fdatasync(r1)

23:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x200200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x7, 0x6, 0x9})

23:35:53 executing program 7:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x10d802, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001300), 0x10)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f00000000c0), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="3a9b9e00", 0x10)
getpeername$unix(r1, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
socket$inet6(0xa, 0xa, 0x0)
prctl$intptr(0x2a, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:53 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x200000, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="d8694fb23e85a0a88ce51ef3b0796d5f5fc95f77f4cf60bf6a83617646942f1721af42a51e4f20299ee2af949f3d8558b6f607b0a012fadb", 0x38}, {&(0x7f00000001c0)="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", 0xff}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="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", 0xfa}, {&(0x7f0000001400)="e921afda205641b3b886afca7907adcbf8f299a0d0f525628dc94ab16d04d02fe86969f24895a8317cb7c168fccc3be0db62670a761e9a1d79ccc33962e29a7b0077726658473acbba2a805e7bbfb567550c7dc146592adef8f3941958f7654e54b80e4488c98087f3bf4f27b4355ee40ad8d63415285e0635d698e18f44ec3fa21b0efd744744ad41b71dc0f96eb5bcbde4870d22766191d22f005340f4b0b8c05abfca8cf409d4ba7acb2f1a5fe8329795efdc96f73c648691f8fbba2eb588da9502d5cc37df4e9dbf9c72d8fccc67", 0xd0}], 0x5)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
ptrace$cont(0x18, r3, 0x10000, 0xd5a)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000013c0)={0x5, 0xa0, 0x8001, 0x0, 0xff})
r4 = socket$netlink(0x10, 0x3, 0x40004)
ioctl(r1, 0x8, &(0x7f0000001400))
fcntl$setflags(r2, 0x2, 0x1)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x218}], 0x30)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001500)="0821d287e1e182c92b381fc8cd2187a7627f62fbdcec579cb2213970195fac16b96b700b7220f1de763d44130fb338b33471da770e6852eec49d1ecca54b54991e52b0665967f841f594708e9c0a8c383a7e538c18667e3c9a6562af1ca022d93a330b761ebc3e36ed39af9dda199d2c031a062aa1c5fd3d28aa386367ab3ac57ba6d144c9819a7abeea929d7f6fe1b491df2abd4cc7ee761feea47cdcf261c4b7080b85e33f2d91c6b196d27c90e909ffe2c130f7c719d278fa6e668d3275003e2a945d38", 0xc5)

[  411.178078] binder: 27342:27349 ERROR: BC_REGISTER_LOOPER called without request
[  411.213564] binder: undelivered TRANSACTION_COMPLETE
[  411.218994] binder: undelivered transaction 421, process died.
[  411.237036] binder: undelivered TRANSACTION_COMPLETE
23:35:53 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:53 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
sendto$inet6(r0, &(0x7f00000000c0)="030300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bad2a66c9c1cfdf56fc88046a", 0x6c, 0x0, &(0x7f0000000000)={0xa, 0x200800800, 0x8, @mcast2}, 0x1c)
sendto$packet(r0, &(0x7f00000002c0)="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", 0x1000, 0x10, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005ac0)=[{{&(0x7f0000002400)=@nfc_llcp, 0x80, &(0x7f0000003980)=[{&(0x7f0000003940)=""/62, 0x3e}], 0x1, &(0x7f0000003a40)=""/28, 0x1c}}], 0x1, 0x0, &(0x7f0000000040))

23:35:53 executing program 1:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8582, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x104, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x40, 0x9, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0x1, 0xffffffff, 0x4, 0x0, 0x1, 0x90000000000, 0xb660, 0xb49, 0xfffffffffffff803, 0xffffffff, 0x7, 0x9, 0x5, 0x3, 0x830, 0xc79a, 0xd3, 0x9, 0x7, 0xfffffffffffffffa, 0x4c1, 0x7f, 0x2, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x2, 0x800, 0xcd}, r0, 0xa, r1, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000006000201020001000900000000f0ffbf0000000000000000e072526653ec49af4bf1412fcbff89499ec537872021b59767b9ce726cfa60d1b51b775211a3a1a7a93e4b7f2863775f7cc534551e9fabd69f60df89eb49e615c532280fade19647683b8632fe8f70755b2c40a596b006c02ae5ba19623072769af45386565f8dd60b30f805655646677d8c25b5985b9463633f78a1873aeea9bcb8f2525dea9087ccc6c19d3cff23ba09ac32b45ecba94b3d2d16f9af0fed34dfdffc3d40f8cc0a2e19760f67db7766276182d59c43dae06a209527bb4923a6549a0281d1195a2f3fcaddc359bd23bef5924ecf466fe407790500e96cf3c47802c02eab81c5de7d91d20ed79845693acf707ec2da594d08795f33fdd78b5fc85727d3e799cd4ec9e5fcd618bb7b4596a7ef4a2893e01fe8cc03d92592183730790400e72ea16274fe58a9b58a9ef5f423dd682c2e22cdc6b909c9742ccc3d0d9aeae9912c9157a82e36fafd8e994fbadbb1d172619d11e39102c61a49626e3daadbe619db7eba06578e297d977f002b5c401876a0f8c1cf0980e465a04ef67abd159166f8601209e2c95e491aef08236f201c03570e655b3073c2a5bea993dfcd4854eff9f20bbf96b2d0a80c05a8a971a8c91b6fc638ff7e9fa9a258a3ee339ee3e5185e9961dae7c638197e4f5f3871c12bc9a872274462979218b54f4aec31b0ddda3603ed5f047ef2c14a6a8e8a2e43cad1a72d6bd3d9f617ffd48b71de4697582b86e27b5dd820f86e6aeae8c76d6eb348d3904202eb715976bf78a55943484f86945bfe139c7bc0cb3d69de1790b2b058998d58f7c90a2afb78370cab74b922df9c71dd5b2a0378dc7f53e8a4401cece81b00403062db221a3a2309302c2e18245faa4d5cd4d3329119d3ab0d02e263063b911522c025019678f851b646d4932a1941a06a0e55000dc918ad7340f16baf05a337b26ac15249920004ce569730c9e4ee56ce97b6a6c0352f1fee0b0eedeba000b236a550cc32d97e7c429dc52f1f7afd9c432f77a40ff99f0b6bbfc3997e73f2fcc51a6068bf546cf81bf1631488b4381af50a2434ce17d809539863653ba5e04f2a8d1a78a2d1379f6e692a810bc9733899ec50057fdb4cf29940c96cf56e60c2e57e6e47b4b78e903d626fef85612ec082ccc935b333e2379beb921795f6786277b480652cbf02e2e1d8bf5e321e780beac9d7e1c240e171db1bf37bfc39e97957bb5e005067df1c40cc140385b669c9262c38f3de967fbab0207756ab047f93195faef8c5aa5003251102ca92a89d05147b69db8b346dec7594af00c24de6085973d8ca2dd90625485d298398415c4b65e865bfe1e3e2bae080270a9167f5d1e7d15dd0ef22a46cc9caf128c9695b0609c4cecd64b2d9aad983b63ccf183bcca6c414dd455df019c881512991de86fbdf8e78a982ae5d90683c0d666c9719942968cdc9f378aab8d79ced535f2eb09fe5dd5dc384a779e010163345f0d10272b73896f35e22c980907c25e2cb8ed03baaacb688c50317c701ff8d3897f7897322195ee1ea027ecf694bc96d4e99e3d867f5a742af974e8c1025a290065f894be5e0e1d7b64eb2c0b873741f02deb4475277b3cc6b3b4fa689ae7f5dd715f8ebb59886aeb3573cd8fef96ffdeb0602932f95207a352f896793d8c25b641f0194cf1ea56453c24118612fb68f9c332b42325cecb44a80c2aa666449119f98828dad400a7ff905ec12e70e984b6a3cb452a6bb03efeac2ceb16fac2df8635b7f7ec62fc564465c0490f0ad16e05511b8a5dbfbc421a65d0b635abaed012f34153866a1e1c23c83b32be6ff6cd74b5aede72be00e8dff239799c4e589d9f45fe0e74436a98f9d0324bc7ed64652bfed6e45a22fdca6ecfd2e353f5316a356bd8a95550a1475dc32fc33b8651316ecd0f17e7e474e2df8c30cd268cdb105122fe90e65826d4914e736bcf63ba6ae5a7997223835e660b302404b0081e0698d62a199c5c0bf6784f9cc8c09f89d04be06d57b387ece3ae2968ed7c4911005f464697a48b0fb4d3938116a3f5236f47adc2beb5ea6ff68a534341c3455aab2c886ac82fd915d3d1b299c02767b67cec70862a8b9e634e91679c09d325e654350ead0ceb255b3c8993ac5f3c37277bfa1006093f9300a5199b4497a24a0aed82d3c191119b3c6f1fbad8353c0833e85428b808c21cb60c2a51e3e94ab0d0afe3f412bd5b989b1fdb0a4906164b60e53424f65eaab13030d4276adfd3f3412156bfbba150ab70c2104dc17f6b7917da882ddb96a24cdb3972439c26470c6cb80ae06641be64b1141a5a37be46e56201033c3ceceebc245f2f18dc747d2298197805cec4f5ace2845837d82d1c82664abf75e9e4b467b49856b9cc0ce8b973135fc4879f894975fb83d6065f7238dfe5f9ed83cd06ff0f2aae488c4228fe2e33c54032811cc3f7eb6b657f4ec90a974ad917ccdfef9b15ec8786bd025b1f6d83fe4c07318414094e7405251be96a25c514a537e0063d3cfe9f723a259cb86cedbdfa29530b19f945d14daccaaa9da304a0c597f4c6e06671072be57e9b70995dd1ec4192ebc2b4b5ac8923126a34459753bf393d190bc789cbf7e55ff0d91af71aec2cd2cff70784a6946079eab5615682723a19511ced8b37f0f4071b1a492acdc98161f0b058ff01ad865a864dc9e16da9bee8ffbf5d910643c3d3fcaf82f156f14ab13049551e3f61649461e187c4185eea28f7e37751542b1b2c224dec9ba6882f3f4565af125b768cf79339fad1e05edc7f73fe3c4587b4933cdc4d593118e87e6a252dd3a06921b44ba5d35903db6ec266046b2a031b8f7a3f56e70120210331693bfb819e2c244f7d91e4ffb9745ba3bac960f7a777ece2a164fa7a751b6b3cdc6b05e200921098de2ac027a48b80b8ef3d6b1073a9248f70100548df9d1b8db7ddecb4383390ec0ce641fd85ce6816dd314f11561d3883063840887a95f0bc14626448512d685721971855150720f55c65c23c212feb2c02b3f592f43a54134bb49d7c0d460026300f4f02ad4375d1437eb6cc8350e596c10b66fdbdd580671a718adf38ab4f59ea1f5d84c7164d5fe562608a2935aa414897b302ee73c3f04ac468a5979f259a86953a1864c9822ed17c209f2155f7acc3f3ffe1f5b256908ae4350246afcf72da123e5e5c6d55d56d26498cf2b945a6316e4decd1099a33b812f6ff723ae3bc86b1bd21b0a60ae7f5c0e093d847e831283705084f7dfbfb3d043f6c8b7d7e3c64ea44d074529f3843db7a3090591e52b1dc48f3fcf4ce01c5a335567be92873587aa74011f759eb7d42e3c94bcee0a3472c53c5ebd1d5a99ae13a9d955b42546c606e15ad2fdde0b2519f62e7d3579df3d9f406031f3073f0766f181d6edcb5d69056fa43b9c248ea3c1b0e73292b8eb1b0a89cd4998518bd06336c690c73f7f0f540fe416d1d9d702649149b3090af4ac33a549fa34310118c89e530cda6142bfe09099560bddd5157b1f3ed88932cb5a0ee64d63e5ae41f81d52fa0ceec523311cdd15faf713f904a31c6189a73936f79a53fa55da80705b67b57bc541dea0812f602052ff3c32b9b9a4853ad561feec4ae58d848d53a2d5b7ff2ef5ed4efc45231e6e89e5a6b6f3b3084e44010bb18b23375e95cd0f95d61af1aa9b21d5a0895355cdf5bb7240630cd30020b5357ca3f8bd7611528c32778d471e5700e6e453c1c0d3a477590630be8e205724de3b966ead321186caa4bb833aff4f87c35b8b401a88183c81fb16b86d2b131fe4cd5dbd936876f477a26c6e043321415387503be3e6b3ca0624a0c178979a18f7a30418dcb944219332fe47e9a320387b23663185f5bb0a89f85e3b8ab051be9a8c82190fd33e973f981eec3bf39edbec33c04a38ba85c1f9e52c65e58708655ad5daa1f7ba6e0069bb12b196a6157e45db2cd0e6c55f2ad9d697640949d56955671bb25e485c9203e87844121d77947dcb528ed13125a67a6b64dfa9158e70ba8d3c44437a93f3ed54fa44d8724b3b2fadd47109fd33f323e2f96eea1d3ef684ec846820666798f6f470d304f7355c7da1977613c8d7bfd2e94080cbcc9dda136955a445b8b3632a294a268746f83aea2ddfe476f35b040a075c5f8d409135b3e0201b7fe9d4f958db2f6b202bbe9a546c78d2beb2de15ac4cd0a803c1222b76c54c8d99a0040d64b537499acd4cbf5fbea9e573afb6222db84cf47567d99917b9c2a692b6e9c34a905e4fbd619e1d1c0492f2be4b706326e35acfd36e8657c7083e4a188253d64cc949632c764f48e56a2aea850e8c5ad86c1fa3fb49af2073f10fd119e1f9902cf19f35b7152336ac1548ac4bb5533a6819649782eba7aa5fd8d938dc3517d4e87389b6d9b6035394eba91a5a3d71a7ecf1f816a5621985722747276c5ed8b4637f49afeab05e1d96051ce5887265a3cbafad14583ecc975a6aec7d0497562a62a7a140afc1baebd7598d7312ce9d5a1a1ddd5275cb4803eb765016430cc06b9ae1224d09296166d53c3376e875a44739bbe802f240e0f317f7643549d0046b4724d918c75ac1080fca860d613d175d149473c669f1f12afbf62d5718843581c7e83c86f4c4ee9cf5a3f9dc2eabf26bbf6048cc7ad08082ea7ac1255a3440e70592515f03f4b0d9de17432231cc4d59faed8bc1fac68e46ebe98307a3ca301f8cd6b309471b822b43d92295c7d5ec82898a2d29e609d4bec32f2f57808a4c93d386059f8b21c694de1f2212f261f610ba15d86e3ee21c5e296e8da1d5c83ddb62ffa38ebdbbe05f609ef72eeccb89b18bfae353f9bf1ab485b2b77a2de504698c43f4c032d0d24a62adf8bdaf2a3ed096c7874b553e317479139ed0eda6c28baf1461b5c5c00677b0c0e7591476ffe44d93500c6a481fe5535aa554dc4f0d9a3ba98eedf9289c5e95ae6e78fe208fd75587a5a5e56534d572646eccc614a142865ebafb0c612cdc57dbdaa34a748840892348c9c685faa17c15bf79c603a44b47eecc68f7396bd4ef624c80d73949ec34d63b54202520279f2ba4ddc235dab10e3236258f4786ee0595cff6b65aec5dd7d8cb287020b59ae40580b54bb1983612e8daea8b8526f1c25521eda2f0ed72762d56d90e12788d9c1d6a3a94463843da037804e48d2a01c8545812af6122164782a39fd86ddb545070701010e55cb6a22a309a691df6c7cacd5e0330801f6c83f0db76abd97b32223be5d4f3c6fe26441f7d60015992c560222df90d5f4eaf7da72b0717df45789ef8e853b8ed2b636397433abcc965b6eb6f3f2dc742f3d94ae9bee72cc6bff7c8812b7210544bf27ef6c855669f500c2fffd8819b646fbb5f63b02fc654651753a8f11daf0bdf2221ab7151f228eccfdeb08ba8ee6a4add062ff1bea9d82c82cc54989551dca590110eef03aee22e30f12639051bda92ee4582f9a017817181e533ece77aecdcb446145fbfed5fbdaa3ddee2ae603e1c58975bb455bb0b07116b847a7c22e2d8f305c78c59cebfeb57a5df3f9b07e19f333065c473cb73d416ea4b5cfcdddf80afecfa8beaba5a981e2d730538e6fc68e541d05417a43ddbb9f6f924de8d7c13f3f388906798726d5952454ed836e9d6b83b1c8ebc421db7bc34edc403c24b3ab1ae2135e8c2f83ea6179626d51f419eb65d46ea3dfad77eeb68a3ea6c12cbac7f1c3fa9f1b7fe1021a5c13fdb9c4e25e1b905411d939714c91fcdcfc6285def1ecfc11975efcccc15d83a020694aeef2db672b8db9a110d3f29830568f8fc058687951deae64636c2313bcc97"], 0x101a)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9)

23:35:53 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000001c0))
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x7, 0xffffffff, 0x9, 'queue1\x00', 0xf8})
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f0000000140))
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8)

23:35:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="aa478f8c"], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000050000000000000000800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="8561646600000000000000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627300000000", @ANYRES64=r2, @ANYBLOB="000000000000000079e3e82d205dbdb9f9c8f1481ea4ae003c9975c87a4e298ee6f7302c8a0bfdd6e04169b26746b0c0d46dbeb3f5a4ef169f45895219e67a87d76d2e4b1cd15d217afc815f6b658beb1933c75e009409ae3fecb13489bbe40a434c02ca3762b05f0fc3fcfcd700"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2)

23:35:53 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = open(&(0x7f0000000000)='./file0\x00', 0xc000, 0xa0)
ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x20)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:53 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)=@nfc, 0x29f, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000001280)=""/20, 0xfffffffffffffe02}, 0x0)
r1 = socket$inet6(0xa, 0xa, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$intptr(0x29, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x40000, 0x0)
getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="20010000240700e528bdaf9e1e75434272a9d29c", @ANYRES32=r3, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x40}, 0x4004000)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

23:35:53 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="6e65742f6d6366696c7465720008c377b12bf4b8df1a161b318590e35c78cacc7e1e549f331a40b3ae5fd7c06ca4f712ae21847817baffa4318ed9d1e6e978d8798e9c9aaa7d5708e0c3854aa6c90642fc9f31adfa3c24f76d91ffbaf79fd808c51a034fe7f753fdffffff731df700194319fd7d4d92608bc3100845e709437b3d6372a206182313a8df8b28e0f7e20914d770f2ba99f503a4feb3b9e02d8d")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
fchdir(r0)

23:35:53 executing program 2:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000000000000, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x7fff, 0xfff, 0x3, 0x2, 0x6, 0x7ff, 0x7ff, 0x6, 0x20, 0x20000000000000, 0xbe2})
syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x2, 0x210042)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f0000000040))

[  411.471991] binder: 27370:27380 unknown command -1936767062
[  411.497265] binder: 27370:27380 ioctl c0306201 20000140 returned -22
23:35:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x3f, 0xc8, "769a93c07cc9df157b3fd639837926afd3d4398a03b611e98ad85c77bd851379934988c93bd8d16600b344478a2de4ed3da03a9e988d25bb5342870cf1cecf81c5630d6dddcb7b8088135d07f7a92c4d5171b3aad7a43f6fd21b1a2fbba26c6d3bf2808c0e033d86ec031812245390dfb7c078daa2d350a5492d463629a380b4c103dd1f85288d3979cf7bef5853f74d675499cf030ce1b1bfcee78ff3d484de034bf138bfd04a4add943901fbed792a8ea521834a92a227472d8e54925ca74524c629000ff73ab0"})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:53 executing program 3:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8582, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x104, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x1, 0x4, 0x0, 0x0, 0x8, 0x40, 0x9, 0x0, 0x7, 0x1, 0x3ff, 0x6, 0x1, 0xffffffff, 0x4, 0x0, 0x1, 0x90000000000, 0xb660, 0xb49, 0xfffffffffffff803, 0xffffffff, 0x7, 0x9, 0x5, 0x3, 0x830, 0xc79a, 0xd3, 0x9, 0x7, 0xfffffffffffffffa, 0x4c1, 0x7f, 0x2, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x2, 0x800, 0xcd}, r0, 0xa, r1, 0x2)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0)
fchdir(r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x101a)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9)

[  411.515058] binder: 27370:27380 got reply transaction with no transaction stack
[  411.533694] binder: 27370:27380 transaction failed 29201/-71, size 80-8 line 2922
23:35:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100))

23:35:53 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f00000019c0)=@ethtool_dump={0x27}})

[  411.565141] binder_alloc: binder_alloc_mmap_handler: 27370 20010000-20013000 already mapped failed -16
[  411.603845] binder: BINDER_SET_CONTEXT_MGR already set
[  411.609792] binder: 27370:27380 ioctl 40046207 0 returned -16
23:35:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))

[  411.616699] binder_alloc: 27370: binder_alloc_buf, no vma
[  411.622785] binder: 27370:27405 unknown command -1936767062
[  411.633569] binder: 27370:27397 transaction failed 29189/-3, size 0-0 line 3137
[  411.641179] binder: 27370:27405 ioctl c0306201 20000140 returned -22
[  411.641263] binder: 27370:27380 got reply transaction with no transaction stack
[  411.641272] binder: 27370:27380 transaction failed 29201/-71, size 80-8 line 2922
23:35:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:53 executing program 2:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80000, 0x0)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x39d1)
fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
sendto(r0, &(0x7f0000000440)="8b673f91eeebdb2cf29bb4d66e6badc7d0ca97d8b7060e8c7b5962906a2214717ddad7", 0x23, 0x800, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x2, 0x1, 0x1, 0x1}}, 0x80)
fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setgroups(0x4, &(0x7f0000000400)=[r1, r2, r3, r4])
r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0x9208, &(0x7f00000001c0))
ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000500)='syz_tun\x00')
ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000540)={0x2, 0x1178d5dd})
ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000040))

[  411.641784] binder: undelivered TRANSACTION_ERROR: 29201
[  411.641862] binder: undelivered TRANSACTION_ERROR: 29201
[  411.641896] binder: send failed reply for transaction 425 to 27370:27380
[  411.647900] binder: undelivered TRANSACTION_COMPLETE
[  411.647916] binder: undelivered TRANSACTION_ERROR: 29189
[  411.725554] binder: undelivered TRANSACTION_ERROR: 29189
23:35:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000340))
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=@random={'system.', '/dev/binder#\x00'}, &(0x7f0000000240)=""/194, 0xc2)

23:35:54 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r1 = socket$inet6(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x18})
sendto$inet6(r1, &(0x7f00007a8fff), 0x0, 0x3, &(0x7f000006ffe4)={0xa, 0x0, 0xffffffffffffffff, @loopback, 0x8001}, 0x1c)
getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000c86000), &(0x7f0000000040)=0x3b)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080))

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$int_in(r1, 0x5473, &(0x7f0000000040)=0x3ff)

23:35:54 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fcntl$getflags(r0, 0x40a)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:54 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8d)
fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = getegid()
fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x400)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
getrandom(&(0x7f0000000100)=""/10, 0xa, 0x1)
setfsuid(r2)

23:35:54 executing program 7:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = memfd_create(&(0x7f0000000300)="078cc9d7f008fa", 0x0)
r2 = inotify_init1(0x0)
fcntl$setown(r2, 0x8, 0xffffffffffffffff)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000000)=0x10000)
fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, <r3=>0x0})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000007, 0x11, r1, 0x0)
get_robust_list(r3, &(0x7f0000000400)=&(0x7f00000003c0)={&(0x7f0000000100), 0x0, &(0x7f0000000380)={&(0x7f0000000340)}}, &(0x7f0000000440)=0x18)

23:35:54 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x20010, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000340)})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x54, 0x3, 0x8000}, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="0c040000000000010000000400000000"], 0x0, 0x0, &(0x7f00000001c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r0, 0x17)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={r1})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000240))
getcwd(&(0x7f0000000040)=""/252, 0xfc)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x100)

23:35:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="0000000000000000000048b90b7759d3712f6bb2d6a3cc745266d67edf6e277445f7514f29e88de8cb22480bab9478486aabf568859663b4282a0136576c4fbd")
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x3, 0x400, 0x685e, 0x9540}, {0x7, 0x4, 0x7fff}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_team\x00', 0x600})
membarrier(0x0, 0x0)

[  412.282449] binder: 27442:27444 unknown command 1036
[  412.287658] binder: 27442:27444 ioctl c0306201 20000000 returned -22
[  412.304317] binder: BINDER_SET_CONTEXT_MGR already set
[  412.311240] binder: 27442:27444 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
23:35:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0x80000000)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000080)={0x8000008, 0x4, 0x3, 0x8, 0x100, 0x7ff})

23:35:54 executing program 7:
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180), 0x0, 0x0, 0xffffffffffffffff)
r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0), &(0x7f0000000100)='V', 0x1, 0xfffffffffffffffb)
keyctl$join(0x1, &(0x7f0000000200))
keyctl$describe(0x6, r0, &(0x7f00000042c0)=""/4096, 0x4e95ad6e)

[  412.328164] binder: 27436:27447 ioctl 40046207 0 returned -16
[  412.342064] binder: BINDER_SET_CONTEXT_MGR already set
[  412.350005] binder: 27442:27457 unknown command 1036
[  412.366553] binder: 27442:27458 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
23:35:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000000c0))
prctl$void(0x23)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote, <r1=>0x0}, &(0x7f0000000080)=0x14)
eventfd(0xb05)
sendto(r0, &(0x7f0000000140)="db8b08e14c12ddbce29f62", 0xb, 0xc000, &(0x7f0000000180)=@ll={0x11, 0xff, r1, 0x1, 0x4, 0x6, @broadcast}, 0x80)

[  412.383709] binder: 27442:27444 ioctl 40046207 0 returned -16
[  412.390613] binder_alloc: 27442: binder_alloc_buf, no vma
[  412.398195] binder: 27442:27457 ioctl c0306201 20000000 returned -22
[  412.414724] binder: 27436:27447 transaction failed 29189/-3, size 0-0 line 3137
23:35:54 executing program 1:
syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000000ffffffff0086dd60c498e000100000e3801b000004000000000000000000aaff02000000fdffffffffff"], &(0x7f0000000040))
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})
r0 = timerfd_create(0x7, 0x800)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080))

23:35:54 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  412.436212] binder: 27436:27459 unknown command 1
[  412.441203] binder: 27436:27459 ioctl c0306201 20000140 returned -22
[  412.492365] binder_alloc: binder_alloc_mmap_handler: 27436 20010000-20013000 already mapped failed -16
[  412.512885] binder_alloc: 27436: binder_alloc_buf, no vma
[  412.523739] binder: 27436:27459 transaction failed 29189/-3, size 0-0 line 3137
[  412.531534] binder: 27436:27447 unknown command 1
23:35:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, r2, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:54 executing program 7:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg(r0, &(0x7f0000014fc8)={&(0x7f0000006ff0)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f000001ef80)=[{0x20, 0x0, 0x7, "0710050300ef000097"}], 0x20}, 0x0)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x200000)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x20000000009, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))
pwrite64(r1, &(0x7f0000000240)="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", 0x1000, 0x0)
ioctl$FICLONE(r1, 0x40049409, r1)

23:35:54 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080))
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$sndseq(r2, &(0x7f0000011fd2), 0xffffffee)
mq_getsetattr(r2, &(0x7f00000000c0)={0x9, 0x1, 0x81, 0x2, 0x8, 0x200, 0x80000000, 0x4}, &(0x7f0000000100))
read(r1, &(0x7f0000000000)=""/126, 0xfffffeab)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

23:35:54 executing program 5:
r0 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800)
fsetxattr(r0, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)="27c873656c696e757865746830766d6e6574312a236e6f64657673656c666d696d655f747970652f00", 0x29, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x101)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:54 executing program 6:
ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000000)=""/2, 0xfffffffffffffe71)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x20)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x19, 0xe, 0xf, 0xb, 0x88, 0x2, 0xca, 0xffffffffffffffff})
accept$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14)

[  412.536876] binder: 27436:27447 ioctl c0306201 20000140 returned -22
[  412.546217] binder: undelivered TRANSACTION_ERROR: 29189
[  412.559133] binder: undelivered TRANSACTION_ERROR: 29189
23:35:54 executing program 7:
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000002280)=[{&(0x7f0000000080)='1', 0x1}], 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x15)

23:35:54 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="0000000000000000000048b90b7759d3712f6bb2d6a3cc745266d67edf6e277445f7514f29e88de8cb22480bab9478486aabf568859663b4282a0136576c4fbd")
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x3, 0x400, 0x685e, 0x9540}, {0x7, 0x4, 0x7fff}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_team\x00', 0x600})
membarrier(0x0, 0x0)

[  412.605104] binder: 27503:27507 BC_ACQUIRE_DONE u0000000020ffa000 no match
[  412.627213] binder: 27503:27507 DecRefs 0 refcount change on invalid ref 2 ret -22
23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair(0xa, 0x0, 0x4, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@getspdinfo={0x168, 0x25, 0x325, 0x70bd25, 0x25dfdbfd, 0x7, [@sa={0xe4, 0x6, {{@in=@multicast1, @in6=@mcast2, 0x4e20, 0x5, 0x4e23, 0x8, 0xa, 0xa0, 0x20, 0x0, 0x0, r3}, {@in6=@mcast1, 0x4d6, 0x33}, @in=@loopback, {0x4d5, 0x6, 0x0, 0x20, 0x80000001, 0x89, 0xffffffff, 0x400}, {0x3, 0x3, 0x9, 0x5}, {0x5db9, 0x7, 0x3f}, 0x70bd2d, 0x3507, 0x0, 0x1, 0x3, 0x20}}, @replay_esn_val={0x3c, 0x17, {0x8, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0x6, [0x100000000, 0x101, 0x8, 0x7, 0x3ff, 0x1, 0x8, 0x7fff]}}, @policy_type={0xc, 0x10, {0x1}}, @mark={0xc, 0x15, {0x350759, 0x5e9}}, @encap={0x1c, 0x4, {0x3a6abd050ecf644c, 0x4e20, 0x4e24, @in=@loopback}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8090}, 0x24000000)
flock(r0, 0xc)

23:35:54 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[]}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206d400020000000080000000009c00"], 0x10}}, 0x0)
ioctl$void(r0, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0)

[  412.655769] binder: 27503:27507 BC_FREE_BUFFER u0000000020ffa000 no match
[  412.664772] binder: 27503:27507 ERROR: BC_REGISTER_LOOPER called without request
23:35:54 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)

[  412.710254] binder: 27503:27524 got reply transaction with no transaction stack
[  412.721723] binder: 27503:27524 transaction failed 29201/-71, size 80-8 line 2922
23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8000, 0x47, 0x9, 0x2}, {0x9, 0xffff, 0x5720, 0x1}, {0xb6, 0xa05, 0x8000, 0x658}, {0x1, 0x1, 0x401, 0x83}, {0x1f, 0x4, 0xc38, 0xfffffffffffffff7}, {0x7ff, 0x9, 0x7, 0x5}, {0x81, 0x2, 0x8000, 0xfffffffffffffff8}]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:54 executing program 6:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000300)={0x6, 0xfffffffffffffffd})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000080)={0x4, 0xc7})
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$VT_RELDISP(r0, 0x5605)
write$P9_RLOCK(r0, &(0x7f0000000200)={0x8, 0x35, 0x6, 0x2}, 0x8)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x4005, 0x0)

23:35:54 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x400000000002, 0x17ffe)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="f632a9c29377c1be8ee28b8910625f12ca371498170441e22350fc292ebc0b945a43e6a9f4efb767eeacfd5a469f7e5790acbc19a06d7d01fa879d92a8c8c05780dc62da56e44cb0020acccb417325918d63bb5352033253df6a146dda37e172914054590a15f226ed0fac58539a39f873c2d083a4116d4f3ddba15c8b700b0ef66f7d2e388c721702274ea70114a6a9a4470a0fefb58142ff4048b6df45affba64bad7c2dc609e1211ed039bcea48d69c8bc437c478d666533f6c432becf583e67be5c8d7f46f77d8cade9ee217555af807")

23:35:55 executing program 7:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x54702141acaf175f)
write$P9_RSTAT(r1, &(0x7f0000000140)={0x54, 0x7d, 0x0, {0x0, 0x4d, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xa, '/dev/uhid\x00', 0x10, "47504c2c262e7070703123b9296c6f2e"}}, 0x54)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x20100)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0))

[  413.389186] binder_alloc: binder_alloc_mmap_handler: 27503 20010000-20013000 already mapped failed -16
[  413.398790] binder: BINDER_SET_CONTEXT_MGR already set
[  413.404094] binder: 27503:27524 ioctl 40046207 0 returned -16
[  413.411166] binder: 27503:27572 BC_ACQUIRE_DONE u0000000020ffa000 no match
[  413.418306] binder: 27503:27572 DecRefs 0 refcount change on invalid ref 2 ret -22
[  413.426152] binder: 27503:27572 BC_FREE_BUFFER u0000000020ffa000 no match
23:35:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01010000"], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
fcntl$setpipe(r0, 0x407, 0x9)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(r1, &(0x7f0000000280)=@known='security.ima\x00', &(0x7f0000000300)=""/2, 0x2c4)

23:35:55 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000300)=0x3)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
futex(&(0x7f0000000040), 0x4, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0)

23:35:55 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20}, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100))
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240)=0x800, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040))

23:35:55 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x2000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x28, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, r2, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:55 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x18000, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sw_sync\x00', 0x8040, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000000380)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0xa6}], 0x10000000000000de)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf250e00000009000400020000003800030014000600fe8000000000000000000000000000bb08000100020000000800080087000000080007004e20000008000300020000000800050000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
clock_gettime(0x0, &(0x7f00000003c0)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r1, 0x1, &(0x7f0000000440)={{r4, r5+10000000}, {r6, r7+30000000}}, &(0x7f0000000480))
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000002c0)="ba95be942a45eb718141b67ac2d1c6a299557c6a489b4e4501bd00807d73ff30dacf769781c79a9ae0d1f204ce02d3bd68b53adcc365d953995d8a9d73f1a7d4159248cd427e5fc33740366c402424322f6f15c08c343ba12da475a7d58b471f8db2aa1292cc95a4f3de6256f78448bdab64c0e00e7f98c43da723fdbac3d4232ccb575a73d60462cb4c35638cd881e6bf508c")
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/access\x00', 0x2, 0x0)

23:35:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:55 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000000)=@random={'system.', 'systemsecurityproc\x00'}, &(0x7f00000003c0)=""/2, 0x2)
fcntl$setpipe(r0, 0x407, 0x17ba)

23:35:55 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
poll(&(0x7f0000000200)=[{r1}], 0x1, 0x9)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
sched_getaffinity(r2, 0x8, &(0x7f0000000100))
capget(&(0x7f0000000140)={0x399f1736, r2}, &(0x7f0000000180)={0x0, 0x6, 0x6d50f9c5, 0x800, 0x2, 0x4})

[  413.433232] binder: 27503:27571 got reply transaction with no transaction stack
[  413.433328] binder: 27503:27524 ERROR: BC_REGISTER_LOOPER called without request
[  413.448238] binder: 27503:27571 transaction failed 29201/-71, size 80-8 line 2922
[  413.456608] binder: undelivered TRANSACTION_ERROR: 29201
[  413.462130] binder: undelivered TRANSACTION_ERROR: 29201
23:35:55 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e21}})
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340), 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}, 0x1ff}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x260, 0x0)
pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00')
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x210200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000140)={0xffffffff, 0x3, 'client0\x00', 0x4, "afd42519e250c0d8", "e1fc27f76fd4008f521b01d2cb7ca3c934934811f6ccd1697182ea6068e8a3a9", 0xa6, 0x4})
r3 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x174c, 0x0, 0x1, 0x2, 0x0, 0x7ff, 0x6}, &(0x7f0000000240)=0x20)
ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")

[  413.489134] binder: 27575:27576 unknown command 257
[  413.506987] binder: 27575:27576 ioctl c0306201 20000140 returned -22
[  413.522104] binder: BINDER_SET_CONTEXT_MGR already set
23:35:55 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:55 executing program 7:
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
futex(&(0x7f000000cffc)=0x10000000004, 0x80000000000b, 0x4, &(0x7f00000001c0)={0x77359400, 0x4}, &(0x7f0000048000), 0xfffffffffffffffc)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e21, 0xfffffffffffffff8, @local, 0x8}}, 0x3, 0xa00000000000, 0x8, "3f72dbd94038131d478b4c7a1d8691f5e855c419c6576f0acb625a9a4b014f51a42c78f98b7cf61322aa1f9178efd93c958cebb2cc5ae6ce24c298f8f42433e8750bfc3b277f8c24f4d151f1116f6cbc"}, 0xd8)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0)

[  413.536951] binder: 27575:27593 got reply transaction with no transaction stack
[  413.545902] binder: 27580:27585 ioctl 40046207 0 returned -16
[  413.552745] binder: 27575:27593 transaction failed 29201/-71, size 80-8 line 2922
[  413.564569] binder: 27580:27585 BC_ACQUIRE_DONE u0000000020ffa000 no match
[  413.581235] binder_alloc: binder_alloc_mmap_handler: 27575 20010000-20013000 already mapped failed -16
[  413.596189] binder: 27580:27585 DecRefs 0 refcount change on invalid ref 2 ret -22
[  413.611783] binder: 27580:27585 BC_FREE_BUFFER u0000000020ffa000 no match
[  413.614266] binder: 27580:27604 ERROR: BC_REGISTER_LOOPER called without request
[  413.614594] binder: 27580:27604 got reply transaction with no transaction stack
23:35:55 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x33ea, 0x80040)

[  413.614603] binder: 27580:27604 transaction failed 29201/-71, size 80-8 line 2922
[  413.644597] binder: BINDER_SET_CONTEXT_MGR already set
[  413.649948] binder: 27575:27576 ioctl 40046207 0 returned -16
23:35:55 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f000000ac80)=[{{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0xb, 'K'}], 0x18}}], 0x1, 0x0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x20)
ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x8001}, 0x158)
chdir(&(0x7f00000000c0)='./file0\x00')

23:35:55 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8ca8, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x80)

[  413.684356] binder_alloc: 27575: binder_alloc_buf, no vma
[  413.690026] binder: 27575:27593 unknown command 257
[  413.695307] binder: 27575:27593 ioctl c0306201 20000140 returned -22
[  413.701960] binder: 27575:27576 transaction failed 29189/-3, size 0-0 line 3137
[  413.705649] binder: undelivered TRANSACTION_ERROR: 29201
[  413.726176] binder: 27575:27593 got reply transaction with no transaction stack
23:35:55 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
r2 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r3 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000))
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000040)={0x1})
r4 = dup3(r2, r3, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000000c0)={0x4, 0xc312, 0x6, 0xeb00, 0x200})
dup3(r2, r1, 0x0)
write$cgroup_int(r4, &(0x7f0000000000)=0xffffffffffffffff, 0x12)

23:35:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fcntl$getflags(r0, 0x40b)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x810, r1, 0x3f)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:55 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x101, 0x1, {0xffffffffffffffff, 0xff0e1703e5a936ac, 0x1, 0x0, 0x80}})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  413.748729] binder: undelivered TRANSACTION_ERROR: 29201
[  413.754603] binder: send failed reply for transaction 437 to 27575:27576
[  413.761318] binder: 27575:27593 transaction failed 29201/-71, size 80-8 line 2922
[  413.768748] Dead loop on virtual device ip6tnl0, fix it urgently!
23:35:55 executing program 6:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x1, 0x1}, 'port1\x00', 0x10, 0x0, 0x0, 0xfffffffffffffffd, 0x200, 0xeaea, 0x8001})
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:55 executing program 5:
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sw_sync\x00', 0x280103, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x100000001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
timer_create(0x0, &(0x7f0000000040)={0x0, 0x38}, &(0x7f0000000080)=<r1=>0x0)
timer_getoverrun(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:55 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10c12024}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="20042bbd7000fcdbdf250600000064000300080005007f000001080007004e21000014000200766c616e3000000000000000000000000800040001010000080004000900000008000800000000001400020076657468315f746f5f626f6e640000000800030003000000080007004e23000008000400090000000c000200080002004e200000380003000800080000000000080004004200000014000600ff020000000000000000000000000001080007004e20679b3650b8bfe3343695c970fc0400000800034cf676db00000000000800050008000000"], 0x3}, 0x1, 0x0, 0x0, 0x40010}, 0x41)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x1, 0x40}, {0xffff, 0x480000000000}, 0x4, 0x1, 0x800})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000240))
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14)

[  413.837561] binder: 27631:27633 ERROR: BC_REGISTER_LOOPER called without request
[  413.838199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket
[  413.853666] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket
[  413.884263] binder: 27631:27644 got reply transaction with no transaction stack
[  413.895351] binder: undelivered TRANSACTION_ERROR: 29189
[  413.909898] binder: undelivered TRANSACTION_ERROR: 29201
[  413.912815] binder: 27631:27644 transaction failed 29201/-71, size 80-8 line 2922
23:35:56 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x18000, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sw_sync\x00', 0x8040, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000000380)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0xa6}], 0x10000000000000de)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000fedbdf250e00000009000400020000003800030014000600fe8000000000000000000000000000bb08000100020000000800080087000000080007004e20000008000300020000000800050000800000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
clock_gettime(0x0, &(0x7f00000003c0)={<r4=>0x0, <r5=>0x0})
clock_gettime(0x0, &(0x7f0000000400)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r1, 0x1, &(0x7f0000000440)={{r4, r5+10000000}, {r6, r7+30000000}}, &(0x7f0000000480))
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000002c0)="ba95be942a45eb718141b67ac2d1c6a299557c6a489b4e4501bd00807d73ff30dacf769781c79a9ae0d1f204ce02d3bd68b53adcc365d953995d8a9d73f1a7d4159248cd427e5fc33740366c402424322f6f15c08c343ba12da475a7d58b471f8db2aa1292cc95a4f3de6256f78448bdab64c0e00e7f98c43da723fdbac3d4232ccb575a73d60462cb4c35638cd881e6bf508c")
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/access\x00', 0x2, 0x0)

[  413.935673] binder: undelivered TRANSACTION_COMPLETE
[  413.949957] binder: undelivered TRANSACTION_ERROR: 29189
[  413.971121] binder: BINDER_SET_CONTEXT_MGR already set
[  413.976617] binder: 27631:27644 ioctl 40046207 0 returned -16
[  413.992493] binder_alloc: 27631: binder_alloc_buf, no vma
[  413.998793] binder: 27631:27653 transaction failed 29189/-3, size 0-0 line 3137
[  414.010138] binder: 27631:27644 got reply transaction with no transaction stack
[  414.012630] binder: 27631:27633 ERROR: BC_REGISTER_LOOPER called without request
[  414.031558] binder: 27631:27644 transaction failed 29201/-71, size 80-8 line 2922
[  414.045819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket
[  414.046111] binder: release 27631:27633 transaction 443 in, still active
[  414.046119] binder: send failed reply for transaction 443 to 27631:27633
[  414.046152] binder: undelivered TRANSACTION_ERROR: 29201
[  414.067942] binder: undelivered TRANSACTION_COMPLETE
[  414.067957] binder: undelivered TRANSACTION_ERROR: 29189
[  414.091757] binder: undelivered TRANSACTION_ERROR: 29201
[  414.098051] binder: undelivered TRANSACTION_ERROR: 29189
23:35:56 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:56 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1160c135e8c41da713e3df0a96bca616e8be60a503a7e4f69aa630247c838cea27e42db619edafb6853fe6ea00b35e25cc8afffa", @ANYRES64=0x0, @ANYBLOB="0000000000000000783c0834d474310a6aed716257ade8ff68daa0ed"], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000280)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000050000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000000000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a62730a82d27e", @ANYRES64=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:56 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f0000000140)})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x602})

23:35:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
fchmod(r1, 0xc)
getsockname$unix(r0, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
getsockname$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

[  414.328473] binder: 27671:27675 unknown command 901865489
[  414.341365] binder: 27671:27675 ioctl c0306201 20000180 returned -22
[  414.358099] binder: 27671:27675 ERROR: BC_REGISTER_LOOPER called without request
23:35:56 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00')
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

23:35:56 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x1000, 0x9, 0x7, 0x5}, 0x10)
setitimer(0x1, &(0x7f000000bfe0)={{}, {0x77359400}}, &(0x7f000002c000))
setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0x2710}}, &(0x7f0000000040))

23:35:56 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x2)

23:35:56 executing program 2:
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x6, 0x1168, [0x20000240, 0x0, 0x0, 0x20000460, 0x20000f58], 0x0, &(0x7f0000000080), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x1b, 0x13, 0x1a, 'ipddp0\x00', 'syz_tun\x00', 'sit0\x00', 'syzkaller0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x18}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xb0, 0xb0, 0x100, [@devgroup={'devgroup\x00', 0x18, {{0x8, 0x2, 0x9, 0x0, 0x3}}}]}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x6, 0x200}}}}, {{{0xf, 0x8, 0x6001, 'tunl0\x00', 'ipddp0\x00', '\x00', 'syz_tun\x00', @broadcast, [0x0, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa8, 0xf0}, [@snat={'snat\x00', 0x10, {{@dev={[], 0x11}, 0xfffffffffffffffc}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"0bd77ad06500c1bf87fb209e6a465c5dcc849d841087b3b37115e5855b26"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x40, 0x8f7, 'veth0_to_bridge\x00', 'veth0_to_bridge\x00', 'ifb0\x00', 'ifb0\x00', @dev={[], 0x17}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @random="5d0bca0573db", [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0xf8, 0x130, 0x168, [@devgroup={'devgroup\x00', 0x18, {{0x1, 0x2, 0x0, 0x8, 0xc0a}}}, @limit={'limit\x00', 0x20, {{0x18000000000000, 0x7, 0x4, 0xbe, 0x100000000, 0x400}}}]}, [@snat={'snat\x00', 0x10, {{@dev={[], 0xa}, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="a9e7cd35d71c", 0xffffffffffffffff}}}}, {{{0x5, 0x42, 0xa17, 'team0\x00', 'team_slave_0\x00', 'nr0\x00', 'bcsf0\x00', @dev={[], 0x19}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x8b8, 0x928, 0x960, [@u32={'u32\x00', 0x7c0, {{[{[{0xffffffff80000001, 0x1}, {0xffffffffffffffd3, 0x1}, {0x100000000}, {0x1000, 0x1}, {0x40, 0x2}, {0x145ff0d2, 0x2}, {0x7f, 0x2}, {0x6, 0x2}, {0x80, 0x3}, {0x57, 0x3}, {0xeb8f}], [{0x210000000000, 0xdd5f}, {0x800}, {0x100, 0x2}, {0xfffffffffffffc01, 0xb5b}, {0x10001, 0x4}, {0x2, 0x6}, {0x13e}, {0x4, 0x10001}, {0x3, 0x4}, {0x0, 0x5}, {0x4, 0x2}], 0x6, 0x7}, {[{0x7, 0x3}, {0xffffffffffff0001, 0x2}, {0x20, 0x3}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x3}, {0x80, 0x3}, {0x6, 0x1}, {0x4}, {0x380000000000000, 0x2}, {0x6, 0x2}], [{0x81, 0x800}, {0x5ee, 0x7fff}, {0x6, 0x1}, {0x100000000, 0x4}, {0x8, 0xec06}, {0xe8ff, 0xb67}, {0x1, 0x9}, {0x9, 0x1ff}, {0x5, 0x5}, {0xfffffffffffff801, 0x37}, {0x0, 0x8}], 0x8, 0x2}, {[{0xf66, 0x2}, {0x2b79, 0x2}, {0x7, 0x3}, {0x5}, {0x7ff}, {0x3, 0x2}, {0x8001, 0x2}, {0x100000000, 0x3}, {0x9, 0x1}, {0xfff, 0x3}, {0x6a4, 0x2}], [{0x80000001, 0x6}, {0x8, 0x3}, {0x1, 0xa5}, {0x401, 0x7}, {0xfffffffffffffffb, 0x1}, {0x7fffffff, 0x8}, {0x7f, 0x7}, {0x100000000, 0xfc6}, {0xfffffffffffffff9, 0x7f}, {0x7, 0x3}, {0x3, 0x7}], 0xb, 0x7}, {[{0x100000000, 0x3}, {0xdc, 0x3}, {0x10001, 0x3}, {0x3, 0x2}, {0x1000, 0x2}, {0x5, 0x2}, {0x9, 0x3}, {0xfff, 0x3}, {0x3, 0x2}, {0x20, 0x3}, {0x7fff}], [{0x1, 0x9}, {0x400, 0x1}, {0x0, 0x5}, {0x7, 0x2}, {0x7, 0x5}, {0x2, 0x10001}, {0xbcc, 0x5}, {0x27, 0xfffffffffffffffa}, {0x400}, {0x5, 0xffffffffffffff18}, {0x1, 0x8}], 0x0, 0x1}, {[{0x8, 0x2}, {0x3028}, {0x8}, {0x10000, 0x2}, {0xffffffffffffff7f}, {0x8, 0x1}, {0x10000, 0x2}, {0x2}, {0x7fffffff}, {0x75eb}, {0x10000, 0x3}], [{0x8, 0x4}, {0x0, 0x5}, {0x2, 0x100}, {0x0, 0x1000}, {0x1000, 0x984}, {0x200, 0xf2da}, {0x520, 0xf15}, {0x800, 0x80000000}, {0x7fffffff, 0x14}, {0x7, 0x1}, {0x8, 0x2}], 0x3, 0xb}, {[{0x6b, 0x1}, {0x3ff, 0x1}, {0x28, 0x3}, {0x3fea8288, 0x1}, {0x7}, {0x4, 0xa1a8d0255e23e4e1}, {0xfffffffffffffffe}, {0x5}, {0x8000}, {0x1, 0x3}, {0x57}], [{0x4, 0x2ef4}, {0x3, 0x3}, {0xfffffffffffff800, 0x6}, {0x80000000, 0x7a}, {0x2, 0x4}, {0x3, 0x1f}, {0x6, 0x3}, {0x9, 0x3}, {0xffffffffffffff90, 0x1ff}, {0x1, 0x55}, {0x1, 0x5}], 0x5, 0x3}, {[{0x6, 0x3}, {0x101}, {0x4, 0x3}, {0x100, 0x3}, {0x7fffffff, 0x3}, {0x1, 0x2}, {0xea4}, {0x9, 0x1}, {0x7}, {0xc03, 0x2}, {0xbbec}], [{0x3, 0x9}, {0x400, 0x400}, {0x3, 0x4}, {0xdd97, 0x8001}, {0xfc0a, 0x8001}, {0xc482, 0x3}, {0x53bdc7ff, 0x6}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x1c0decc9}, {0x5, 0xfffffffffffffffa}], 0x7, 0x4}, {[{0x4e, 0x2}, {0x8, 0x3}, {0xfa0, 0x1}, {0x40, 0x3}, {0x569f, 0x1}, {0x2ed}, {0xef, 0x2}, {0x3f, 0x1}, {0x8, 0x1}, {0x9, 0x1}, {0xa36, 0x1}], [{0x4, 0x5}, {0x1, 0x98c6}, {0x4, 0x8}, {0x8, 0x3}, {0x8, 0x2}, {0x401, 0x10000}, {0x81, 0xd52}, {0xfffffffffffffffc, 0x800}, {0x80000001, 0xff}, {0xffff, 0x100}, {0x72f, 0x2}], 0x1, 0x7}, {[{0x3, 0x2}, {0x58, 0x2}, {0x7f, 0x1}, {0xff, 0x1}, {0x8}, {0x1d33, 0x2}, {0x4, 0x3}, {0x8, 0x1}, {}, {0x4, 0x3}, {0x1}], [{0x57}, {0x6, 0x9}, {0x2, 0x8000}, {0x20, 0x4af6}, {0x1, 0x2ef}, {0x5, 0x1}, {0x2, 0xdd2}, {0xb454, 0x9}, {0x5, 0xcf}, {0xfffffffffffffff7, 0x6}, {0x31, 0x7ff}], 0x0, 0x2}, {[{}, {0x1f, 0x3}, {0x7ff, 0x3}, {0x3, 0x3}, {0x100000000}, {0xfffffffffffffe00, 0x3}, {0x7ff, 0x3}, {0x5, 0x1}, {0x9f, 0x1}, {0x2a2, 0x3}, {0xc02, 0x3}], [{0xe47, 0x8001}, {0xffffffff, 0x1}, {0xfffffffffffffc00, 0x7}, {0xffffffffffff52fd, 0xa28}, {0x100000000, 0x6}, {0xfffffffffffffffd, 0x6}, {0x1, 0xffffffff}, {0x7, 0x9}, {0xcc2, 0x9}, {0x0, 0x23326d92}, {0x100, 0x401}], 0xb, 0x8}, {[{0x6, 0x2}, {0x3c3e, 0x1}, {0x4, 0x3}, {0x7f, 0x3}, {0x0, 0x3}, {0xee}, {0xffff, 0x3}, {0x1ff, 0x1}, {0xb3, 0x2}, {0x9}, {0x0, 0x3}], [{0xe3, 0x7ff}, {0x1000, 0x9}, {0x9, 0x5}, {0x1, 0x6}, {0x80}, {0xfff, 0xffffffffffffffce}, {0x10000, 0x200}, {0x10001, 0xffff}, {0x7fffffff, 0x20}, {0xffffffffffff7d66, 0x8}, {0x1, 0x5}], 0x2, 0x1}], 0x0, 0x1}}}, @arp={'arp\x00', 0x38, {{0x31f, 0x0, 0xa, @loopback, 0xff, @local, 0xffffffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff], 0x61}}}]}, [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}, @snat={'snat\x00', 0x10, {{@dev={[], 0x21}, 0xfffffffffffffffd}}}]}, @snat={'snat\x00', 0x10, {{@remote}}}}]}, {0x0, '\x00', 0x4, 0x0, 0x2, [{{{0x11, 0x0, 0x201, 'yam0\x00', 'syzkaller1\x00', 'syz_tun\x00', 'irlan0\x00', @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[], 0xe}, 0xfffffffffffffffe}}}}, {{{0x5, 0x41, 0x4307, 'sit0\x00', 'veth0_to_team\x00', 'rose0\x00', 'veth0_to_bridge\x00', @random="0c4944d4c6d5", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x1a}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x198, 0x340, 0x378, [@comment={'comment\x00', 0x100}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x10001, 0x8, 0x0, 0x0, "88f7ee5e1ac6c8d83e1c4396a35764411758f6b646b1e9681302bd2dd9457d13b46fcb972f4b420367f87612eec07e9596938f77eef6379248216bd5b9ad3da1"}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:boot_t:s0\x00'}}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}]}]}, 0x11e0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f0000000140))

23:35:56 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2940, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x6, &(0x7f0000000040)="0df88efd2c5a046f1d217e1d83ec0b281e2dae71069d80f10dbccfffb369e1e40be27966f4b75fc0fbcebd83df105c7ddb0560c9c83e8fd12300fd0a34c99d42cde5a05fa8d4f6f60f56090ac69b28e77225df2db8298fd49024fc804e37b39acaac03b8beebd488f854f412dbe200c047dda6674fede1d1c26552f1a911310a90b777326e")
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:56 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x3)
ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400920a00000000000000000000000000000000"], 0x14}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x4800000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='team_slave_0\x00', 0xfe31)
close(r1)

[  414.403448] binder: 27671:27685 got reply transaction with no transaction stack
[  414.411241] binder: 27671:27685 transaction failed 29201/-71, size 80-8 line 2922
23:35:56 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
clone(0x2000, &(0x7f00000001c0)="89bf9ef850c7d162a3bd8e8c313c32ac4c34812cd95ac983d13a9f12043202578a3d118c4e0fdff36f8577453527f2deda0f0a62b40b324a4e1c4037cecb4a49900b5d2cd194951e08565efdcaec4076d157f8802ad6c2bc08c8909344eadfe2f4f5281d4aa35c9f7bcce47bcb5b888d6cd5de249a1ffdb31ddf944cff6fe21685058343ed91aadd229268d52b5694bf4bb4cfce831a9b0f95e4fe506d9da719010100000000000031fbbde7b8ac3f53237673ad4b3ef4be3c55e835ddeb29c1eca8e19835", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))

23:35:56 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x100000001, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

23:35:56 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0xff, 0x4)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
listen(r0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xf)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000140)={0x800, 0x3f, 0x5, 0x401, 0x6e1f, 0x4, 0xcc3b, 0x7, 0x200, 0x3c4c, 0x10000, 0x81})
fcntl$setsig(r2, 0xa, 0x1c)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c5602067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x58}], 0x1)

23:35:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0)
ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0x0, 0x6, 0x100000000, 0xff, 0x4, 0x180, 0x80000000})
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000440))
sysfs$1(0x1, &(0x7f0000000000)="766d6e657431c025242f706f7369785f61636c5f616363657373297573657200")
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
r3 = getpgrp(0x0)
setpgid(r2, r3)

23:35:56 executing program 7:
r0 = gettid()
unshare(0x40000000)
getgid()
munlockall()
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0))
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x5)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x2)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

[  414.547042] binder_alloc: binder_alloc_mmap_handler: 27701 20001000-20004000 already mapped failed -16
[  414.642280] IPVS: Creating netns size=2552 id=28
[  414.802227] pktgen: kernel_thread() failed for cpu 1
[  414.807450] pktgen: Cannot create thread for cpu 1 (-4)
[  414.817304] IPVS: Creating netns size=2552 id=29
23:35:57 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:57 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eab6e5592e7c387338066a94ad4b9c05", 0x10)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))

[  415.122170] binder_alloc: binder_alloc_mmap_handler: 27671 20010000-20013000 already mapped failed -16
[  415.142711] binder: BINDER_SET_CONTEXT_MGR already set
[  415.148167] binder: 27671:27685 ioctl 40046207 0 returned -16
[  415.154985] binder: 27671:27741 unknown command 901865489
[  415.155837] binder: 27671:27744 ERROR: BC_REGISTER_LOOPER called without request
23:35:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:57 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = getpgid(0xffffffffffffffff)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x200, &(0x7f0000000000)=""/255)

23:35:57 executing program 6:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000040)=0xc)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x404042, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000840)={0x53, 0xfffffffffffffffb, 0x18, 0x401, @scatter={0x2, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/127, 0x7f}, {&(0x7f0000000480)=""/244, 0xf4}]}, &(0x7f00000001c0)="c85f993f924aaac514c3422510aa1be6ec0905820a2ca886", &(0x7f0000000780)=""/160, 0xfffffffffffffff7, 0x2, 0x2, &(0x7f0000000580)})
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = accept4$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x80000)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000380)={0x9, &(0x7f0000000400)=[{0x1, 0x2, 0x50b5, 0x3}, {0x101, 0x7, 0x7fffffff, 0x10001}, {0x4, 0x6, 0x9, 0x5}, {0x48, 0x22d3, 0x80000001, 0x10001}, {0x8, 0x7, 0x4, 0x5}, {0x100000001, 0xffffffffffff8000, 0x1000000000000000, 0x8}, {0x842, 0xfffffffffffffc01, 0x401, 0x8000}, {0xfffffffffffffffb, 0x8, 0xfffffffffffffffb, 0x6}, {0x3, 0x0, 0x3, 0x3}]}, 0x10)
ioctl(r3, 0x7, &(0x7f00000002c0)="c105544c269f734f83b3dd6d08c96df2fd1f9d48406ec6b76d2feb9527fb323d2e91379440cd0119eede88c9817e9b202a549782910c9214f862c2c5f555f32c4ef40a598449537ed334d8a29bd44c52bfdd47728e4e12d55af8f32e77981a5f4ad6821d1fe6064dddbb7e062d39bd6c7d58139a99414b5dc6a010eecfbdd3816ccb1581313bcca95ac634af84ccef8b6e0580d8eb6763574e6fd2a65f77f73e0e4dbfee5e5c166bde29bc799b6588c878cd5f")
r5 = syz_open_procfs(r0, &(0x7f0000000600)="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")
fgetxattr(r5, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:57 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
readahead(r0, 0x80000000, 0x1)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:57 executing program 7:
r0 = gettid()
unshare(0x40000000)
getgid()
munlockall()
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0))
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x5)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x2)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:35:57 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="59d96fb91afc3c809a788a8afa9decbe", 0x10)

[  415.156090] binder: 27671:27744 got reply transaction with no transaction stack
[  415.156099] binder: 27671:27744 transaction failed 29201/-71, size 80-8 line 2922
[  415.156663] binder: undelivered TRANSACTION_ERROR: 29201
[  415.194470] binder: undelivered TRANSACTION_ERROR: 29201
[  415.214730] binder: 27671:27741 ioctl c0306201 20000180 returned -22
23:35:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2940, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x6, &(0x7f0000000040)="0df88efd2c5a046f1d217e1d83ec0b281e2dae71069d80f10dbccfffb369e1e40be27966f4b75fc0fbcebd83df105c7ddb0560c9c83e8fd12300fd0a34c99d42cde5a05fa8d4f6f60f56090ac69b28e77225df2db8298fd49024fc804e37b39acaac03b8beebd488f854f412dbe200c047dda6674fede1d1c26552f1a911310a90b777326e")
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:57 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x3f, @local, 0x7fffffff}, {0xa, 0x4e20, 0x5, @remote, 0x7}, 0xaf, [0x3ff8000, 0x9, 0x8001, 0x10001, 0xd2, 0x8, 0x4, 0x7ff]}, 0x5c)

[  415.296411] binder: BINDER_SET_CONTEXT_MGR already set
[  415.314978] binder: 27757:27762 ioctl 40046207 0 returned -16
23:35:57 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x3)
ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400920a00000000000000000000000000000000"], 0x14}}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet(0x2, 0x4800000000000001, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
sendmmsg(r1, &(0x7f0000000300)=[{{&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000840)=[{&(0x7f0000001600)="da", 0x1}], 0x1, &(0x7f0000003040)}}], 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='team_slave_0\x00', 0xfe31)
close(r1)

23:35:57 executing program 3:
r0 = socket(0x18, 0x0, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000067c09937fa73d822e2b4c36649f3ac0ecea8c1260dd56a0738fb38be04e62f8d1e1f5985fdf45022132f269dfeb6958abf1e8c96e088688896692e"], 0x48)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000240)=""/222, &(0x7f0000000000)=0xde)

23:35:57 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10100, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))
write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "bf822ffd6c6da68021ab98f2fa26c11fb274599304684bae0183a4f6b82a34a79f7f1b3f075a8d03cb445b11b17ebd984abfce168f6aabab0642534b1489d7c2b96c841e5a56f211e7c316ce3a0a878be4f5036497add277accf4272290f91f8b515f2cb6d1672e7b9dc441e628feda3a706c0512c860fdbf00c46ec120e8d86cfe72a320668474d29b0e06862e2d353dbca3315fbeb3fd65a43dc4ee802001e077f758dd9bec8e27c9deb01099650204efabbc4"}, 0xb8)

[  415.352901] binder: 27757:27762 ERROR: BC_REGISTER_LOOPER called without request
23:35:57 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0))
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(r2, r2, r2)
acct(&(0x7f00000002c0)='./file0\x00')
recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)=""/233, 0xfffffde4}], 0x1004, &(0x7f0000002200)=""/4096, 0x1000}, 0x0)
sendmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100), 0x49, &(0x7f0000000200)}, 0x0)
close(r0)

23:35:57 executing program 2:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x408500, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9208, &(0x7f00000001c0))

[  415.398230] binder: 27757:27777 got reply transaction with no transaction stack
[  415.430945] binder: 27757:27777 transaction failed 29201/-71, size 80-8 line 2922
23:35:57 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x6, 0x7a)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)

[  415.474366] binder_alloc: binder_alloc_mmap_handler: 27757 20010000-20013000 already mapped failed -16
[  415.519277] binder: BINDER_SET_CONTEXT_MGR already set
[  415.525849] binder: 27757:27762 ioctl 40046207 0 returned -16
[  415.541510] binder_alloc: 27757: binder_alloc_buf, no vma
[  415.547516] binder: BINDER_SET_CONTEXT_MGR already set
[  415.562040] binder: 27757:27777 transaction failed 29189/-3, size 0-0 line 3137
[  415.577040] binder: 27757:27762 ioctl 40046207 0 returned -16
[  415.587489] binder: 27757:27805 ERROR: BC_REGISTER_LOOPER called without request
[  415.595376] binder: 27757:27808 got reply transaction with no transaction stack
[  415.625407] binder: 27757:27808 transaction failed 29201/-71, size 80-8 line 2922
[  415.633539] binder: release 27757:27762 transaction 451 in, still active
[  415.644786] binder: send failed reply for transaction 451 to 27757:27777
[  415.669636] binder: undelivered TRANSACTION_ERROR: 29201
[  415.694327] binder: undelivered TRANSACTION_ERROR: 29189
[  415.718593] binder: undelivered TRANSACTION_ERROR: 29201
[  415.742303] binder: undelivered TRANSACTION_COMPLETE
[  415.764252] binder: undelivered TRANSACTION_ERROR: 29189
23:35:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:58 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, &(0x7f00000001c0))
read(r0, &(0x7f0000000100)=""/158, 0x9e)

23:35:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x80000001)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:58 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000))
fgetxattr(r0, &(0x7f0000000400)=@random={'btrfs.', "2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af10900"}, &(0x7f00000003c0)=""/2, 0xffffffffffffffea)

23:35:58 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x2008000000017)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:58 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6(0xa, 0x6, 0x7a)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x495d, 0x0, 0x8de7d8f023d06bd7}, 0x4)
sendto$inet6(r3, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4f, 0x0)

[  416.028626] binder: BINDER_SET_CONTEXT_MGR already set
[  416.038548] binder: 27822:27830 ioctl 40046207 0 returned -16
[  416.054097] binder: 27822:27830 ERROR: BC_REGISTER_LOOPER called without request
[  416.078276] binder: BINDER_SET_CONTEXT_MGR already set
[  416.083583] binder: 27822:27830 ioctl 40046207 0 returned -16
[  416.083683] binder: BINDER_SET_CONTEXT_MGR already set
[  416.083691] binder: 27822:27835 ioctl 40046207 0 returned -16
[  416.104329] binder_alloc: 27822: binder_alloc_buf, no vma
[  416.110070] binder: 27822:27837 transaction failed 29189/-3, size 0-0 line 3137
[  416.117907] binder: 27822:27830 ERROR: BC_REGISTER_LOOPER called without request
[  416.125564] binder: 27822:27835 got reply transaction with no transaction stack
[  416.133021] binder: 27822:27835 transaction failed 29201/-71, size 80-8 line 2922
[  416.151412] binder: unexpected work type, 4, not freed
[  416.156824] binder: undelivered TRANSACTION_COMPLETE
[  416.168488] binder: undelivered TRANSACTION_ERROR: 29189
[  416.185266] binder: undelivered TRANSACTION_ERROR: 29201
[  416.198229] binder: undelivered TRANSACTION_COMPLETE
[  416.210299] binder: undelivered transaction 457, process died.
[  416.803573] pktgen: kernel_thread() failed for cpu 0
[  416.808782] pktgen: Cannot create thread for cpu 0 (-4)
[  416.814383] pktgen: kernel_thread() failed for cpu 1
[  416.821392] pktgen: Cannot create thread for cpu 1 (-4)
[  416.827058] pktgen: Initialization failed for all threads
23:35:59 executing program 7:
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080))
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]})
sysfs$2(0x2, 0x0, &(0x7f00000001c0)=""/107)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f00000000c0)={0x4ef2764c, 0x7fffffff, 0x5, 0x1, 0x8001, 0x1, 0x5, 0x1, 0x38f2, 0x4, 0xff80000, 0x4})
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x41e})

23:35:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000280)=""/2, 0x2)

23:35:59 executing program 1:
r0 = getpgrp(0x0)
r1 = gettid()
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x9)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8)
prlimit64(0x0, 0xb, &(0x7f00000000c0), &(0x7f0000000100))
rt_tgsigqueueinfo(r0, r1, 0x38, &(0x7f0000000000))

23:35:59 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10)

23:35:59 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x1000, 0x7fffffff, 0x9, 0x1ff, 0x7, 0x852b})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:35:59 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f0000000000)=""/2, 0x2)

23:35:59 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffcfd)
recvfrom$unix(r0, &(0x7f0000000040)=""/58, 0x80aad7f0, 0x0, 0x0, 0xffffffffffffff56)

23:35:59 executing program 0:
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:59 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair(0x11, 0x0, 0x200, &(0x7f0000000140))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x25)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000e300985611490dbdf85c02db2fb2ae0e8d18691dbac13796f58f040b1346f4a3e804679e2e9c2fff9ccb9c505229da49757ab43a366e5a231f44f0e9efa7b72768586d08c5a2d4e1283b8c21c40d80dfa7913c1d07a0bb48eb5c6ae1272b6da90b659f2f54cc134350c0d5b8ab2aa576af878a46761a9ed85ec742023ff88e823b49291065a7033c1680aef31e6124b56d8ae25b0d4f0838297522f2e4a86a5129f4d355fe7b049197ea6da4f843b4c2f6d186daea466e016679f4246e56b5d9e6a17ae4c49d7575c50ffd705d7b4d5980f8c16d4206c6c85556928af37a2e493146862ed66e3dca7baa55204a12bc5f891668f3b0a1", @ANYRES16=r2, @ANYBLOB="080427bd7000fedb00"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44001)
r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20011, r0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000000))

23:35:59 executing program 3:
r0 = socket$inet6(0xa, 0x2000000000001, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment, 0x8)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000140)={0xfffffffffffffffc, 0xff, 0x1})
getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=""/150, &(0x7f0000000000)=0x96)

23:35:59 executing program 0:
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:59 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x2000000000004e20, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x3, 0x0, "bfa7413aa6582b0661ce42cc16f56131cb93479cdd017b4abaffa53fe02bd021127c2e6886de6ba88200649218ada53acd5acc46bc6714337444d7a18087c4c82e320054a41c49d78e62fce978e40e95"}, 0xd8)
sendto$inet(r0, &(0x7f0000de1fff), 0xffffffffffffff6e, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@empty, @local, @rand_addr=0x7}, 0xc)

23:35:59 executing program 0:
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:35:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', '/dev/input/mice\x00'}, &(0x7f0000000200)='/dev/input/mice\x00', 0x10, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x25)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000240))
ioctl$TIOCNOTTY(r3, 0x5422)
writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001500192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

[  417.005614] binder: 27854:27867 ERROR: BC_REGISTER_LOOPER called without request
[  417.044068] binder_alloc: binder_alloc_mmap_handler: 27854 20010000-20013000 already mapped failed -16
23:35:59 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0)
getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/104)
r2 = fcntl$dupfd(r0, 0x406, r0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x2)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000300)=""/254)

[  417.079651] binder: BINDER_SET_CONTEXT_MGR already set
[  417.092209] binder: 27854:27867 ioctl 40046207 0 returned -16
[  417.102245] binder_alloc: 27854: binder_alloc_buf, no vma
[  417.116675] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'.
23:35:59 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  417.126709] binder: 27854:27892 ERROR: BC_REGISTER_LOOPER called without request
[  417.138918] binder: 27854:27880 transaction failed 29189/-3, size 0-0 line 3137
[  417.147211] binder: unexpected work type, 4, not freed
[  417.160522] binder: undelivered TRANSACTION_COMPLETE
[  417.172761] binder: undelivered TRANSACTION_COMPLETE
23:35:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sw_sync\x00', 0x0, 0x0)
write$P9_RSTAT(r2, &(0x7f0000000300)={0x47, 0x7d, 0x1, {0x0, 0x40, 0xffffffffffffffa0, 0x8, {0x0, 0x2, 0x7}, 0x100000, 0x9, 0x131dc2b2, 0x40, 0x0, "", 0x0, "", 0x0, "", 0xd, '/dev/binder#\x00'}}, 0x47)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r3})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
ioctl(r4, 0x0, &(0x7f0000000440)="04c4d191f7e8fab37e8b8fa2df4293d7caadc95440fcb5a5fe0c5ec910e0e3c9f927ab52c376508e5a13780697126b9eee3338f1a90006c4a02a06b4540c53e35d9ddbe70dd67edfb21a6bc269359a61973d2d51ebd656806d1d0cbab6a64621d66007f8a231ab4c35245c8c4548b4c6ac5e5cabeae8197f122d75")
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:35:59 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
flock(r0, 0x3)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
fgetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6274726632c2757365722e73797a006ada981210488d3d5a1ebaf61d1eba5ee05ff77948e5e480dd3b856a5e82baa5afc3f0f682b3d4a8237c3477021a4484cc58b646ef325088a300a9f7e83afcf7b0a4035e9fff4d36dd6a77"], &(0x7f00000003c0)=""/2, 0xffffffffffffff15)

23:35:59 executing program 5:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0xffff00000000000, 0x1}}, 0x30)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r2=>0x0})
ptrace$getregset(0x4204, r2, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=""/110, 0x6e})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
personality(0xf)
writev(r3, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

[  417.184566] netlink: 64 bytes leftover after parsing attributes in process `syz-executor3'.
[  417.192170] binder: undelivered transaction 464, process died.
[  417.194763] binder: undelivered TRANSACTION_ERROR: 29189
[  417.199609] binder: 27907:27908 transaction failed 29189/-22, size 0-0 line 3014
[  417.199673] binder: 27907:27908 ERROR: BC_REGISTER_LOOPER called without request
23:35:59 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0)
ioctl$KDSKBLED(r0, 0x4b65, 0x6)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))
ioctl$VT_DISALLOCATE(r0, 0x5608)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@rand_addr}}}, &(0x7f0000000180)=0xe8)
ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000001c0)={0x6, 0x5b63})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1)
ioctl$TIOCNXCL(r0, 0x540d)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000240))
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000280)={r1, 0x1, 0x6}, 0x10)
write$UHID_DESTROY(r0, &(0x7f00000002c0), 0x4)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x800, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0xa, 0x34, 0x17, 0xe, 0x3, 0x2, 0x2, 0xc7, 0x1})
ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0)
sendmsg(r0, &(0x7f0000001900)={&(0x7f0000000380)=@sco={0x1f, {0x80, 0x9, 0x0, 0x0, 0x5, 0x1000}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000400)="c8173cfbc6888366ec36b59d0a84be5e096cc2f597ee7aa1b4c0ef64db975b6897160464c2e01a88f53979931f363c64f00591e1ea16631c57968c751d373e4d59823e9dc329e75b4071869669a468bbd804d2e1024bec21eca785460626c671b86a5a999c76b386630b22104ee3e10f48ddf23a1acc45b038e57b6b3eb49bb43c863fee7b9a53257f88a0e978ed4ef2533b7ac9bf88a40d81a793578fde9b3f20ac485686a08091c7d9cc7b10c87bef79b09c18a5466e30153c7a72e25456c9363c4cd3344011d703c175d486db49bf20a3ab1bb7723406d87ec7216e8c953cdce7421cbf5a45354a0d9c2606", 0xed}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="8c0f148299208f515caabc953ec3ba3d51312c657ddc31c9fc6120f5d0d415b9e0b4ce6f7a38ff39701fc2472e6879a8f2bf2cb499ccf09ca0cdeffca0ce4cc625f4aa09f1114b29f93ca82c8bc90cea2257a1cbe0ca050588841639d5cadcb8c0006dcda2ca787d1f8b21172be111dc9066e4cfc33bb5b8f118f93315634a38cccdef71235c07a40b05d3f62b4efdb08cac5bed15ef47cc14909438edfaaeb6057d1fd74ce5a84f098e840fa0d607dc84348b4b61d6978a39b53854b9b9", 0xbe}, {&(0x7f00000015c0)="31fc86fc98f20bbe920e7d4d4119e0a4306a8c60eb6e7548716b0f0f5fc8ee8a7dba6e435d169419fc9e0381cccb208f9e9b84e0b23f7da830606277977c25e5e5562085dff79bd9289ce89e05ef95f0913f7327d7320025f95973b52322e7bfc8744db383b0ba741e9d9fdaf6c0c8a539799515948f2d59e489a4e3b7f804008b789c85e56ba496855988ccfc34d2ccc4d04407c7af5559c5087f7680b1", 0x9e}, {&(0x7f0000001680)="4ce62a5b7918529fb6299bbc43bd4af6a23f9d1caf0023116a86974f1c10ed8e0c607a170a69369d364f66acd78ecc1492d6ea9113f53fa2487702d952271b3710237f02a647182d888e508cc9795964818cbdc5fcd05b291bdcffe72c231b639e1c075d797d35925f61e4c5ebc3388a4130e860443a6b8fba842aef85e5b3656f20cde65b4129cc9ac084e73aa2eb9848d1d32bc487870fdb51376abf385d441060fd8533108b06a37b8de4885394005de81043b8a5ca74cf9dd6d30dd4cf353e7935c649247ae803e2fc4966fe510997f83ef04421e611bfa4f8b3e7", 0xdd}, {&(0x7f0000001780)="98fac0706d14f5e0cd9dfbfc049b7afaccbeb83090715d1e7fc8424c89053af35edbd853dd285700b204819ebd3a3bef2e0e794ca837abe24f00d61f6c9159772bab71af1854ae3a94302ccec5b895b9df4d391514e4fb06d66b264c077a2355f2093ddfdba25e1f38dff0a38da25f123d8eb2ee60cdab4ca1b29fc72557a6311a64ee595f90754e7ab43df42bc83e00acca83ecca982f3526ab5894f9", 0x9d}, {&(0x7f0000001840)="fc045730a20cbd4bde77958d7a563e82953f11cb0ee3d5a30d3d5d2ef972e1e959f01568a820116cd6919d5f60d841c615e2789cac", 0x35}], 0x7, 0x0, 0x0, 0xc040}, 0x4004000)
ioctl$KDSETLED(r0, 0x4b32, 0x5)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001940), &(0x7f0000001980)=0x14)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000019c0)={{0x0, 0x200}, 'port1\x00', 0x10, 0x18, 0x2, 0x6, 0x9, 0x100, 0x81, 0x0, 0x4, 0xf305})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001ac0)=@get={0x1, &(0x7f0000001a80)=""/41})
write$sndseq(r2, &(0x7f0000001b40)=[{0x200, 0x3f, 0x401, 0x2, @tick, {0x7ff, 0x2}, {0x0, 0x929}, @quote={{0x2, 0x3f}, 0xfffffffffffffffd, &(0x7f0000001b00)={0x80000001, 0x1, 0x7, 0x6, @tick=0xffffffffffff8000, {0x180000, 0x7fff}, {0x4, 0x36a3}, @raw8={"ef9767cd7e5ab9a56391cdb4"}}}}, {0x5, 0x3, 0x5, 0x1ff, @tick=0x100, {0x4, 0xfff}, {0x2400000000000000, 0x4}, @raw8={"a1541ee1ad3c71fca053e820"}}, {0x9, 0x2, 0xc85, 0x1, @time={0x0, 0x989680}, {0xf04, 0x3}, {0x7, 0x5}, @raw8={"bdc83322f6b5538206e4f183"}}, {0x42000, 0x9, 0x7f00000000000000, 0x3, @time, {0x3, 0x4}, {0x200, 0xed}, @control={0x1a6000000, 0x40004000000, 0xffff}}], 0xc0)
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000001c00)=""/188)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001cc0)=0x1)
munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000001d00)={0x8088, 0x8, 0x7, 0x2, 0x2})
poll(&(0x7f0000001d40)=[{r0, 0x8004}, {r2, 0x8008}, {r0, 0x1000}, {r0, 0x2}, {r0, 0x8082}], 0x5, 0x1)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
splice(r2, &(0x7f0000001d80), r0, &(0x7f0000001dc0), 0x9, 0x4)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001e00)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1})
write$binfmt_elf32(r0, &(0x7f0000001e40)={{0x7f, 0x45, 0x4c, 0x46, 0x619d, 0xd7, 0x7a, 0xcc, 0x7, 0x3, 0x3f, 0x0, 0xb3, 0x38, 0x2ea, 0x5, 0x200, 0x20, 0x2, 0xfffffffffffff88a, 0x3ea, 0x136cf1a3}, [{0x60000000, 0x5, 0x4, 0x4, 0x9, 0xd7, 0x4, 0x2}, {0x5, 0x7, 0x6, 0x2ae, 0x38, 0x7, 0x1000200000000, 0x9}], "cd07762c7fb6658a6af0bb0065bb6abaab7a5ad0919fb6b505f1afb5d4e09272a1f7e897bc7304c598081539d2e37d61227f2e1b592721be3c95b64c264ff4fd63e90881132981d5ad3744f781e27a75a9066896f169361763326ad767", [[], [], [], [], [], [], []]}, 0x7d5)

23:35:59 executing program 6:
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84800)
pwrite64(r0, &(0x7f00000002c0)="aa43cfddf06f466457ad5c3c6f17ce6ce5f2c2a103231101146f063252ca32c2fca691304fac6e4fc170475757dd287473137577ee84a667ee36de29debd0c78b83cc3ea73ffe8ddda945f0bc43578544dd432ec5e2fb2e8da3955abb513d5f8c4840a035fd118b4566908d436495ecc9b8ae6d469acdaa31dbe3a1d9a3d8eda5caf279a6e30a18194feb6", 0x8b, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10)
setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0)
getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r2, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000040)=""/2, 0x2)

23:35:59 executing program 1:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x1000, &(0x7f0000000280))
mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='gfs2meta\x00', 0x60000, &(0x7f0000000280))

[  417.250974] binder: 27907:27912 got reply transaction with no transaction stack
[  417.260025] binder: 27907:27912 transaction failed 29201/-71, size 80-8 line 2922
23:35:59 executing program 2:
add_key(&(0x7f00000002c0)='big_key\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000380)="fc031263e03eccc79ea8ec87cf534351a16251dc", 0x14, 0xfffffffffffffffd)
r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r1)
keyctl$unlink(0x9, r1, r1)
r3 = socket(0x15, 0x800, 0x10001)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240))
keyctl$read(0xb, r2, &(0x7f0000000440)=""/208, 0xd0)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x1f, 0x4)

23:35:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={"0000bd68000000010000000000000084", 0x2})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x4082, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='bic\x00', 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x7ff, 0x0, 0x1})
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000200)=0x9, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005f9a800000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
acct(&(0x7f0000000240)='./file0\x00')
dup2(r4, r0)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0), 0x10)

23:35:59 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80805, 0xfffffffffffff27a)
ioctl(r1, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x6, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_out(r0, 0x5460, &(0x7f0000000040))

23:35:59 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5)
fcntl$notify(r0, 0x402, 0x80000002)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:35:59 executing program 5:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:36:00 executing program 1:
r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0))
fchdir(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockname$netlink(r1, &(0x7f0000000080), &(0x7f0000000100)=0xc)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x4})
rt_sigpending(&(0x7f0000000380), 0xffffffffffffff3e)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000040)=0xe52f91bb6dfd8068)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000391000/0x1000)=nil, 0x1000})
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000240)={&(0x7f000057b000/0x2000)=nil, 0x2000})
ioctl$void(r0, 0xc0045878)
listen(r1, 0x7)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140), &(0x7f00000001c0)=0x4)

23:36:00 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mknod$loop(&(0x7f0000000140)='.\x00', 0x6002, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x400000, 0x10)
fchmod(r0, 0x5)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
write$P9_RLOPEN(r3, &(0x7f0000000240)={0x18}, 0x18)
ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f00000000c0))
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000180)=0x7)
ftruncate(r2, 0x208200)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe)

23:36:00 executing program 7:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = open(&(0x7f00007e2ff8)='./file0\x00', 0x80040, 0x0)
open(&(0x7f00007e2ff8)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
fcntl$getflags(r2, 0x401)

23:36:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  418.009441] binder: BINDER_SET_CONTEXT_MGR already set
[  418.015506] binder: 27907:27912 ioctl 40046207 0 returned -16
[  418.023402] binder: 27907:27961 transaction failed 29189/-22, size 0-0 line 3014
23:36:00 executing program 7:
r0 = eventfd2(0x0, 0x0)
ptrace$getsig(0x4202, 0x0, 0x7fff, &(0x7f0000000100))
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x4e20, @broadcast}}}, 0x88)
r2 = dup(r0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x4020141042, 0x0)
linkat(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x400)
ftruncate(r3, 0x280080)
ioctl(r2, 0x2, &(0x7f0000000200)="7a3875fe2f1c108a547835516d85032e077f3f2bd7ecb2f2471bf6c03309f13c44c902d512268fcbe621abb47491bebbd623cf34c37a7cc8b6e72c13a68d255f247a952584249d61b151c65c18fded2b031dfb0c3bbc87e5f6ed877243fe4b869226c76eb64bccfd453fe00b28a1b1b1c4107a70a602cf70788802e06c367610ff551bea5072874e72142ec7a8c9b97277cea3f5c6e35b36c05ef349b2be5ac29666f8adda43c668a04c6ffebe2aba279d71fa79b59bbd9e9322837d6204f25f32fc136d5d1b14f511be27eccf70e4738101d86a478c807c7eccc052")
sendfile(r2, r3, &(0x7f0000d83ff8), 0x2008000fffffffd)

[  418.055338] binder: 27907:27968 ERROR: BC_REGISTER_LOOPER called without request
[  418.066581] binder: 27907:27961 got reply transaction with no transaction stack
[  418.075088] binder: 27907:27961 transaction failed 29201/-71, size 80-8 line 2922
23:36:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xffffffffffffffb7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b639000"], 0x9c, 0x0, &(0x7f0000000300)="e9926c29e3b4ce2005fb43c101de1a2a319c43719e1cd367bcff1dce27af960aae005a7014838929283cf6adb75d6e6144325918370f29d520cdf9220c5ba7f98582aeb9173b7b4086ba35ac0bf64054ce35a4c5852fcc7de0da6750259bde896a7c6b2df9d467d391b72671c48c49504c764652e494e2c915d9034f110b43cb8779a3ad11bbd0b60b0fc02f8bf7a935393d88609cfb00299d4645daf41efa4b7e69adb4c9e2558a800000000000000073a69867ca950738d99804d9d7dfd01d12dcfe3eec04938c17eb2b5808b0690c087af3cb0000"})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0xfffffffffffffd45, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={r2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x1, 0x3}, @register_looper, @enter_looper], 0x34, 0x0, &(0x7f00000001c0)="26b8bb1f09268ff59e2e86c4a4b0193240c69a7c4c1be1b993e3becea04cdf6d6765963dd98a34731985c01e241ab1a88957c1c3"})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:00 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x100000000000048, &(0x7f0000000500)=0x2, 0x4)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0xfffffffffffffffd)
getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

[  418.112005] binder: undelivered TRANSACTION_ERROR: 29189
[  418.118183] binder: undelivered TRANSACTION_ERROR: 29201
[  418.156735] binder: undelivered TRANSACTION_ERROR: 29189
23:36:00 executing program 1:
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)

[  418.245219] binder: undelivered TRANSACTION_ERROR: 29201
[  418.264673] binder: 27978:27981 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  418.275137] binder: 27978:27981 ERROR: BC_REGISTER_LOOPER called without request
[  418.302605] binder: 27978:27981 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER
23:36:00 executing program 3:
mmap(&(0x7f0000008000/0x14000)=nil, 0x14000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x40, &(0x7f0000001fde), 0x4)
ioctl$TIOCSCTTY(r1, 0x540e, 0x7)

23:36:00 executing program 2:
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000200)="9980f217745deebacc4eeed90ebcff8cf380d2c4b8d5c3da2fbf5b6335665ffcdf4b156f46eb1f611341cef383cb881e2c2593620fe89df281b4662399ab3707fc3b872c2899283a6c1cf331d5838bebb50c3fc27778c1530829aa31ce31686c3a9cca41856f32837fa9623256590474c702e396d8b37313b44847b638102353b24fe350a0c3df914bc02ee5ad65d13e52872e63848efeafe3926ddc0b3e7bae4723621c221a7fab07b6e5ee40d627d93ba218bffd376074e7cf524e17c5d54c36394fef75acb79f891aecaea0c7987cd3", 0xd1, 0x0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x9, @empty, 0x4}}}, 0x80)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file1\x00', 0x400)

23:36:00 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x49, 0xfffffffffffffffe})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x10000005)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="025cc80700065f8f764070")
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x43732e5398416f17})
ioctl$VT_WAITACTIVE(r0, 0x5607)
fcntl$setlease(r2, 0x400, 0x3)
ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b})

23:36:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname(r0, &(0x7f0000000340)=@pppoe, &(0x7f00000003c0)=0x80)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x6, @ipv4={[], [], @remote}, 0x8}, {0xa, 0x4e20, 0x0, @remote}}, 0x5c)
listen(r0, 0x8040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, &(0x7f0000001700), 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendto$inet6(r1, &(0x7f0000000200)="4ce9bfcd7e6135088a6d564820169439b6c82c61aacec529f753458b7e0311834e36b8cf33982dbb59ddb7a80119f95bb34e389251d7b7075b12f135d9b7ffa590617b6b8b64163231009ba71d56126df59096e81c43f2042c3cfc6903d2546d16fc41092608e9964f1af1ecceeeb9d5cb00a98ed7c480aa071dde8e870c1433e0f902a29fac2eb56ce3edb60b3496f2963c962d6de7c6457df9cb896910bcbee555e83f0e5c9a01babbed5b405bbd6bb0b9ece8de883d8f1b36853a0bab6f4cecc00dbbaeee6707c5ea981d007a9687d54d8b6efc7b4d0d9c7e0924c92eab2ddc8383b147c35d1eebb5cceb13c3", 0xee, 0x20000006, &(0x7f000031e000)={0xa, 0x4e22, 0x1}, 0x1c)
accept$inet6(r0, &(0x7f0000000700), &(0x7f00000001c0)=0xfffffffc)

23:36:00 executing program 2:
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
sendto(r0, &(0x7f0000000200)="9980f217745deebacc4eeed90ebcff8cf380d2c4b8d5c3da2fbf5b6335665ffcdf4b156f46eb1f611341cef383cb881e2c2593620fe89df281b4662399ab3707fc3b872c2899283a6c1cf331d5838bebb50c3fc27778c1530829aa31ce31686c3a9cca41856f32837fa9623256590474c702e396d8b37313b44847b638102353b24fe350a0c3df914bc02ee5ad65d13e52872e63848efeafe3926ddc0b3e7bae4723621c221a7fab07b6e5ee40d627d93ba218bffd376074e7cf524e17c5d54c36394fef75acb79f891aecaea0c7987cd3", 0xd1, 0x0, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x1, 0x1, {0xa, 0x4e24, 0x9, @empty, 0x4}}}, 0x80)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r2 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
mknodat(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file1\x00', 0x400)

23:36:00 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00')
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendfile(r0, r1, &(0x7f0000000100), 0xad)

[  418.571953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
[  418.611428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
23:36:00 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
getgid()
fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
fcntl$setown(r0, 0x8, r1)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0)

23:36:00 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006380)={'bond_slave_1\x00', <r5=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000063c0)={{{@in6=@mcast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000064c0)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000006580)={{{@in=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000006680)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000066c0)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000067c0)=0xe8)
accept4$packet(0xffffffffffffffff, &(0x7f0000006800)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006840)=0x14, 0x80800)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000008300)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@loopback}}, &(0x7f0000008400)=0xe8)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000008440)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008480)=0x14)
getpeername(r0, &(0x7f0000008580)=@can={0x1d, <r12=>0x0}, &(0x7f0000008600)=0x80)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000008640)={@remote, <r13=>0x0}, &(0x7f0000008680)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000086c0)={'team0\x00', <r14=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r15=>0x0})
accept$packet(0xffffffffffffffff, &(0x7f0000008740)={0x11, 0x0, <r16=>0x0}, &(0x7f0000008780)=0x14)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f00000087c0)={@dev, <r17=>0x0}, &(0x7f0000008800)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008840)={<r18=>0x0, @dev, @multicast2}, &(0x7f0000008880)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008980)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000008a80)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000008ac0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000008b00)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000008b40)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000008c40)=0xe8)
accept4$packet(0xffffffffffffffff, &(0x7f0000008d40)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000008d80)=0x14, 0x80000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000008dc0)={<r23=>0x0, @multicast2, @rand_addr}, &(0x7f0000008e00)=0xc)
accept$packet(r2, &(0x7f0000008e40)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008e80)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000008ec0)={'team0\x00', <r25=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000009980)={<r26=>0x0, @multicast2, @loopback}, &(0x7f00000099c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000009a00)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000009b00)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000009b40)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000009c40)=0xe8)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000009c80)={@loopback, <r29=>0x0}, &(0x7f0000009cc0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000009d00)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000009e00)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000009e40)={0x11, 0x0, <r31=>0x0}, &(0x7f0000009e80)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f000000aa00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc024019}, 0xc, &(0x7f000000a9c0)={&(0x7f0000009ec0)={0xad0, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x14}}}]}}, {{0x8, 0x1, r6}, {0x264, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xd74}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff81}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x12c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r16}, {0x224, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}]}}, {{0x8, 0x1, r23}, {0x88, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff4f1e}}}]}}, {{0x8, 0x1, r24}, {0x190, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x4, 0xfffffffffffffffb, 0x1, 0x5}, {0x3, 0xad09, 0x9, 0x6}, {0x0, 0x2, 0x3}, {0x7, 0x5000000000000000, 0x3, 0x1}, {0x9, 0x7fffffff, 0x8, 0x8848}, {0x9, 0xdaf, 0x3, 0x3f}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r25}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r27}, {0x230, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r30}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xeb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0xad0}, 0x1, 0x0, 0x0, 0x4000800}, 0x800)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:36:00 executing program 3:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:36:00 executing program 1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000100)={0x49, 0xfffffffffffffffe})
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x10000005)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000200)="025cc80700065f8f764070")
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
fchdir(r1)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x43732e5398416f17})
ioctl$VT_WAITACTIVE(r0, 0x5607)
fcntl$setlease(r2, 0x400, 0x3)
ioctl$TUNSETOWNER(r2, 0x400454cc, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b})

23:36:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r1, r1, 0x80000)
ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000000)=""/81)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000080), 0xc, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900090200000000840d07ea9a4cdfb9ca587fb831c3f12100881b0e47fbffffffffffffff00000000000000e000000200000000020000000000000000000000000000000a00000000000000f3647f6e3717a572ab82b32043dd8aa2920bdb37e8bf524432907c693d8e57e394509923034e2967404c678bfed13499cc73d5253d944876e3dfbb891bb2e800a3b666a60340c1ab8406b3b83870b5a0f4ca55ed14b0043c0e4262dba35a3b0df8604367182333e93ec1f9b067c77c9fe68f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015000000000000000000"], 0xc4}}, 0x0)

[  418.771654] netlink: 12 bytes leftover after parsing attributes in process `syz-executor2'.
23:36:00 executing program 3:
timer_create(0xb, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000140), &(0x7f0000000240)}}, &(0x7f0000000100))
clock_gettime(0x2, &(0x7f0000000040)={0x0, <r0=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, r0+10000000}, {0x77359400}}, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000140))
r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
getpeername(r1, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80)
timer_settime(0x0, 0x0, &(0x7f000004a000)={{}, {0x77359400}}, &(0x7f0000000180))

23:36:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]})
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x204, 0x21, 0x80a, 0x45a6}, 0x14)
setgroups(0x0, &(0x7f00000000c0))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)

[  418.973297] binder_alloc: binder_alloc_mmap_handler: 27978 20010000-20013000 already mapped failed -16
[  418.986528] binder: BINDER_SET_CONTEXT_MGR already set
[  418.991906] binder: 27978:27989 ioctl 40046207 0 returned -16
[  418.999419] binder_alloc: 27978: binder_alloc_buf, no vma
[  419.005417] binder: 27978:28045 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  419.006034] binder: 27978:28041 transaction failed 29189/-3, size 0-0 line 3137
[  419.021250] binder: 27978:28045 ERROR: BC_REGISTER_LOOPER called without request
[  419.029561] binder: 27978:28045 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER
[  419.063366] binder: undelivered TRANSACTION_ERROR: 29189
23:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x482000, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:01 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(0xffffffffffffffff, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:01 executing program 2:
r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x0, &(0x7f0000000080)=0x7)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r1, &(0x7f0000000440), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r1, &(0x7f00005c8000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @multicast2}, 0x10)
recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000002200)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/133, 0x85}], 0x1, &(0x7f0000002480)=""/112, 0x70}}], 0x1ee, 0x0, &(0x7f0000002a80)={0x77359400})
timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000))
close(r1)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
r3 = gettid()
tkill(r3, 0x16)

23:36:01 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x5)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @mcast1, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f66000)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)

23:36:01 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000534000), &(0x7f0000000040)=0xfffffffffffffdf1)

23:36:01 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x806f20bf783db7ae)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040))
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0xfffffffffffffcd1}], 0x10000000000001df)

23:36:01 executing program 6:
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x50000, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00')
ioctl(r0, 0x7f, &(0x7f0000000300)="eee3294e09415e8b109f373555b0c2bdf6c8f28e64c5fceb2ab815f52b7358beb82d25d0bfde80127bde5803a821e8b7f6979702418473bcabb1b6d56ef211a99a250890d4f878e14e4818a3855507f4d0b24b0ab42db9cc232cbf3f4db22d67cc7dee64490dff1697c5d3b876d8b71cd24fb6c91b73adf0fc25281ca552aaca748208772bbbe4b778b820f3ceb33edecfc1749b131eef46a0c91cc4c0610e4c84913472bcd5572ef01c3e39ca59fd61999d6ac1a368329929730de87d92")
fgetxattr(r0, &(0x7f0000000100)=@random={'os2.', "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"}, &(0x7f00000002c0)=""/2, 0x2)

23:36:01 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000001f80)={&(0x7f0000000100)={0x14, 0x13, 0x909, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

[  419.063782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
[  419.067995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
23:36:01 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000))

23:36:01 executing program 1:
lseek(0xffffffffffffffff, 0x1000000000000, 0x4)
fchmod(0xffffffffffffffff, 0x101)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0xba)
sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffffe, 0xffffffffffffff25)

[  419.130956] binder: 28065:28068 ERROR: BC_REGISTER_LOOPER called without request
23:36:01 executing program 7:
clock_nanosleep(0x2000004000007, 0x1, &(0x7f0000000080)={0x77359400}, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4800)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x22000, 0x0)
linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1000)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)

23:36:01 executing program 1:
clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0))
mknod(&(0x7f0000000480)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000340), &(0x7f0000000300))
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f)
r3 = getpid()
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000)
fcntl$setown(r1, 0x8, r3)
fcntl$setsig(r1, 0xa, 0xf)
dup2(r1, r2)
tkill(r0, 0x16)
open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0)

23:36:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100))
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x2, 0x7e200198})
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x20)
r3 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0xe)
poll(&(0x7f0000000080)=[{r3}, {r1}], 0x2, 0x0)

[  419.202896] binder_alloc: binder_alloc_mmap_handler: 28065 20010000-20013000 already mapped failed -16
[  419.231262] binder: BINDER_SET_CONTEXT_MGR already set
[  419.241041] binder: 28065:28068 ioctl 40046207 0 returned -16
23:36:01 executing program 3:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
readv(r0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/245, 0xf5}], 0x4)
r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082)
r2 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0)
flock(r1, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806)
r3 = signalfd4(r1, &(0x7f0000000240), 0x8, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000880)=0x3, 0x4)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000840)=0x9)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3ff})
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x20400000000000, @remote, 0x20}, 0x1c)
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="328628f4fe5b55d18607b20f", 0xc}], 0x1, 0x9)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000780)={'NETMAP\x00'}, &(0x7f00000007c0)=0x1e)
ppoll(&(0x7f0000000140)=[{r1}, {r1, 0x8}, {r2, 0x1410}], 0x3, &(0x7f0000000180), &(0x7f0000000380), 0x8)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000800))
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000900)={'veth1_to_team\x00', 0x8})
memfd_create(&(0x7f00000002c0)='ppp1^em0\x00', 0x2)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
sync()

23:36:01 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x400, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r3, @multicast2, @local}, 0xc)
r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x8080, 0x0)
write$binfmt_aout(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="14f800093a007400"], 0x8)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000180)=""/48)

[  419.257998] binder_alloc: 28065: binder_alloc_buf, no vma
[  419.263946] binder: 28065:28098 ERROR: BC_REGISTER_LOOPER called without request
[  419.297016] binder: 28065:28084 transaction failed 29189/-3, size 0-0 line 3137
23:36:01 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0)
write$selinux_load(r0, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux'}, 0x10)
dup(r0)
unshare(0x20000000)
clone(0x11ffff, &(0x7f0000000300), &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000180))

[  419.316647] binder: 28065:28068 got reply transaction with no transaction stack
[  419.332058] binder: unexpected work type, 4, not freed
[  419.337942] binder: undelivered TRANSACTION_COMPLETE
[  419.353511] binder: 28065:28068 transaction failed 29201/-71, size 80-8 line 2922
[  419.376345] binder: undelivered TRANSACTION_COMPLETE
[  419.381563] binder: undelivered transaction 477, process died.
23:36:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  419.433305] binder: undelivered TRANSACTION_ERROR: 29189
[  419.461256] binder: undelivered TRANSACTION_ERROR: 29201
[  419.468778] binder: 28124:28126 unknown command 0
[  419.482538] binder: 28124:28126 ioctl c0306201 20000140 returned -22
[  419.490934] binder: 28124:28126 got reply transaction with no transaction stack
[  419.499126] binder: 28124:28126 transaction failed 29201/-71, size 80-8 line 2922
[  419.511991] binder_alloc: binder_alloc_mmap_handler: 28124 20010000-20013000 already mapped failed -16
[  419.526965] binder: BINDER_SET_CONTEXT_MGR already set
[  419.532522] binder: 28124:28131 unknown command 0
[  419.536545] binder: 28124:28126 ioctl 40046207 0 returned -16
[  419.543614] binder_alloc: 28124: binder_alloc_buf, no vma
[  419.549787] binder: 28124:28128 transaction failed 29189/-3, size 0-0 line 3137
[  419.551241] binder: 28124:28131 ioctl c0306201 20000140 returned -22
[  419.551385] binder: 28124:28126 got reply transaction with no transaction stack
[  419.551403] binder: 28124:28126 transaction failed 29201/-71, size 80-8 line 2922
[  419.551918] binder: undelivered TRANSACTION_ERROR: 29201
[  419.551971] binder: undelivered TRANSACTION_ERROR: 29201
[  419.552008] binder: send failed reply for transaction 483 to 28124:28126
[  419.557367] binder: undelivered TRANSACTION_COMPLETE
[  419.557383] binder: undelivered TRANSACTION_ERROR: 29189
[  419.611278] binder: undelivered TRANSACTION_ERROR: 29189
23:36:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x0, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:02 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000140)={@remote, <r2=>0x0}, &(0x7f0000000180)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @multicast1}, @in6, 0x100000000000ce22, 0x10000, 0x4e24, 0x8, 0x2, 0xa0, 0xa0, 0x3f, r2, r3}, {0x6f70, 0x20, 0x401, 0x8, 0x400, 0x4, 0x5, 0x1000000008}, {0x100000000000, 0x3ff, 0x7, 0x5}, 0x400, 0x6e6bb6, 0x2, 0x1, 0x3, 0x20000000003}, {{@in=@multicast2, 0x4d2, 0x7f}, 0x2, @in6=@local, 0x3503, 0x7, 0x3, 0x6a8, 0x20, 0x2, 0x8}}, 0xe8)

23:36:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x20012, r1, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0)
r3 = fcntl$getown(r2, 0x9)
timer_create(0x3, &(0x7f0000000180)={0x0, 0x3, 0x0, @tid=r3}, &(0x7f00000001c0))
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100))
ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000000c0))
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'ip6_vti0\x00', {0x2, 0x4e24, @broadcast}})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x8011, r1, 0x0)

23:36:02 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000000))
socket$inet6(0xa, 0x2, 0x3)

23:36:02 executing program 1:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20002, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a")
fcntl$getownex(r0, 0x10, &(0x7f0000000000))
sendfile(r0, r1, &(0x7f0000000100), 0x8402)
ioctl$void(r0, 0x5450)

23:36:02 executing program 6:
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000700)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x100, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'gre0\x00', @local})
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000080)=0x14)
ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000000c0)=r4)
connect$packet(r3, &(0x7f0000000100)={0x11, 0x1c, r4, 0x1, 0x1e4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)

23:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x7, {0x7, 0x4, 0xfffffffffffffffe, 0x3}}, 0x20)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:02 executing program 2:
socketpair$unix(0x1, 0x100800000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffff9}]})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x1e, 0x2}, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r2=>0x0, <r3=>0x0})
munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
timer_settime(r1, 0x1, &(0x7f00000001c0)={{0x77359400}, {r2, r3+30000000}}, &(0x7f0000000200))
clock_adjtime(0x0, &(0x7f0000000080))

[  419.939964] binder: binder_mmap: 28136 20000000-20003000 bad vm_flags failed -1
[  419.959054] binder: 28143:28148 ERROR: BC_REGISTER_LOOPER called without request
[  419.970063] binder: binder_mmap: 28136 20000000-20003000 bad vm_flags failed -1
23:36:02 executing program 1:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x100)
r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0)
recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/157, 0x9d}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2, &(0x7f0000000140)=""/106, 0x6a, 0xb09c}, 0x20)
renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='.\x00')

[  419.986061] binder_alloc: binder_alloc_mmap_handler: 28136 20001000-20002000 already mapped failed -16
[  420.000433] binder: BINDER_SET_CONTEXT_MGR already set
[  420.007282] binder: 28143:28160 ERROR: BC_REGISTER_LOOPER called without request
[  420.015394] binder_alloc: 28143: binder_alloc_buf, no vma
[  420.021546] binder: 28143:28148 ioctl 40046207 0 returned -16
[  420.029988] binder: 28143:28155 transaction failed 29189/-3, size 0-0 line 3137
23:36:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0)
getsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f000059dffc), &(0x7f00000000c0)=0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))

23:36:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = memfd_create(&(0x7f0000000140)='wlc\x00', 0x1)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000180)={0x2b, @multicast2, 0x4e21, 0x2, 'lc\x00', 0x8, 0x100, 0x4e}, 0x2c)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x0, @multicast2, 0x4e20, 0x4, 'wlc\x00', 0x10, 0x1, 0x29}, {@local, 0x4e24, 0x0, 0x800, 0x6, 0xfff}}, 0x44)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c)

23:36:02 executing program 7:
r0 = socket(0xa, 0x1, 0x0)
fstat(r0, &(0x7f0000000180))
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)})
openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/user\x00', 0x2, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))
r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x0, 0x0, &(0x7f0000fedffe)})
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x7, 0x3, 0x5, 0x7, 0x4, 0x8, 0x20, 0x40, 0x7, 0x1, 0x80000000, 0x1})

[  420.045578] binder: 28143:28148 got reply transaction with no transaction stack
[  420.053652] binder: unexpected work type, 4, not freed
[  420.059489] binder: undelivered TRANSACTION_COMPLETE
[  420.070663] binder: undelivered TRANSACTION_COMPLETE
[  420.076749] binder: 28143:28148 transaction failed 29201/-71, size 80-8 line 2922
[  420.084879] binder: undelivered transaction 489, process died.
23:36:02 executing program 1:
r0 = socket(0x1, 0x0, 0x7a)
sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getnetconf={0x14, 0x52, 0x1fa69918d895a87b}, 0x14}}, 0x0)

23:36:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  420.115055] binder: undelivered TRANSACTION_ERROR: 29189
[  420.130729] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  420.152870] binder: BINDER_SET_CONTEXT_MGR already set
23:36:02 executing program 2:
memfd_create(&(0x7f0000000340)='/dev/sg#\x00', 0x2)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070")
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2})
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00', r3})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000400)=0x7)
fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="6f73152e736563755619b999c4ee66fc302e00"], &(0x7f00000000c0)=""/229, 0xe5)
fcntl$lock(r1, 0x5, &(0x7f0000000000))
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0))
syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xe155, 0x2000)
openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x400000, 0x0)

[  420.167230] binder_alloc: binder_alloc_mmap_handler: 28172 20001000-20004000 already mapped failed -16
[  420.178504] binder: undelivered TRANSACTION_ERROR: 29201
[  420.185700] binder: 28179:28181 ioctl 40046207 0 returned -16
[  420.202668] binder_alloc: 28172: binder_alloc_buf, no vma
[  420.212909] binder: BINDER_SET_CONTEXT_MGR already set
[  420.220852] binder: 28172:28176 ioctl 40046207 0 returned -16
[  420.238315] binder: 28179:28188 transaction failed 29189/-3, size 0-0 line 3137
[  420.239906] binder_alloc: 28172: binder_alloc_buf, no vma
[  420.239950] binder: 28172:28193 transaction failed 29189/-3, size 0-0 line 3137
[  420.262204] binder_alloc: 28172: binder_alloc_buf, no vma
[  420.268600] binder: 28179:28181 ERROR: BC_REGISTER_LOOPER called without request
[  420.268889] binder: 28172:28185 transaction failed 29189/-3, size 0-0 line 3137
[  420.269792] binder: undelivered TRANSACTION_ERROR: 29189
[  420.269827] binder: undelivered TRANSACTION_COMPLETE
[  420.269862] binder: undelivered TRANSACTION_ERROR: 29189
[  420.269911] binder: undelivered transaction 496, process died.
[  420.269940] binder: undelivered transaction 495, process died.
[  420.277654] binder: undelivered TRANSACTION_COMPLETE
[  420.320439] binder: 28179:28188 got reply transaction with no transaction stack
[  420.329525] binder: 28179:28188 transaction failed 29201/-71, size 80-8 line 2922
23:36:02 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
sched_yield()
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=<r1=>0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sw_sync\x00', 0x202002, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180))
pipe2(&(0x7f0000000100), 0x4000)
capset(&(0x7f00001e8ff8)={0x39980732, r1}, &(0x7f0000000040)={0x0, 0x8001})
setns(r0, 0xfffffffffffffffc)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x53d9, 0x40040})

23:36:02 executing program 1:
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000140)=0x962f551006754c86)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200000, 0x0)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8, &(0x7f0000000080)="025cc80700145f8f764070")
fstat(r2, &(0x7f00000000c0))
ioctl$TIOCEXCL(r1, 0x540c)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/4\x00')

23:36:02 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x2)

23:36:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x0, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:02 executing program 7:
r0 = inotify_init1(0x1)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000001540))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004380)={{{@in6=@local, @in=@multicast2}}, {{@in=@broadcast}}}, &(0x7f0000004480)=0xe8)
lstat(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580))
lstat(&(0x7f0000004600)='./file0\x00', &(0x7f0000004640))
getgroups(0x1, &(0x7f0000004d00)=[0x0])
getgroups(0x0, &(0x7f0000006280))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000006d80)={{{@in=@loopback, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000006e80)=0xe8)
sendmmsg$unix(r2, &(0x7f0000008f80)=[{&(0x7f0000007100)=@abs, 0x6e, &(0x7f00000084c0)}], 0x1, 0x0)
ptrace(0x4207, r1)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x4, 0x401, 0x800, 0x0, 0x4, 0x20000, 0x6, 0xffffffff, 0x1, 0x6, 0x7d0, 0x80000001, 0x4dff7afe, 0x9, 0x3f, 0x80000000, 0x100000001, 0x9, 0x2, 0x7, 0x1f, 0x1, 0x80000000, 0x0, 0x802, 0x6, 0x80000000, 0x9, 0xe1a9, 0x0, 0x3, 0x70f, 0x2, 0x7fff, 0xff, 0x0, 0xf, 0x0, @perf_config_ext={0xb4d6, 0x75}, 0x800, 0x0, 0x9a4c, 0x0, 0x1, 0x3, 0x401}, r1, 0x5, r2, 0x2)
ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000300)={&(0x7f0000002100)=""/4096, 0x1000})

23:36:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
readahead(r3, 0x9, 0x8001)
readahead(r3, 0x5, 0x40)
readahead(r0, 0x4ed, 0x9)
ioctl(r3, 0x5, &(0x7f00000002c0)="e4cf0ef8754e48cac96f574ee1d1c933181b31980de3b366aed6019a986f8d39c4d30fd94ff26cf391f00d5003a3a7bf1ad0e6a9cc6fd8058f7273666480d64ebe0c7fb92c9c6acc0579af4c712dda0c5d4fbbad74b2b9a3a7e5fb5760756ece9534152e37a904ec344dafbc55ca9a371cb60337d4b9bc37b2d3388c042e72f4ba0b3da71cdd0e7aa775cdfd90717218a4128926a0ee47d6")
mmap(&(0x7f000008f000/0x1000)=nil, 0x1000, 0x0, 0xa132, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/4\x00')
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
getsockname$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c)

23:36:02 executing program 2:
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)='projid_map\x00')
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000001c0))
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r3 = dup3(r2, r2, 0x80000)
ftruncate(r2, 0x800)
fcntl$setown(r2, 0x8, r0)
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3\x00')
ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000180))

23:36:02 executing program 1:
r0 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2}}, 0x26)
r1 = dup(r0)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000080)=0x20)
socket$l2tp(0x18, 0x1, 0x1)
getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x14)

23:36:02 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x410000, 0x0)
recvfrom$inet(r1, &(0x7f0000000240)=""/187, 0xbb, 0x40010000, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x3c}}, 0x0)

23:36:02 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)}, &(0x7f0000000240)=0x78)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf2500020008000500ff0f000008000400d502000008000b000a0000000800040009000000140001000000000e00000000000000000000000014000100fe8000000000000000000000000000bb300003000800040059b10000080003000400000008000300030000001400060000001f00000000000000ffffac14140bd2f6d6c52185df7fc72a205e935ea38133e76cd7b78b7a46bbb3baef546405c8c5cb9d328d28a2723790b8edb79741bdd448800055f6446b527c3650b8f4556a58bf89c7cdc7ed45d243ed86b029f84dc3ea4792954b9c43e8742755d29200b8cbd63c"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000580)=0x1e)
pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})

23:36:02 executing program 7:
r0 = socket$packet(0x11, 0x2, 0x300)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xc)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00')
setresuid(0x0, r1, 0x0)

23:36:03 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8dff7c79c6f19e4c5345206069268e2cfebcf683872f862f6b0eb803416e7cac"], 0x10)
sendfile(r0, r0, &(0x7f0000000100), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0)

23:36:03 executing program 1:
mkdir(&(0x7f0000000300)='./control\x00', 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f0000000240)='./control/file0\x00')
rmdir(&(0x7f0000000080)='./control\x00')
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000005c0))
setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0xda, 0x1, 0x72}, 0xc)
unlink(&(0x7f00000000c0)='./file0\x00')
clone(0x0, &(0x7f0000000440), &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0))
close(r0)

23:36:03 executing program 6:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000003c0)=""/236)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='gretap0\x00', 0x1)
openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000340)='/dev/pktcdvd/control\x00', 0x1, 0x0)
write$P9_RLCREATE(r0, &(0x7f0000000300)={0x18, 0xf, 0x1, {{0x80, 0x1, 0x2}, 0x3}}, 0x18)
bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000380)=0x6d1, 0x4)

[  420.948995] binder_alloc: binder_alloc_mmap_handler: 28179 20010000-20013000 already mapped failed -16
[  420.973476] binder_alloc: 28179: binder_alloc_buf, no vma
[  420.979514] binder: 28179:28188 transaction failed 29189/-3, size 0-0 line 3137
[  420.988742] binder: 28179:28252 ERROR: BC_REGISTER_LOOPER called without request
23:36:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sw_sync\x00', 0x0, 0x0)
epoll_pwait(r2, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], 0x6, 0x100000001, &(0x7f0000000280)={0x3f}, 0x8)
r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="16220020dec20b9217e8c06c7982d2e297e4f0aafc6c34aa6889fefed0fd838301bbd1fb060939390ba4e7d6d1487ce2c2f793fbdf99b36191bacdf109cb907b147c4171b22311dcc1a4f38ef88b17359de8c26d5731ee57eba3eccf7c752bf78301ad8d6c61dafeda684e9d4b210390c236840f11af7dc283a9b59571beedbd256e6866b05eaa75c7ca31ec33e67f07c6455255c6c7c574035565cb9475db15a7c29ec6a7e1288439cf2ea8c6b701312b59dab37897c2a3234eccde7fdf48e2e8db6274820588200f67a50fc4740c30d24441b3e3bf140725c8018f92055514b1a87934ad00ca003cda7d38b686d79c7cfb317efcb936987ce07d0bc8ecdb2188744cc9aaa7a5611ca6f5fc8d7c98aa3c2f8a89110900000000000000a8dc54a01397cf39f22fccc5239012", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
mq_getsetattr(r2, &(0x7f0000000380)={0x0, 0x1000, 0x6, 0xe8, 0x7fffffff, 0x4, 0x3, 0x5}, &(0x7f0000000580))

23:36:03 executing program 7:
r0 = socket$packet(0x11, 0x2, 0x300)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000100)=0xc)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00')
setresuid(0x0, r1, 0x0)

23:36:03 executing program 5:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req={0x4, 0xa, 0x19000000000000, 0x7}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sw_sync\x00', 0x80000, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000000340)=0x5, 0x4)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x181101, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80400040}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xa8, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc563}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40001)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@local, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000005c0)=0xe8)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000600)={@mcast2, 0x53, r6})

23:36:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
ptrace$setopts(0x4206, r2, 0x2, 0x3)
ptrace(0x4207, r2)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x101, 0x7fffffff, 0x9, 0x0, 0x0, [{r1, 0x0, 0x9e}, {r1, 0x0, 0x1000}, {r0, 0x0, 0x7}, {r1, 0x0, 0x8000}, {r1, 0x0, 0x2}, {r1, 0x0, 0x7}, {r1, 0x0, 0x4}, {r0, 0x0, 0x7fffffff}, {r1, 0x0, 0x9}]})
r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/if_inet6\x00')
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000200)={{0x6, 0x2}, 'port1\x00', 0x2, 0x2, 0x9, 0x20, 0x2, 0xa3, 0x5, 0x0, 0x6, 0xfffffffffffffffb})
ptrace$setopts(0x4202, r2, 0x0, 0xa07000)

[  421.005158] binder: 28179:28188 got reply transaction with no transaction stack
[  421.016877] binder: undelivered TRANSACTION_ERROR: 29189
[  421.017781] binder: 28179:28188 transaction failed 29201/-71, size 80-8 line 2922
23:36:03 executing program 7:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00')
sendfile(r0, r1, &(0x7f00000000c0), 0x7fffffff)

[  421.058327] binder: undelivered TRANSACTION_ERROR: 29189
[  421.063489] binder: BINDER_SET_CONTEXT_MGR already set
[  421.063498] binder: 28267:28268 ioctl 40046207 0 returned -16
[  421.064012] binder: 28267:28268 unknown command 536879638
[  421.064021] binder: 28267:28268 ioctl c0306201 20000180 returned -22
[  421.064094] binder: 28267:28268 ERROR: BC_REGISTER_LOOPER called without request
[  421.111933] binder: 28267:28276 got reply transaction with no transaction stack
[  421.133856] binder: 28267:28276 transaction failed 29201/-71, size 80-8 line 2922
[  421.158404] binder: undelivered TRANSACTION_ERROR: 29201
[  421.174056] binder: undelivered TRANSACTION_ERROR: 29201
23:36:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x0, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:03 executing program 6:
r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x102, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000400)=""/4096)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f0000001540)="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")
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:03 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0xa000, 0x0)
setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000080)="fa824ed07c2bc7eeba0741fa7a263e5b3344b79dfd8f8c582310296b69e4537c77b16ac4b8de8b48f2894c4deae0caf1580ade48b5d6716cc210aff943307a25638f4aefd9b9f96235ac73b90d68cbb26973f0823e7084daeb12dfb247bccc9a52b5ef758acc7f8ce6146921d54dbb5455c3e9c3efbc2853", 0x78)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
lseek(r2, 0xfffffffffffffffe, 0x0)

23:36:03 executing program 7:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4880, 0x0)
fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080))
time(&(0x7f00000000c0))
r1 = dup(r0)
r2 = epoll_create(0x7fffffff)
getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000100)=""/114, &(0x7f0000000180)=0x72)
write$binfmt_elf32(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfffffffffffffffd, 0x3, 0x4, 0x7, 0x59113c32b9bb8a0b, 0x3e, 0x7f, 0x3ac, 0x38, 0x15a, 0x0, 0x6, 0x20, 0x2, 0xffffffffffffff69, 0x7, 0xbf90}, [{0x60000000, 0xa4c, 0x0, 0x3ff, 0x5, 0x7, 0x1, 0x2}, {0x6474e553, 0x1000, 0x4, 0xfffffffffffffeff, 0xff, 0x1, 0x3ff, 0x4}], "2e47a42c5fe7206855e615eac18c45f3a479f493b00b31dba197662551cc79a20c7cbfc12dafee4ff9fad3ba5c82eaa375eabebcb4ff15aa57bdac1ab6e66fa5ad305fc3e17cc8fb18938e8c660119a054152cf65019fb922d6803249e439d09fd5c40e31668347e77b3aa34a0673172c4fb4bf483692818356754c4c794c48cd75266aba1d2d56c92f453d5125d", [[], [], [], [], [], []]}, 0x706)
r3 = openat$cgroup_ro(r0, &(0x7f0000000900)='memory.current\x00', 0x0, 0x0)
read(r0, &(0x7f0000000940)=""/37, 0x25)
getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000980), &(0x7f00000009c0)=0x10)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000a00)=0x3f, 0x4)
close(r3)
fcntl$notify(r0, 0x402, 0x3)
preadv(r0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/155, 0x9b}, {&(0x7f0000000b00)=""/72, 0x48}], 0x2, 0x0)
ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000c00)={0x9, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c40)='/selinux/create\x00', 0x2, 0x0)
umount2(&(0x7f0000000c80)='./file0\x00', 0x4)
getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000cc0)={@empty, <r4=>0x0}, &(0x7f0000000d00)=0x14)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000d40)={@local, @mcast2, @mcast1, 0xf13, 0x2, 0x7, 0x400, 0x9, 0x1, r4})
openat$cgroup_procs(r1, &(0x7f0000000dc0)='cgroup.threads\x00', 0x2, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000e00)=""/175)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000ec0))
setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000f00)=0x1, 0x4)
accept4(r0, &(0x7f0000000f40)=@xdp, &(0x7f0000000fc0)=0x80, 0x80000)
personality(0x800000)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001000)={0xfa, 0x257, 0x7f, "17ccda6deff597cfc1a69906b38602767df3b50d497047281e2b0f472a091d2f1f700d706f689dfddd6db43e6b9574893b45042bc6a857d202d7dedfe878a81524772a8f7753f2e05d94830b921acca2730e206dd54f3feaa00226b2a82e379567c77ed605afc0c5d97fc57ccacc6951f4a916b2184dadd5c0e5b9bbe6de2ff17058f2b43cbaa7b24356f7628963a314d0ee89e9bb9966178ad10ef87a0f0c5f956803ed7f780458553495f40179136c72df68971484735d590dcf73037a2c60bf80588a5e2cf6a0a8759f7b7f256d5fa6b44439486ae34535b510e2f85dfe72b73c8e1537782576c4abeb8d5154702c38ebc9853037875f4f3a"})
epoll_create(0x9)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000001140)={'sit0\x00', @local})
ioctl$KDADDIO(r0, 0x4b34, 0xb3f1)

23:36:03 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000000))
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0)
socketpair(0xb, 0x0, 0x3f, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9)
getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:36:03 executing program 3:
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1)

23:36:03 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0x0, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)}, &(0x7f0000000240)=0x78)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="08002dbd7000fcdbdf2500020008000500ff0f000008000400d502000008000b000a0000000800040009000000140001000000000e00000000000000000000000014000100fe8000000000000000000000000000bb300003000800040059b10000080003000400000008000300030000001400060000001f00000000000000ffffac14140bd2f6d6c52185df7fc72a205e935ea38133e76cd7b78b7a46bbb3baef546405c8c5cb9d328d28a2723790b8edb79741bdd448800055f6446b527c3650b8f4556a58bf89c7cdc7ed45d243ed86b029f84dc3ea4792954b9c43e8742755d29200b8cbd63c"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000540)={'TPROXY\x00'}, &(0x7f0000000580)=0x1e)
pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8})

23:36:03 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@local}, {@in=@broadcast, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
socket$inet6(0xa, 0xa, 0x3f)

23:36:03 executing program 1:
r0 = socket(0x20000000000000a, 0x2, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100))
r1 = getpid()
r2 = getpgid(r1)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r2})
sendfile(r0, r0, &(0x7f0000000040), 0xffffffff00000001)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x80}, {0x6}]}, 0x10)

23:36:03 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='stem.\x00'], &(0x7f00000003c0)=""/2, 0xffffffffffffff61)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)

23:36:03 executing program 3:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8))
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000a40))
getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000140)=0x14)
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0xc)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="48010000", @ANYRES16=r2, @ANYBLOB="000516b09d051ebd7000000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES16], 0x6}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r4 = gettid()
r5 = socket$inet6(0xa, 0x6, 0x0)
ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0)
tkill(r4, 0x7)
sendmsg(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="d1d55d049740bbee9dd7c3892f9b2e7666e1a3346ab8a32637c587d49fdec6e923302fdd525e57322c2c29e05f8a9b365b4bed9f53200fc7e5b40ce8670b5dd16b1a3803a70668b88bf92ce94ae5e4fe514b00c255f3167887490c7164f7ff0d47c0e38d", 0x64}, {&(0x7f0000000480)="9da418cd25f540e1b38fc8eb4224e5cde304d5e0f1bf482cd18f720a275063a4cbc0a3f1987dc3524d4ae71f0bed54feadcf12db28a76a508db8d68f938e0bb2b6c7e60845f4ba246cce06c3e9e26cacf53d1feb78bc6b5d70df133c5b1e74cdb4075f28d8e1c6c97c139cf82621dfc19b789d2bdfca9c4a2d8ae905a18aa63e90482adee07c948fa88ef5aaf205ba706f7ce822b48ad5b0eeb2f80f6f14449825d5b186af159de57ad51464f4fe98ccbee4832aa78b1ff67f270025451e8f1a22f0ccb0ba9e327cf2944e73d3ae", 0xce}, {&(0x7f0000000580)="fe0611c29dc3e959bfa0004afc2464a2ff6b5c0df9ade953cf4f9986ed4784c0242b616ccaeae421267f27a59dd6ed233df9654459177876fcb088deb7cf1249e9097ab28f9976621a395866d63d37ea1a170253bb1fd85b", 0x58}, {&(0x7f0000000600)="7a034e2f2b37c204b3066c9afa8493691691e6eee448a5e7da910ad5b4bd0d4ef5c399c14a38ff2d953a270ea6652cb488dd0985894b060093da78db38f61144778b2315fafa6181", 0x48}, {&(0x7f0000000680)="8666efcd9ed1c6388f74e3d5c81c082275903f76b405fc63a308f297c6ca1744dd6901a68bc1fae90f890c6da4ef2ec1af40a50422aa43ce846ae64e707c2bbd2ca215225ce15db9975903af7d5c9dbe9af3fcb25cfd9a04becbaa96ea7bf0a7c419dc68686bafcff0ffc5d9256c193eca6187eaf56a2c4eb6411dda453c7c42ac707446b8a025f78a848740afc20224f6fa8512978d60cbd9088f904975bfed19f8f53f5f20e1b8bb092e6a7b1636a392ee24119976844506", 0xb9}, {&(0x7f0000000740)="46b100cb0e3c232a362c4863b307f53594ef4dfddfefb680df83e5b516543ce2fbc12c31e7026fcdb4ca550ed9500b90e7dc17fbbb2f67ef5af4f4a0cb02ee536d50dce1849ac0070a85844f9edc86bac6bb0572a1364ab93c1885f0d126", 0x5e}, {&(0x7f00000007c0)="91a4daf730cae0e0cc2f8a958ff2aebaa95facd25d38978d6e759184e3cb7c3601aac3daa77d1b9d15e436e79eecf8389a56d0a4039ff26c9236f8da83da771b9f271b877d89363d293d46023b8f650a3bdf155ad12359a884f75e15a1d5ab6f34550d8ecec8a011769ded7a9b63fad943aff6", 0x73}, {&(0x7f0000000840)="584955ee1ccc0519f62351452432eda9b015f0053a98b2a6e96823b2811626798c4b75e7d3ae93b5660e62", 0x2b}], 0x8, &(0x7f0000000900)=[{0xd0, 0x102, 0xfffffffffffffffc, "806a6bcc5eb20e0ec4bc2576fa85c6ce50fa8bb65abf51bac7c9d4d7a75eab8a53ed415f20f527718afe7be5ca645333c5a963547af157ca8a54a6ca09934d5b760839d96e84522f9ca3721ce452ff889dce08be7ccb6e0cdf3c31ce4ca62f17d7c00b2c18797f6b02067f9dee1a244e2e513de6bad7f4e6fa6bdffcb922fe6f8e6955c83c023d9e5382b611af595bc10ab4e7f39a1c5f892a698ebf0a64fc316af8be4ce4bb2f3dfc0ec9adf12f39aaa64482fcd005f759373a24003446f147"}], 0xd0, 0x8c4}, 0x80)

[  421.850119] binder_alloc: binder_alloc_mmap_handler: 28267 20010000-20013000 already mapped failed -16
[  421.860637] binder: 28267:28276 unknown command 536879638
[  421.865585] binder: 28267:28348 ERROR: BC_REGISTER_LOOPER called without request
[  421.865853] binder: 28267:28348 got reply transaction with no transaction stack
[  421.865861] binder: 28267:28348 transaction failed 29201/-71, size 80-8 line 2922
[  421.868490] binder: undelivered TRANSACTION_ERROR: 29201
[  421.868778] binder: undelivered TRANSACTION_ERROR: 29201
23:36:04 executing program 1:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sw_sync\x00', 0x200000, 0x0)
ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000140)=""/149)
close(r0)
r2 = socket$inet6(0xa, 0x1, 0x4)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000200)=0x17)
ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_int(r3, 0x1, 0x13, &(0x7f000059dffc), &(0x7f0000000000)=0x4)

23:36:04 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000000e80001040000040d000a00ea1100000005000000", 0x29}], 0x1)

23:36:04 executing program 7:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
close(r0)
ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000180)=""/198)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000000)=""/89)

23:36:04 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da758d5d02acc7edbcd7a071fb35331ce3e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c728841041afe57059503eb5a7819e56e5180b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb2717202ea956118f193fb84166c236fdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8afedae871218ff070000000000001db98e5856f17a930fe864295da8aebc0f7f7f5680e4d3f7ade20a2d3e420b35456180b109549e4ef0e1b55691030039ce36a24837297a9b9f7a674b065f6f33f00100f484f04d8bba268991d364ec5ac1383d9ab7460d2a89938fb7600936d99b6a7926ddfb27e09600c5030b051d15119f710af109000000000000000000000000")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
pwrite64(r0, &(0x7f0000000000)="7c98b5dc689560361dec66752c61016383f01ecff99be984faeba0c7f02d310746757a27f51006275b397b8c7e818345ee32e19b9a0e4caf0837e853b937cda9515eccd0f00f1ed5a8c36558c72e1e0a2dd33a90458256770f1a3f8948af60988f7c92b0477a8bb3d30a8a", 0x6b, 0x0)

23:36:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f004840952122cf67d105bc695f72f78b2f21f98518f04213e156bde948896215270a3acee64965f5afaa659e0bc9a3f8e1c6504bf6886a47020e35b168df1db2135119554c75fc2e111eabe2e78483", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000050000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000000000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627300000000", @ANYRES64=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="59877209522c4893dd7c57d24908000000216322aa"], 0x0, 0x0, &(0x7f0000000480)})
prctl$getname(0x10, &(0x7f0000000380)=""/155)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  421.899842] binder: 28267:28276 ioctl c0306201 20000180 returned -22
[  421.945309] binder: 28353:28357 unknown command 1078460447
[  421.951035] binder: 28353:28357 ioctl c0306201 20000180 returned -22
[  421.960710] binder: 28353:28357 ERROR: BC_REGISTER_LOOPER called without request
[  422.006964] binder: 28353:28372 got reply transaction with no transaction stack
[  422.014738] binder: 28353:28372 transaction failed 29201/-71, size 80-8 line 2922
23:36:04 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x0, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:04 executing program 3:
pipe(&(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x23f, r0, 0x0)
futex(&(0x7f0000000140), 0x1, 0x0, &(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f00000004c0), 0x0)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c)
syncfs(r1)
writev(r1, &(0x7f00000005c0)=[{}, {&(0x7f0000000180)="a995b4148a83f3ba45ea460beecfd7cdcf9028fa5d7879b764801793629f67808b6e4f606cc0cea8482cb5b38f93049cadcac84dfb96bc1052315c456b14a206ee45aa666e71d333684328fe9e39e125c3d2d2b016625a39f1adc2c9727cbcc21818e3c2381489c09633a8fa9e916eadaea08e01c07522cad89055ce574e6b4ff1beb26008dcef95dc7cc4c99d54ff2c5b7cd85492cfc89275c6cbd413a261e3c2d6ff2b4d59ab83896a077fa8f73fe49f1b63de53e03a01a3aaaafd60138f98fae929407abed9d6059405102dd57bcfde22", 0xd2}, {&(0x7f0000000080)="e1443cecab3c6823532f23603c95285894444666042bc97a4c719ccbf5085c5aa9048a1f87fca0c4b37d26c8f0970a6b26c6b3552107e66460cc7e2f53c0bc2ea0d5", 0x42}, {&(0x7f0000000280)="8df37efb71fd31053e5c6afc62d9c05d69fe4098fece6bc532997c141d9137c92e0efb06ad1b4a5e5bff849017d06e636efdbcaf33ad74c3fb15b63564ea579d98bb77eea7028e5b171b9c5c04bc2d64cc3f0938d2ab562a476a488066ab306e1396bc46c8a64feb791dac6e3df1436f7107a72d8e627b83c9702ab467877addb001caf31ada3bb9035063d3bf72cc81b57435593d696a9ee6007452ad036a5bdde42c11338fead900ffa48e48e1a04565a0db14f61f6073532a27254e436ccb053f3eab55afd24cd5d57cbf7d064470339d848d4f35473684c064", 0xdb}, {&(0x7f0000000380)="02e87a86e5e7c88196bae68ad0bd4b2818713cef01823d37ad50f56ab3889207d38e0057f6a557d6f4cc8c5dc57da7c10989d62e107102af9de4b89ec9280d325140feac48e6b75a86137d6061eb37494efd6664d9cc55db30e7af7b1d75355367b7dd982d74", 0x66}, {&(0x7f0000000400)="b0801d58b02a40b958a4", 0xa}, {&(0x7f0000000500)="dec666bd7fd05dec4016f9d57e7491e4e4d36bd8392be19997cbb4403453799ac9494bd9cc42fcb5426ba804fa0196a1cd4d1341306969c873d798263bbae221d800692cfc00ff8bd5007a351aabbd2f773da7d6fa2c82b6cac2ad6736c4008f85decaa2a23d99798f0165036bac79d5bb6e3362616f5131068b2f023dd94948ca08dbff54dc2dc9", 0x88}, {&(0x7f0000000440)="0f8e4599ba36fe719730b0180a0d83ebb2bf128571e48e6490bfc07a5902edaf102c631914e799ffe2", 0x29}], 0x8)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xa8801, 0x0)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0xff)

23:36:04 executing program 7:
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = socket$inet6(0xa, 0x100f, 0x20000000004)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x8000005, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0)
write$FUSE_WRITE(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x1}, 0x18)
prctl$setname(0xf, &(0x7f0000000000)='user\x00')
fcntl$getflags(r0, 0x40b)
r3 = socket(0xb, 0x7, 0x20)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x4, 0x401}, 0xc)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="92", 0x1}], 0x1)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="eb8910e57776f58dda12a389fe25e2be", 0x10)
r4 = gettid()
tkill(r4, 0x1000000000013)
socket$inet6(0xa, 0x0, 0x0)

23:36:04 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000580)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:04 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='/dev/ptmx\x00', &(0x7f0000000080)='/dev/ptmx\x00', &(0x7f00000000c0)='/dev/ptmx\x00', &(0x7f0000000100)='/dev/ptmx\x00'], &(0x7f0000000500)=[&(0x7f0000000240)='em1#\x00', &(0x7f0000000280)='/dev/ptmx\x00', &(0x7f00000002c0)='/dev/ptmx\x00', &(0x7f0000000300)="776c616e307d401300", &(0x7f0000000340)='securitymime_type#cgroup]}mime_typewlan1%\x00', &(0x7f0000000380)='/dev/ptmx\x00', &(0x7f0000000400)='/dev/ptmx\x00', &(0x7f0000000440)='{({+wlan1#vboxnet1}[){nodev@vmnet18em1GPLcpuset\x00', &(0x7f00000004c0)='/dev/ptmx\x00'], 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x2710}, 0x10)
r2 = syz_open_pts(r0, 0x1)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x3)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000640)={0x5, 0x7, 0x53c, 0x1242, 0x293d})
lremovexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)=@known='security.evm\x00')

23:36:04 executing program 5:
r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$setperm(0x5, r0, 0x2a0000)

23:36:04 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
bind(r0, &(0x7f00000001c0)=@generic={0xd, "2b58d34e7dca0253a877e4a67a7f318190e8f65fb90ceb0bbe534f017dd30802a53a86bf71b7e3f05eb4484594a3ea8962548ac1ce6784c6d5f8e6c57715bef026c9f5fd366ae78aa83fc289e90803c45a5ec68563a3ba62392d24d5e12d69b934f3b81cc304a14a675336ce36f6801e0b96dfc35c84183ddfa5e975bb80"}, 0x80)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = dup2(r0, r0)
ioctl$RTC_WIE_OFF(r1, 0x7010)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
unshare(0x0)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r4 = getuid()
quotactl(0x0, &(0x7f0000000000)='./bus\x00', r4, &(0x7f0000000040)="9f9ae5bf0a4a6c15a44db62e1f6316066fe9e8b52fe22c5009c63f7089429504c5ba7ba1ff3f6c057226cbd64f5d851e")
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x30, r3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000004000), &(0x7f0000000080)=0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
accept(r3, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80)
write$P9_RREADLINK(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='./u3'], 0xe)

23:36:04 executing program 5:
getpgid(0xffffffffffffffff)
r0 = getpgrp(0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='cgroup\x00')
preadv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f00000002c0)=""/193, 0xc1}, {&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f00000003c0)=""/28, 0x1c}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/77, 0x4d}, {&(0x7f0000001480)=""/192, 0xc0}], 0x7, 0x0)

23:36:04 executing program 3:
pipe(&(0x7f00000006c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x23f, r0, 0x0)
futex(&(0x7f0000000140), 0x1, 0x0, &(0x7f0000000480)={0x0, 0x1c9c380}, &(0x7f00000004c0), 0x0)
r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c)
syncfs(r1)
writev(r1, &(0x7f00000005c0)=[{}, {&(0x7f0000000180)="a995b4148a83f3ba45ea460beecfd7cdcf9028fa5d7879b764801793629f67808b6e4f606cc0cea8482cb5b38f93049cadcac84dfb96bc1052315c456b14a206ee45aa666e71d333684328fe9e39e125c3d2d2b016625a39f1adc2c9727cbcc21818e3c2381489c09633a8fa9e916eadaea08e01c07522cad89055ce574e6b4ff1beb26008dcef95dc7cc4c99d54ff2c5b7cd85492cfc89275c6cbd413a261e3c2d6ff2b4d59ab83896a077fa8f73fe49f1b63de53e03a01a3aaaafd60138f98fae929407abed9d6059405102dd57bcfde22", 0xd2}, {&(0x7f0000000080)="e1443cecab3c6823532f23603c95285894444666042bc97a4c719ccbf5085c5aa9048a1f87fca0c4b37d26c8f0970a6b26c6b3552107e66460cc7e2f53c0bc2ea0d5", 0x42}, {&(0x7f0000000280)="8df37efb71fd31053e5c6afc62d9c05d69fe4098fece6bc532997c141d9137c92e0efb06ad1b4a5e5bff849017d06e636efdbcaf33ad74c3fb15b63564ea579d98bb77eea7028e5b171b9c5c04bc2d64cc3f0938d2ab562a476a488066ab306e1396bc46c8a64feb791dac6e3df1436f7107a72d8e627b83c9702ab467877addb001caf31ada3bb9035063d3bf72cc81b57435593d696a9ee6007452ad036a5bdde42c11338fead900ffa48e48e1a04565a0db14f61f6073532a27254e436ccb053f3eab55afd24cd5d57cbf7d064470339d848d4f35473684c064", 0xdb}, {&(0x7f0000000380)="02e87a86e5e7c88196bae68ad0bd4b2818713cef01823d37ad50f56ab3889207d38e0057f6a557d6f4cc8c5dc57da7c10989d62e107102af9de4b89ec9280d325140feac48e6b75a86137d6061eb37494efd6664d9cc55db30e7af7b1d75355367b7dd982d74", 0x66}, {&(0x7f0000000400)="b0801d58b02a40b958a4", 0xa}, {&(0x7f0000000500)="dec666bd7fd05dec4016f9d57e7491e4e4d36bd8392be19997cbb4403453799ac9494bd9cc42fcb5426ba804fa0196a1cd4d1341306969c873d798263bbae221d800692cfc00ff8bd5007a351aabbd2f773da7d6fa2c82b6cac2ad6736c4008f85decaa2a23d99798f0165036bac79d5bb6e3362616f5131068b2f023dd94948ca08dbff54dc2dc9", 0x88}, {&(0x7f0000000440)="0f8e4599ba36fe719730b0180a0d83ebb2bf128571e48e6490bfc07a5902edaf102c631914e799ffe2", 0x29}], 0x8)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0xa8801, 0x0)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0xff)

23:36:04 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00')
write$P9_RUNLINKAT(r0, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7)
fgetxattr(r0, &(0x7f0000000080)=@random={'security.', 'wlan0+usermd5sum\x00'}, &(0x7f00000003c0)=""/2, 0x2)
fcntl$notify(r0, 0x402, 0x10)

23:36:04 executing program 3:
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x30, &(0x7f0000001540)={0x800000004, 'bond_slave_0\x00'}, 0x18)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x7, 0x8, 0x5, {r2, r3+10000000}, 0x9, 0xffffffff7fffffff})

23:36:04 executing program 3:
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x30, &(0x7f0000001540)={0x800000004, 'bond_slave_0\x00'}, 0x18)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400000, 0x0)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
clock_gettime(0x0, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x7, 0x8, 0x5, {r2, r3+10000000}, 0x9, 0xffffffff7fffffff})

23:36:04 executing program 3:
r0 = socket$inet6(0xa, 0x21000000000002, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000180)=0xe8)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2, @remote, @mcast1, 0x7, 0x4, 0x0, 0x100, 0x7f, 0x4080010, r1})
fadvise64(r0, 0x5a, 0x6, 0x7)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r2 = socket$inet(0x2, 0x2, 0x0)
getsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00006ed000), &(0x7f0000000000)=0x4)

23:36:04 executing program 2:
r0 = socket$inet(0x2, 0x80000, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
fsetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)='vboxnet0nodev^]cgroup\x00', 0x16, 0x1)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10)
r1 = socket(0x15, 0x3, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000300)=0x1e, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip6tnl0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="b1568d173503f1f9e52733e5bca18d6be9901587eddf193c7d0ed04d26375b932ee5cfd90636e9a1badf23bda059356f86e695b1bc2a573e783361c5869135c1bf9ae6f75b08f2b839e7a21f9ac1caf3a27db8bee280572e528dc33eb908649b6f1a1f16b9e77efd7cd64583aafd105ed6565b17925c9f76b6398ddd1875c53444be89849f9b7932bcd6f1b3a3f005483a2ea3c42c1168f059c2ce38632e2d14b07209290f2d25c30a79e9ee5666123ebd7642d7ff80220240a222ceb1035e390123156776b6a2afe210c1e0c7fa052ba79a9d1bd78c23a423e46b22566458cfeb6d526919b9f661480366670965bd", 0xef, 0x40, 0x0, 0x0)

23:36:04 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000009b00)=[{{&(0x7f0000003f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000043c0)=[{&(0x7f00000041c0)=""/182, 0xb6}], 0x1, &(0x7f0000004440)=""/58, 0x3a}}], 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'bridge0\x00', 0xa4})
sendmmsg(r0, &(0x7f00000092c0), 0x22, 0x0)

[  422.743974] binder_alloc: binder_alloc_mmap_handler: 28353 20010000-20013000 already mapped failed -16
[  422.784269] binder: BINDER_SET_CONTEXT_MGR already set
[  422.789583] binder: 28353:28372 ioctl 40046207 0 returned -16
[  422.811667] binder: 28353:28424 unknown command 1078460447
[  422.828055] binder: 28353:28424 ioctl c0306201 20000180 returned -22
[  422.846220] binder: 28353:28372 ERROR: BC_REGISTER_LOOPER called without request
[  422.853900] binder: 28353:28424 got reply transaction with no transaction stack
[  422.874129] binder: 28353:28424 transaction failed 29201/-71, size 80-8 line 2922
23:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000280), &(0x7f0000000300)=0x40)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000840)={<r4=>0x0}, &(0x7f0000000880)=0xc)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000003c0))
r5 = fcntl$getown(r0, 0x9)
openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x100, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000008c0)={0x0, <r6=>0x0}, &(0x7f0000000900)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000940)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @remote}}}}, &(0x7f0000000a40)=0xe8)
r8 = gettid()
r9 = fcntl$getown(r1, 0x9)
fcntl$getownex(r2, 0x10, &(0x7f0000000a80)={0x0, <r10=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000bc0)=0xe8)
sendmsg$nl_route(r2, &(0x7f00000024c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000002480)={&(0x7f0000000c00)=@setlink={0x186c, 0x13, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x8000, 0x10001}, [@IFLA_VF_PORTS={0x17d8, 0x18, [{0x28, 0x1, [@typed={0x8, 0x75, @ipv4=@local}, @typed={0xc, 0x33, @u64}, @typed={0x8, 0x33, @fd=r1}, @typed={0x8, 0x44, @str='*\x00'}]}, {0x2fc, 0x1, [@nested={0xf0, 0x91, [@typed={0x8, 0x72, @fd=r2}, @generic="6eee75306de02730aa4f9e4637985c13bb4e843f1bdf9e1410dd4ae99640985f221afb1a3a77156d70084290554e87b114cb0f3abea4dc0b1937f28963d09cc410e5b5f28d9a6f6e1c0bc71baf533b6f1ba01d96c3f721b19ca9ec1ed1d22299a98af7c04de16a9e7ac3bddb3603cbd10fbea9d19c630f1117046244be7c5be5b0b2e1df29b4d3aa8ba8c20e5e466e89902ec25b932787445b70bcbb63879446aac2c953b3eb0a87", @typed={0x8, 0x63, @pid=r5}, @typed={0x28, 0x42, @binary="b7ece74053ad96b2b05ee57e4558a3e5dce2c6abe9e3666389f3dc7cc1065f02d7033e76"}, @typed={0x8, 0x54, @uid=r6}, @typed={0x4, 0x7}]}, @nested={0x17c, 0x55, [@generic="00d4b12dec13ae113dc2c77e0c406675822fc0f5d1fa26d44bac67a399f10144802f26c0d20e130c334e304d0160c297a406a7ee2ac41ad90de6d021d290f4eba4f5798d202f5de070fcc9389e95f537c0d3b29a31f0cb518b648ebce29ba8495fc9ceedd78644444d4056f81aa39b25296fad185adab032af573466e72aa7baab748112932778cd68e687ac33a3ec315c355b8b21b5ce", @generic="ebdd89875196b62c9cccb5ae3c8b6b6c62e0b0fa257ccbe25fb5651d5cb6ea226556c476bb2f5ee59713", @generic="02ffb179c677f643250c0397426a17ca554d929314bc03f247d17b262850b7", @generic="1a41dcafa45a7552ee12a679f2081e67ecfa87f47943ba90980ab12ef27aeef1e4a2efc9ce4b55cbacfc272738759a9b6aebdf62721eb0531d2e44395d5fe48aa645915a612d4968e4ff3ebad5f841d9670a479961bc689dd1d153b5dee1bbad4f8f3f1047c161cbcc2623dcbf759479cd0f848623d510165fe7c3777cd9629123c3b1d7deb6e2c075363ef519169a93d4f16bc429dd5a"]}, @generic="c64f4d6313034c1b444c9d1c34541be39e1e5b422821a456a24d513aaf287ee7f7350dd3a055d0c3946780479e7821cb178f7289738f373e729f59ccc2dfdbf477bac8611b3345071508a656e5e3328f23bcbba87e496e3b09f53952d74d9447f2b326d32ddce2d93ed68657a532db038b342d6b49b03356176591", @typed={0x8, 0x27, @uid=r7}, @typed={0x8, 0x70, @pid=r8}]}, {0x12c0, 0x1, [@generic="9dafadde63754266cfdc51a5f07a60f566214c727387312685cf0006771c1936e12ae824d25134924320dfc1367cf912378ad0b357404c1bc5ed98573fd655b9bd9d51250ef9c65da2d8223611e736094c09254ae8c322f2cb86c0826170f4a68b692671f9d36deed54188c02acea804cd7b3bb325ebdcf4384288fb82db1818e8005e5e04e38ca6300fcaa768460ea29dd3b7d7b3e52f58163b7ff5318cf34e516bfa117267abee40af6002596544224a34891065d01b6eade16baf0ca91f69a881a98157c8bf62c5271d0ed2cfa8b93971b9d6b5121407118a0d2c4bf83590be264108e4349311048ed4fbdf3e8bd1f77fc8a5dcc59dd9df8c92c02bcfd4c2fdd5e2e991218ca3b0d9094671dabbe3c19a5445f8a452f10a2a51a4930320dae86e40b35e6d0e25a0c889909e82cd48295c18da097541fd608e75aa6e32a3204bad246c1d4320ae8ee39eec756e1b8e161c82dbcb548a21bfcf228a1b1126f0de454affb2f30bbb5488ee5d5432c3aa856d25d4c188127d3597a3538c50f184c34310b480347063180d539e5a6a9e9095c262f082c8946384e6f18b1d9e8503bcb46e4baca451f382f49548fcad53439cb57efd5d8eacf88b5ce3b51d3d03637d8d5dabb5bb7368c0e790942df4a155767b21fe511b5d26e30cc6962f9ee6372bc3e4490df485b361dd4ded07406ff0582041744dec4a9bb75a73b82d6f61478da0fe111417cf92133163df5573c288e8d102bfcb6a5f632a087e3c227466ef112de304784fbbb8836b93e924bea5ea65063010f0aafbe1cb3dc3300878e02d0dcf8664b06b5d896a15b6ad3dc518aeaee7acb2e404f0067003d9527f0879b83dc4fbe5510ebb5afd117512057b078c122ab7be87e31a918b548e66796d68a5d46e91f825f61b569e1459d9d08663290f94f668f5cc503551b0659374b0235b2ee6e871ea4826373ca71d037253a8d20de2fe570fcf971c7a4276f7b9f053deadc22678d1cb7c8239141d0e83c641d0dfb940829691b0abab48e2136f460d8955d5d926e1dec28d36adb32fdc3d40830be39b982e3d4d9beee0d37f79fb8ec15b5332b4dcf9da8a4b175dcd1d7291ac7c16b063e12f867c737ee1708875dc6a0991525a888bcd258b4716510bca2da061cb0399178c56cd439097dfe25a4e6311a70e154584bbff6fa039a26e944ad8acd575622a4d453d15fcd5e27d1287168391d03dd470a8a1df7a4a4a2d3aec3b529209f38aa3ffc6854fb509162655effb52de152c9609ba5914e42de947b59201ed489b6d67f47ce413bfc70c74a7aed6340014ab157bdf19ef9dda01903e3a78b0c2b4c5756ae5065e3238149943861758e1b04a1b8beba468a0cb297c9ad94bd297e701e449b219dd67aa5e754a0513ef6ec1b707f5c8b8fee73d7e0dd6a24bb8c65cee764246742839d1ce6241fd38792e473c8031cf8f8428cf2ccd3f2a76da51904388f166e72fcc7b0a21d60f39dac2651f5498466304120f6429ca53e52b90a476e5b2b13152de45eff20259644514118d9d3fb7ab907e9f1f524aa784531c5b018f20735ae2586711d0dbd778aae78979f9e0596f79dc2b563f9a70e786509ca834d4d2aa5eb66cbf932afe6836968142465b82311939d9c7bb11bbf52c63cfc02777d5f71d44eda5ca75c3628751f807cbf05e919bc1fd8d2523559582e7e4189c1cece2f2421ce27b487cfe739613c281cf68f67c7138b41b2556b1ce16689464ac164032cf1a3992216f47ddcabddd1c3ae7c672b63830c19e5a990a57638e073c46791d925ceda26804893429b0a414ad7eee912bab2476344edf36d03d17d49cab12067be1c080abeced9d52235cbf0a2b7b043d50414cf2b5c87a5d59f7cfff438e4617815571b31f28bf5171823873e85fe581ba8330760e3dffdd434eda382e977f0ff89bae13a6fbb707f855dc1a6b8bb7af76d9a37c58ee290ec8b8007554d750e965a033a9a40239e1d92776595f1ac0b0c237ec338bc96ccfae0e99139e13c8f81b33161f22620341a8537c26e67530bfb381efa22199d7ea7c464c08065b677e3e0f143ba7e766c0bc55c13efb672d3c6f57ceb69b0e076621b7c14755b7ab85875e0a0b21a990e342fe9e1f062a2560b861ef25235c8f783824d1981ffb8639c3acd76f748e9a1e03790ae7563617f793ec2cdce0b44be8ef250ffab4dd20ca404468fd4ba7c1e71b59a2c04014b2d2a45e5b59f7bf85855307a5712408e2ae9bc58c5106a4373c1460ec98b7427583958e2b13ffd7ef1b40e8c47ee71198b64f1dc42dae886b471ac37faac8b2c04f3cc5dad98a804c474a804643019b5833ba97afb3b632b08f2d1c5046d958ea5f4e8e6a868fcf92de57bed9288bb1f9069fb43a4697d1de7d5c4b4e50bf2f9168186d7ebda3767e5f433773ef80c9ce97d1835dc71bcc8161647627a577803792d57da985222d380269f02a94e85a1d9afb0381cd1fd1a589a9671344786ef0854c4270c5004d0c5fa469767316236f130683d6b387abae887f04153029bbbd83c7e8cf2d05f7767f37a096f6c9487933d90f34a8db534b5eaa70f577f0304e587e5c6abeae1abd2a7b8005b80073e3cc0b3780cba1d58a426270418d3896bf1adf5d63e7eb10fc9aca1c9d3312d5d4d27138f72f9c33019fc05595436d793c44dbc551130ce459a95eef5f2abcce2ea20fbd70c7c628d26fa40a8b71be06d8a874068a647c308f0a86fd1c94d5206f6cb4bf4289af4f2104608f32c2877132b38acf2b498497af22cc37837ce83e3e8903c68124b85b7e76b41f51df7a387944717400b6b645db491a64eb7b7dc8699c3208274d875c0f112adf4a89afa80ae0d1e8370d978ba05398427bb25741660bb863619327048fb4b320905de847e32395f625f84c5f952bcecc0c1b8b9039fb92dc2476146bb832d5f8de925ef785e98ba8c6d0b7e3ba6c166cb74a2e9bb5d5b789678c683ffe0029199f0be326d39c2efa5ca327304ec26734086189bed083c7b6cdd875852f0014d403f36a29cc68be9d14d7e4e81bf0c5cf4f49208d437d8944c29dbacecb740300afa03f6fa0d3006b1768864cad26774a7baf7aa1b5746d01579009b36da46a7396d4d64ba305fbe0d341619f6b62ec250e19d3202882d14ffdd9d1efdecae54ce14c2fa98d7b4fdd9f0ca405a3c8f7fb62537ad26b33dc2128b6e967d408666aaac5d36828b82b9c8fb61d1a3a66cf0407d53ba8afaa950c2fcedf7509fc9ee6933ae1e9a97f7937200509a663d2ec270f1126b6dfb4a7f2bd41c5cdc0f9a1f572849bc3220e793c6146a44c6e2122ff8dc6ec7c9181ec0d75e5a15d6d64d429b030b91e200218274e67d9749fa26a9f8cb62f5339da1f05ade34ed6b8cec67c64321c4642976b96e4d2cfec0466a1aacbcd3ce35da677f346f02b3047c561bb473f796fe6c2d9f30271b778f847f408b9b013223cac0a8136b83d118e1096b9d8b44639bc94d1d1e842a1064e37c107a7a8a9ab1d153df20f7074633f2cb882697b921064034722620abe2a993cb945769e1a5d4b9d38bfa56635777447d3836d2159537be0396686a4e779715b0682ff80e542d4dc776d263f063f1e9bf501c68f466e5c3979c055b3658e97d63322627c792073ad45fb5bd961871c18f23e068a499ffb5129a7a97386a017da5e8d70f04d055f5517a08ae9a2b35d99016d893c6ff65c636a231a0c7142b005a74fdb0771202ad9657aba766c692852c2fbfc75fd1276ced045fdfa42e401879ad398f0c35642d573900df93e871eda5f7f3c29c4c1cce84f3dc3fdd3e69c5d31190675db2f459d4b417f6bb0b579216194149dd6e7bf6ba667245ee88bd4f5449f1a617317bc834b9ea95ec7d007620cc4fb11d27513dbb252caf4588f5404fc07cb8909d68ded470abf1dd88a9f9c3d69e6b60dbb314b094f282bb3e29dec914f33e7c20ec7e8e190f79057541ddbcf9c57d6cb8948cfbc4baf88de71a20bc0041b9aaf6ef02d88779927a344597d22156e9225079bc28ae50800de045014145491815db4d2d872515e92da5ba97e450952445875bd8bf1a657a803dc1a2d9d0942c5e41ea1f16f99f2f9827b3f4feb3a8abdf01b9fa4108680c31cd03b1479d20c232cddc61dc18d86c2c803dda27d0d5834b3e665bb12d5d6b246ada841d9ec4629a55643b8f5c523655a404a7086e149bf94fc325dc499a959df4f58e4c0ed4a43f00fc1df70544a7334a0599b72a9d136a8b5af281a2f71784acc36a80dd89238f42f1c8bcef842f5249f55b5c0434745f8ef9867e14a7b7796d0d194a5f719fad94a673ccd3f07653d41f233a569037a217ea398b9c9d29896a58cdee376450081e89e86c1ccbb23eb1d9d5a8d297faeab1372384feb8158513d8112c399b389f070a5d3812f4c3d77534c23978176ebd4d8950c3ef9f5460c4bb6af00448938872c5235f918e65de82278102f6498893340581ab1c54d58881a5173724eb603dd64c8e5a06c5fe24b38e82d52805d55c3272ef0c56a010d63e0dd3c2fedfda63a123b7c5c9cbe7965a446aaae6328b52002b9addc10d295a70b45f1c062e9badfbfd697d87f0f15c308a21adfbd63485567de91246e4f8d573628f46f0a99958dea8b23b82829b00068a696274a0156fac1186bc892f616dcc1fd87cec6b922753e8de4a961b52c2c10f23228b994f0e298b50ea3f19ef0f1113737d2bfcb7691de01ee3763289a689e0798a3df88177594c450d98cc114b33f22996159b388843801b9430f0859e2f1dabe7baa4fc14521bcae23aa5bff20143fdd73cb6938fa9bc0769c36894c9a2a27854b581a54c1cffb0f80a8a0c4cf8a2d38144bfe48f8246ee0914becf09ce1987388e0e0dc0a782653caa96d3de69b4dfc82e401ba0a9600a14123fddc680c5e22458232551bf89e2d23b445c25680d2e3b3f0280dd4c1f32947cf095410e65a312c4a1fdad57e64e61e59432be5ff1d1cedece08f251c849f1fab31189135d8a501c73e4c7bf2a69df88fda6f5da9aa80826d73a7ad3d7a0d30ecf751562631846917854e1fa79b527d52ba957c84f4b22072fd8400a4782563ee65d2904bacaae0a4f6732c41071c1ea8db72679f46157035177d47921f92491b81e6b409f5e2dda99fac781da0e204bf869f2ab48580b695a4280bad5d89ee2b0f99411347e44776458bb69d347a406fce20f227090bfc91589c3d6056bddb3ccc8be26ce5bb6294f9a95b6a5dbdcc13a43e2e1df35c0d3c6ad04cb04ca88317e6e49132bfe57ef8d0d6929fa23f9b376a0a281ebb5f67cebab9816d2d974509112de4ce9001474c7a5c4e2cdca5ee9427926f625acd7fe34dfc3e9e6305537d3b8e64ce2d709c4b41a3b7540c4a0921b994f86e710892fe6e785fb76e033ab7084014a45358e3ab2393aa66ea561d02819f5d9c18f2e652d2650df53f74d18d687e9d1e9fd47084ba53ecde359c94b27cbc08b83f1bb47a39835eb764c0444759dcdb0e356e5f728c113e5ffde82440325da7b190c3a896cc14ea05014a43baebb3af1ce7ad394a8586c1c1bc017b8c1b01aa794a1aa312edd66ab88c6cdd680a37befabfacea84a8ce3101b12f499d5080cb05064714161d7ee25c24a0cdd56d862f08dc6f065cfdb0f2085e7052df1707f8d01032b0e831ca7153163e75258405344fa407b782227c887d7cae3fe5cee0b81206a44c46947280bc0d6ef1db85c47307d6e2ad5fbf587564f12eaec0bb222ab2cbaf549e054c39b7f64e6e07fd21a0", @typed={0x8, 0x59, @pid=r9}, @nested={0x274, 0x8, [@generic="b8cd443c062da8e372dc5dcd15b94d7dba3a8dc05014e070707d5548c5cb0df1e15d41e3f3c7b57505555d501eb7b785858eb8dbd21a394fb86c2dd51c918984d935fadb2ee4ebbc86577f9cfe4f6837a4cf071f37cf852a39e71fefe05eab4c57232bbe9a86191872d4aa15b9da71d6050f30e20202f0605094fa4bcb830489c0e7e3f0b4c2", @typed={0x14, 0x23, @str='/dev/binder#\x00'}, @generic="05ab85095d50924c9b6278591a40b457a9f573e868a6ce56ae4346762c3d5ba0990f1e60dcdf3b58ea0c71b14d9dcd693946f0f0dddd79d9819519b3e16763e31e18300b08c20d744695a54c54ea9749a8247598ecdbf69186d81125405cb6f984447ed5f79e952a9cc8ad5d2c50e7d053c368072330437ec64db9c6f4e0854d278a026b4647772fdb09a41e1baa2ad7d802f4", @typed={0x44, 0x1f, @binary="516c266de4089014595ecb5bd9dd7264fe65c4a03a0f8a2f57bbef259ccb1b4cae93f1e0fbfa290d047ced86d7783f8cd98bbb6360d67bd26b9c67648c73d8a5"}, @typed={0xc, 0x4b, @u64=0x4}, @generic="a36f14404f5d39b93b7d292ab51a849079bcc8ad9b9dcd82e34b0624b42161c2dd8b3146ca19510dd8b66323d3645a586a96ccdda0f412abbeb87a0570ecea462542dd4f618d0e84f63a8c3cb653e5e27f56c4d34d017e47aeee1c48bcbed76a401cc8221467325f545d9c9e1c65", @typed={0xc, 0x5a, @u64=0x20}, @typed={0x14, 0x8a, @str='/dev/binder#\x00'}, @typed={0xc, 0x3f, @u64=0x3f}, @generic="4c112ccdcbc333ace7e378d0387625f0962bcfd1e75a7f76de4f2e832bcb298e7423fa1a0d1974b594dbdd245276bf108eb71eb2e3e0267e1df5ba62306c35b186e942a7f3e107227a567764bd59c83ec752f9a7c1643990a0"]}, @generic="e1b61e409d788e49c2cd57cc6cad93e927d98337aa251b3b0ec54f41bda963f9bc8b0ed5cd06ad03eb1460bf", @nested={0x14, 0x74, [@typed={0x8, 0x73, @ipv4=@local}, @typed={0x8, 0xb, @pid=r10}]}]}, {0x88, 0x1, [@generic="7f1ccd4827323ea0f588", @generic="3f16fd9e37d59642eb60568c2bdd9b228657fc4551dc15c5262572a7b4cdc1ccb7b6ded1bdc73da5c2588dba59c8affd800983d085fd7d9a089de68ecd36e1811cf7043d9d2e7a07d913c63d0a20cb7200f39431afe14bdcf3ec3bddadbcba95e380b9683003a4eb763b0a7abc5102a09a6457d0069eb9336a"]}, {0x168, 0x1, [@typed={0xc, 0x3d, @u64=0x200}, @generic="6a4dde222c40099225e69dbedbed34d2e2e56ea4d2993d3c846cee78e8682d209a61f4f233b30ea938931a78f1b7eedc967580f419812a4da782499d0946bb6591bc2c4acf07610e534f88802e1b2a6ffc203a1541c4b65b856975bd552d0bac8a9fc63ceecf351011d58161828e9195fa4faa5d7deebf3c5c68829bdaaec3d679a4", @generic="2fb1925fef86fe240e0e29a2473b795e082f68470bf03fc4b48c8425f08a1b392a285d0a83634c9f6518812a02f0f66e16ab3f5aea692af413c3716ebed34be9201d843eda26154584b80fe7bbbdb26b9beffe13ff08536d3d011a5634ffe5d7b062dd93d2623e24e6745bdfe60f49bb3e81467a3bbe48c88f8c7e32255c1865ceca", @nested={0x48, 0x3c, [@typed={0x8, 0x96, @ipv4}, @generic="01ddcbfdb1b655fe52101b8bb2f0194311f7a244947c010ca769a38415b86cefb1c87c93b52864d53fff474361e479093ef8424fd3", @typed={0x4, 0x75}]}, @typed={0xc, 0x8c, @u64=0xee12}]}]}, @IFLA_VFINFO_LIST={0x6c, 0x16, [{0x18, 0x1, [@typed={0x14, 0x94, @str='/dev/binder#\x00'}]}, {0x50, 0x1, [@typed={0x34, 0x27, @binary="7de6c0623e27e88490dc27a8df45e2ee0f3ae323791b8f8f41dce00fc0a3df02dd79a38ba37805a2c4e6d56b81ab52"}, @nested={0x18, 0x92, [@generic="70123b5fd371998b5fb34d63", @typed={0x8, 0x83, @uid=r11}]}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1000}]}, 0x186c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="126348400000000000000000000000000037f1c37e00000000000000000000800000000000000000000000000800000000000000962554aaa67a80872b4c59c7abcae361d89482f1bb73ae7d6b1f8601f6fb92c6bc6ad69514973ca8eb4d07ab609d0d589172e9023986687824c1180a2ae56c5d4d8b273dc1638f2df6906034694ec202898f320ec93cd7309a9a95b7b6d8c203f87ebea195270a190c1c3c18eed436d81db06029e25cb13c0ba43a4d1ad6ff2f5d6b85e24e164d087277e7a7f1425fc264519546fe8e6117f65084593b885950e1632eee8e5056677e5dc50156d98a5fd278bc3bf335650e7724dde1a5b53ea033511650f79d558b0238ff82af6fc073cddfd8f7c24e4cc222d1b7160b33b0", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000000000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627300000000", @ANYRES64=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000340))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  422.897635] binder: undelivered TRANSACTION_ERROR: 29201
[  422.916392] binder: undelivered TRANSACTION_ERROR: 29201
[  423.000490] binder: 28431:28433 ERROR: BC_REGISTER_LOOPER called without request
[  423.027125] binder_alloc: 28431: binder_alloc_buf size 9056303151736591584 failed, no address space
[  423.056122] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384)
[  423.080015] binder: 28431:28433 transaction failed 29201/-28, size 0-8 line 3137
[  423.111287] binder: send failed reply for transaction 511 to 28431:28433
[  423.138603] binder_alloc: binder_alloc_mmap_handler: 28431 20010000-20013000 already mapped failed -16
[  423.153190] binder: BINDER_SET_CONTEXT_MGR already set
23:36:05 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x0, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:05 executing program 7:
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000140)="02")
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sw_sync\x00', 0x4000, 0x0)
ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040))
mlockall(0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4)

23:36:05 executing program 2:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x801)
write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7}, 0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/137, 0x89}], 0x1, 0x0)

[  423.159255] binder: 28431:28438 ioctl 40046207 0 returned -16
[  423.165715] binder_alloc: 28431: binder_alloc_buf, no vma
[  423.171423] binder: 28431:28449 transaction failed 29189/-3, size 0-0 line 3137
[  423.180092] binder: 28431:28433 ERROR: BC_REGISTER_LOOPER called without request
[  423.188502] binder: 28431:28438 got reply transaction with no transaction stack
[  423.196897] binder: 28431:28438 transaction failed 29201/-71, size 0-8 line 2922
[  423.206035] binder: undelivered TRANSACTION_ERROR: 29201
23:36:05 executing program 3:
r0 = socket$inet(0x2, 0x2, 0x4008001)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000001180)={0x0, 'bcsh0\x00', 0x4}, 0x18)
recvfrom$inet(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40000003, &(0x7f0000001200)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00003b9ffc)=0x40000000000800, 0x160)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4)
sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000140)=0x2, 0x4)
recvfrom$inet(r0, &(0x7f0000001240)=""/248, 0xffffffffffffff1a, 0x2, 0x0, 0x5176640cd6000a4)

[  423.223052] binder: undelivered TRANSACTION_ERROR: 29190
23:36:05 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x800, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00')
preadv(r2, &(0x7f0000000480), 0x2ff, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8000, 0x3f, 0x5, 0x441, 0x6})

23:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000020, 0x8010, r0, 0xfffffffffffefffc)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a7d7662f"], 0x1, 0x0, &(0x7f0000000040)="f0"})
r3 = dup2(r0, r1)
readahead(r3, 0x1000, 0xa12)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000300)={0x9, 0x5, 0x9, 'queue1\x00', 0x6})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={<r4=>0x0, @broadcast, @rand_addr}, &(0x7f0000000440)=0xc)
sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x32100002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@mpls_getroute={0x38, 0x1a, 0x408, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x94, 0x14, 0xea, 0xff, 0x6, 0xfd, 0x5, 0x4542151bb065612a}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_DST={0xc, 0x1, [{0x101, 0x6, 0x3f, 0x9}, {0x7fff, 0x0, 0x73, 0x6}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xe80}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008041}, 0x90)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:05 executing program 7:
r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0)
write(r0, &(0x7f0000000140)="075b5ed7cbd264c14adedc8efe101b118c86e2a539503553a08c9b2c921fefe168ce31dbb1c628ebf24799ac51322119b10afa23ecf4910976293b148c39efa02439cdc87fedc70800feaf8057adedad733b17d0546b2af846fadd9ec652620000000000000000000000", 0x6a)
sendfile(r0, r0, &(0x7f0000001000), 0x10002)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
ptrace(0x1f163b2602878fad, r1)
nanosleep(&(0x7f0000000380), &(0x7f0000000080))
openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x105200, 0x0)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', r2})

[  423.267293] binder: undelivered TRANSACTION_ERROR: 29189
[  423.289783] binder: undelivered TRANSACTION_COMPLETE
[  423.303346] binder: undelivered TRANSACTION_ERROR: 29201
[  423.313256] binder_alloc: 28468: binder_alloc_buf, no vma
[  423.331197] binder: 28468:28469 transaction failed 29189/-3, size 0-0 line 3137
[  423.373547] binder: 28468:28480 unknown command 795269031
[  423.392642] binder: 28468:28480 ioctl c0306201 20000140 returned -22
[  423.405852] binder: 28468:28469 ioctl 408c5333 20000300 returned -22
23:36:05 executing program 5:
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7fff, 0x4)
r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x2, 0x78b80)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4d4bc4adf02545db, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r1], 0xfed3)

23:36:05 executing program 2:
r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3)
perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x1e0, 0x9d, 0x472d, 0x40, 0x0, 0x20000000000000, 0x58, 0x6, 0x5, 0xe3, 0x1004, 0x3, 0x9, 0x5, 0x4222, 0x5, 0x4, 0x3, 0x575, 0x2, 0x4, 0x8, 0x4, 0x3, 0x1, 0x3f, 0x9, 0x6, 0xb1, 0x8001, 0xffffffffffff9034, 0x5, 0x0, 0x1f, 0x80000001, 0x9, 0x0, 0xa82, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x900, 0x1ff, 0x9580, 0x2, 0x9, 0x5, 0x4}, r0, 0x8, r0, 0x0)
write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0'], 0xa)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140))

[  423.418830] binder: 28468:28480 unknown command 795269031
[  423.420508] binder: 28468:28485 ioctl 408c5333 20000300 returned -22
[  423.422524] binder: 28468:28484 got reply transaction with no transaction stack
[  423.422532] binder: 28468:28484 transaction failed 29201/-71, size 80-8 line 2922
[  423.446735] binder: undelivered TRANSACTION_ERROR: 29189
[  423.450925] binder: 28468:28480 ioctl c0306201 20000140 returned -22
[  423.467768] binder: undelivered TRANSACTION_ERROR: 29201
23:36:05 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x1, 0xfffffffffffffffb, 0xffffffffffffff5b, 0x7, 0x7, 0x22b7})
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:05 executing program 3:
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="18000500000000000000000000000000e309"], 0x12}}], 0x1, 0x0)
sigaltstack(&(0x7f0000003000/0x1000)=nil, &(0x7f00000000c0))
sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000008ff8))

23:36:05 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xfffffffffffffffd)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x1000000000000a, 0x80000000001, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x28, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}}, 0x0)

23:36:05 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)

23:36:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=<r3=>0x0)
ioprio_set$pid(0xc5f4d64c1319de2e, r3, 0x7)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:05 executing program 2:
setrlimit(0x7, &(0x7f0000000000)={0xfffffffffffffffd})
timerfd_create(0x0, 0x0)

23:36:05 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x0, 0x0, @remote}, {}, 0x0, [0x4]}, 0x5c)
setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xffffffffffffec0c, @ipv4={[], [], @broadcast}, 0xffffffffffff3cfa}, {0xa, 0x4e23, 0xc39, @empty, 0x1000}, 0xffff, [0x400, 0x2, 0xcf, 0xd5, 0x3, 0x2c62, 0xffffffffffffffff, 0x2]}, 0x5c)

[  423.524594] binder: 28498:28501 ERROR: BC_REGISTER_LOOPER called without request
[  423.559014] binder_alloc: binder_alloc_mmap_handler: 28498 20010000-20013000 already mapped failed -16
[  423.581069] binder: BINDER_SET_CONTEXT_MGR already set
[  423.586730] binder: 28498:28501 ioctl 40046207 0 returned -16
[  423.599218] binder_alloc: 28498: binder_alloc_buf, no vma
[  423.606814] binder: 28498:28519 ERROR: BC_REGISTER_LOOPER called without request
[  423.615715] binder: 28498:28513 transaction failed 29189/-3, size 0-0 line 3137
[  423.639404] binder: 28498:28501 got reply transaction with no transaction stack
[  423.647626] binder: unexpected work type, 4, not freed
[  423.651278] binder: 28498:28501 transaction failed 29201/-71, size 80-8 line 2922
[  423.662480] binder: undelivered TRANSACTION_COMPLETE
[  423.668841] binder: undelivered TRANSACTION_ERROR: 29189
[  423.674470] binder: undelivered TRANSACTION_ERROR: 29201
[  423.679964] binder: undelivered TRANSACTION_COMPLETE
[  423.686065] binder: undelivered transaction 521, process died.
23:36:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x0, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:06 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000340)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655cd5e31c6022eea8a5ee852aff5243df4b361e")
mount(&(0x7f0000000580)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f00000005c0))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000000c0)='mslos\x00', 0x5010, &(0x7f00000e7000))
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x80000002)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140))

23:36:06 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="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")
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_NUM_WAITING(r0, 0x40086610, &(0x7f0000000000))
r1 = geteuid()
fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x148, 0xfffffffffffffff5, 0x2, [{{0x4, 0x2, 0x9, 0x8, 0x5, 0x6, {0x4, 0x0, 0x7, 0xff, 0xc1, 0x8000, 0x100000000, 0x8, 0x0, 0x9, 0xfffffffffffffffc, r1, r2, 0x5, 0xfffffffffffffffc}}, {0x2, 0x0, 0x0, 0x2}}, {{0x6, 0x1, 0x7, 0x5, 0x2, 0xb41, {0x6, 0xffffffff80000000, 0x7aadfc4d, 0x7, 0x7, 0x9, 0x5, 0x9, 0x1, 0x0, 0xfffffffffffffff8, r3, r4, 0xc999, 0x165b}}, {0x0, 0x1, 0x5, 0x40, "0365746830"}}]}, 0x148)

23:36:06 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80800)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="230000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)

23:36:06 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/26, &(0x7f0000000040)=0x1a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @rand_addr}, 0x1696a582, 0x10000000000, 0x4000000000, 0x100000000000}, 0x20)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0)
write$P9_RWSTAT(r1, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2, 0x0)
ioctl$RTC_UIE_ON(r2, 0x7003)
ioctl$FICLONE(r0, 0x40049409, r0)

23:36:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x5c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @decrefs={0x40046307, 0x1}, @exit_looper, @acquire_done={0x40106309, r2, 0x4}, @dead_binder_done={0x40086310, 0x3}, @request_death={0x400c630e, 0x1, 0x2}, @register_looper, @increfs={0x40046304, 0x4}, @increfs={0x40046304, 0x4}], 0x13, 0x0, &(0x7f00000001c0)="6372150b9dc58c13885de4f6266c88a1f8c71a"})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:06 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r1=>0x0})
fcntl$notify(r0, 0x402, 0x80000000)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xf3a7, 0x75, 0x800, 0x56, 0x3, 0x9, 0x3ff}, 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000000)=@bridge_newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @remote}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}]}, 0x30}}, 0x0)

23:36:06 executing program 6:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x80e, 0x1, 0x5, 0x7})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480))
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000500)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f00000004c0)='net/unix\x00')
fgetxattr(r2, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x1, 0x4)

23:36:06 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x1, 0xfffffffffffffffb, 0xffffffffffffff5b, 0x7, 0x7, 0x22b7})
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:06 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x37, &(0x7f0000000000)={@loopback={0xff0f000000000000}}, 0x20)
socket$inet6(0xa, 0x1000000000002, 0x0)
dup3(r1, r2, 0x0)

[  424.073901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'.
[  424.085358] binder: 28537:28541 ERROR: BC_REGISTER_LOOPER called without request
[  424.089493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'.
23:36:06 executing program 3:
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x8043, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
rename(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file1\x00')

[  424.118568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket
23:36:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
socketpair(0x1, 0x5, 0xb0c, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = getpgrp(0xffffffffffffffff)
process_vm_readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000240)=""/96, 0x60}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/26, 0x1a}], 0x5, &(0x7f0000000500)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1, 0x0)
accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_getaffinity(r2, 0x8, &(0x7f0000000540))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000800)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000000580)}, &(0x7f0000000600)="087cdd706956", &(0x7f00000006c0)=""/211, 0x0, 0x10024, 0x0, &(0x7f00000007c0)})

[  424.148212] binder: 28537:28552 got reply transaction with no transaction stack
[  424.165913] binder: 28537:28552 transaction failed 29201/-71, size 80-8 line 2922
[  424.178089] binder: 28537:28541 BC_DEAD_BINDER_DONE 0000000000000000 not found
23:36:06 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
getrandom(&(0x7f0000000000)=""/202, 0xca, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2, 0x15, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x0)
mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000)
r1 = dup3(r0, r0, 0x80000)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)=0x1)

23:36:06 executing program 1:
r0 = socket$inet6(0xa, 0x80001, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="006ffc2f07d82c99240970")
r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})
dup3(r0, r1, 0x80000)
syncfs(r1)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x80e85411)

[  424.191306] binder: 28537:28541 DecRefs 0 refcount change on invalid ref 1 ret -22
[  424.208752] binder: 28537:28541 BC_ACQUIRE_DONE u0000000020ffa000 no match
[  424.229243] binder: 28537:28541 BC_DEAD_BINDER_DONE 0000000000000003 not found
[  424.241558] binder: 28537:28541 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
23:36:06 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000280)}, &(0x7f00000003c0)="be717cb4040e931b06564e9873162a3def207b7ad26515ca70e2c8c208d2535116", &(0x7f00000002c0)=""/81, 0x0, 0x0, 0x0, &(0x7f0000000340)})
lseek(r0, 0x0, 0x3)

[  424.256347] binder: 28537:28541 ERROR: BC_REGISTER_LOOPER called without request
[  424.270913] binder: 28537:28541 IncRefs 0 refcount change on invalid ref 4 ret -22
[  424.278504] sd 0:0:1:0: [sg0] tag#888 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  424.278519] sd 0:0:1:0: [sg0] tag#888 CDB: Volume set (in), Read cd
[  424.278533] sd 0:0:1:0: [sg0] tag#888 CDB[00]: be 71 7c b4 04 0e 93 1b 06 56 4e 98 73 16 2a 3d
23:36:06 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000020000100000000000000040040001410110076657468300000000000000000000000"], 0x34}}, 0x0)
getpeername(r0, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0xffffffa5)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4)
getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f00000001c0)=0x1e)

[  424.278546] sd 0:0:1:0: [sg0] tag#888 CDB[10]: ef 20 7b 7a d2 65 15 ca 70 e2 c8 c2 08 d2 53 51
[  424.278555] sd 0:0:1:0: [sg0] tag#888 CDB[20]: 16
[  424.279408] sd 0:0:1:0: [sg0] tag#888 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  424.279419] sd 0:0:1:0: [sg0] tag#888 CDB: Volume set (in), Read cd
[  424.279430] sd 0:0:1:0: [sg0] tag#888 CDB[00]: be 71 7c b4 04 0e 93 1b 06 56 4e 98 73 16 2a 3d
[  424.279441] sd 0:0:1:0: [sg0] tag#888 CDB[10]: ef 20 7b 7a d2 65 15 ca 70 e2 c8 c2 08 d2 53 51
[  424.279450] sd 0:0:1:0: [sg0] tag#888 CDB[20]: 16
[  424.384262] binder: 28537:28541 IncRefs 0 refcount change on invalid ref 4 ret -22
23:36:06 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180), 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:06 executing program 7:
socket$inet(0x2, 0x80807, 0x1000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))

23:36:06 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
read$eventfd(r1, &(0x7f00000000c0), 0x8)
ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070")
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454da, 0x800000)

23:36:06 executing program 3:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x7, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x20}, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x80000001}}]}, 0x110)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000080)='u', 0x1)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0)
ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000040)=""/60)

23:36:06 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000340)="7542b3710b40a566c970ec6b4d75e098ca86650551a23b26236d63dedc05af9dbf074b520fcf80e5b1ce4945da3e8ed74d0f554cf9547a4e1810655cd5e31c6022eea8a5ee852aff5243df4b361e")
mount(&(0x7f0000000580)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f00000005c0))
mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0)
mount(&(0x7f0000000100)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000))
mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000000c0)='mslos\x00', 0x5010, &(0x7f00000e7000))
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
sendfile(r0, r1, &(0x7f0000000000), 0x80000002)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140))

[  424.871183] binder_alloc: binder_alloc_mmap_handler: 28537 20010000-20013000 already mapped failed -16
[  424.899113] binder: BINDER_SET_CONTEXT_MGR already set
[  424.909287] binder: 28537:28606 ERROR: BC_REGISTER_LOOPER called without request
[  424.912266] binder_alloc: 28537: binder_alloc_buf, no vma
[  424.912363] binder: 28537:28604 transaction failed 29189/-3, size 0-0 line 3137
[  424.912447] binder: 28537:28552 ioctl 40046207 0 returned -16
[  424.937751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8243 sclass=netlink_route_socket
[  424.951988] binder: 28537:28552 got reply transaction with no transaction stack
[  424.959764] binder: 28537:28604 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  424.967671] binder: 28537:28552 transaction failed 29201/-71, size 80-8 line 2922
[  424.976385] binder: 28537:28604 DecRefs 0 refcount change on invalid ref 1 ret -22
[  424.985497] binder: release 28537:28541 transaction 527 out, still active
[  424.993563] binder: undelivered TRANSACTION_COMPLETE
[  425.004697] binder: release 28537:28541 transaction 527 in, still active
[  425.011604] binder: 28537:28604 BC_ACQUIRE_DONE u0000000020ffa000 no match
[  425.015924] binder: send failed reply for transaction 527, target dead
[  425.015954] binder: undelivered TRANSACTION_ERROR: 29201
[  425.031432] binder: 28537:28604 BC_DEAD_BINDER_DONE 0000000000000003 not found
[  425.038865] binder: 28537:28604 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  425.045978] binder: 28537:28604 ERROR: BC_REGISTER_LOOPER called without request
[  425.053493] binder: 28537:28604 IncRefs 0 refcount change on invalid ref 4 ret -22
[  425.061215] binder: 28537:28604 IncRefs 0 refcount change on invalid ref 4 ret -22
23:36:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:07 executing program 6:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fgetxattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)=""/12, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200))
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0x0, 0x72b, 0x3b})

23:36:07 executing program 5:
r0 = socket(0x20000000000000a, 0x2, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x800)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x6}]}, 0x10)
getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000000040)=""/1, &(0x7f0000000100)=0x1)

23:36:07 executing program 1:
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty, 0xbc4}, 0x1c)

23:36:07 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/46, 0x2e}], 0x1)
dup2(r0, r1)
write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91)
syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x800, 0x40500)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0)

23:36:07 executing program 7:
openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mlock2(&(0x7f0000230000/0x1000)=nil, 0x1000, 0x0)
clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000000c0)="dab3d589837065b1d00842e98ed3aabe38dda827e3fbe1a6f6ba7c69e5d3537acacb7047621655abbfd6249711cf2c5d3be80f03d89ac17233dd1a5b54774e2df41ff2726d8bf8cea704a6024d1916fb40ed5ef6e6a4a846b05c8e3e5ae03e67305af1e64efe938387c6aeef5f849d743019ae0a08ae311f4b173298071a031839e3363ea0ba8bb962754a1b83dc1463e9abea4de4c831c5dde27c086d1300420f997f377fd2694d3b1077ccb4b2378a43617cd9409212819b7e8a65ecf7")
mremap(&(0x7f0000228000/0xd000)=nil, 0xd000, 0x3000, 0x3, &(0x7f000057f000/0x3000)=nil)

23:36:07 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x16, 0x4, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x80, 0x4)
restart_syscall()
write(r2, &(0x7f0000000440)="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", 0xfc)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
readv(r2, &(0x7f0000000140)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1)

[  425.069265] binder: undelivered TRANSACTION_ERROR: 29201
23:36:07 executing program 1:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7f, 0x2, 0x2cb1, 0x0, 0x2, 0x3e, 0x2, 0x3e2, 0x40, 0xdd, 0x3c, 0x0, 0x38, 0x2, 0x3ff, 0x100000001, 0x9}, [{0x70000004, 0x7, 0x3, 0x39, 0x3, 0x1, 0x9, 0xffff}], "2aa5d6aca1face7c33a73e437e40261a4cd1feabe9ee13667ce920ee4c904f6f8eaa9ecd8bce42173b75d9e950e2a36559ff3860b1d2132ccf6f65cfb221eff7f3ae7d6682d4a67dc2d0a4df04545adef187a23db076a7b89f07230859799a80dff876b6422b61d6cbe2a167dd80ec492c3af203f7cea1ee84fa94347f51e78deefef434da34ad08017b70e9b61219239e483a8eff107c2119c297149abb6d859a65", [[]]}, 0x21a)
userfaultfd(0x1ff)
add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb)

[  425.095982] binder: undelivered TRANSACTION_ERROR: 29189
[  425.115175] Option 'Yyš€ßøv¶B+aÖËâ¡gÝ€ìI,:ò÷Ρî„ú”4Qç�îþô4Ú4­
{pé¶' to dns_resolver key: bad/missing value
[  425.126995] binder_alloc: 28621: binder_alloc_buf, no vma
[  425.134037] binder: 28621:28626 transaction failed 29189/-3, size 0-0 line 3137
23:36:07 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)
setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x54, 0x4)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002)
write(r2, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xffffffffffffff6f)

23:36:07 executing program 7:
r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
ftruncate(r0, 0x5)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="09b5fde3b70ce860272b8d58e29450aae0a6ba831af2a35de94b0fc4481689ede96e92eabc32bb22dae04ab2a81c9aac2f68912cf56dc669ca99fd9e8b0e53f6cbdb145745094887dc65c8b73598b59ba7c2affa56db643f5cd905620977d12936")
r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002)
fcntl$setflags(r0, 0x2, 0x1)
r3 = dup2(r2, r1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)

23:36:07 executing program 7:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl(r0, 0x856, &(0x7f0000000000)="b16a2b3d50547ef264f53135f69b3b1a0b426e2a8e782a06d1663b5ed82dd5404a844046fbeb487c10ad3c8a1fc75c2a13bd67ca73e550e1c98e34")
ioctl$KIOCSOUND(r0, 0x4b2f, 0x873)
ioctl$KDGKBLED(r0, 0x5111, &(0x7f0000000100))

[  425.141709] Option 'Yyš€ßøv¶B+aÖËâ¡gÝ€ìI,:ò÷Ρî„ú”4Qç�îþô4Ú4­
{pé¶' to dns_resolver key: bad/missing value
[  425.178400] binder: 28621:28637 ERROR: BC_REGISTER_LOOPER called without request
[  425.204483] binder: 28621:28626 got reply transaction with no transaction stack
[  425.221827] binder: 28621:28626 transaction failed 29201/-71, size 80-8 line 2922
[  425.242439] binder: BINDER_SET_CONTEXT_MGR already set
[  425.247903] binder: 28621:28637 ioctl 40046207 0 returned -16
[  425.259465] binder_alloc: 28621: binder_alloc_buf, no vma
[  425.265456] binder: 28621:28637 transaction failed 29189/-3, size 0-0 line 3137
[  425.273646] binder: 28621:28626 ERROR: BC_REGISTER_LOOPER called without request
[  425.281578] binder: 28621:28637 got reply transaction with no transaction stack
[  425.290397] binder: 28621:28637 transaction failed 29201/-71, size 80-8 line 2922
[  425.300016] binder: undelivered TRANSACTION_ERROR: 29201
[  425.305580] binder: undelivered TRANSACTION_ERROR: 29201
[  425.311122] binder: undelivered TRANSACTION_ERROR: 29189
[  425.322781] binder: undelivered TRANSACTION_ERROR: 29189
23:36:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180), 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:07 executing program 1:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
r2 = getgid()
fchown(r0, r1, r2)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x994)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'})
socket$inet6(0xa, 0x0, 0x4000028000000000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4)

23:36:07 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done={0x40086310, 0x1}], 0x2e, 0x0, &(0x7f00000000c0)="fd5c30865d7bae8abc403593f47f663fc7dd7814b3b9ff580ed0fedb94bd9dbc2531d56346b327934e5185fec0ef"})
write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffffb, 0x12)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))

23:36:07 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='cgroup\x00')
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
prctl$getreaper(0xb, &(0x7f0000000080))

23:36:07 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xa2)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="510400000092d9b05497062ce40000000100000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'])
getsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000100), &(0x7f0000000080)=0x4)
recvfrom(r0, &(0x7f00000000c0)=""/23, 0x17, 0x41, 0x0, 0x0)

23:36:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x400000, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x5c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}]}, 0x5c}}, 0x50)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:07 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070")
r1 = syz_open_procfs(0x0, &(0x7f0000d09fe9)='smaps\x00')
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040))
pread64(r1, &(0x7f0000e3e000)=""/8, 0x8, 0x100000)

23:36:07 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000), 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback, 0x0, 0x6c}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffff7f}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)

23:36:07 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x40000, 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0x5, 0x12)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
mq_notify(r2, &(0x7f0000000140)={0x0, 0x22})
modify_ldt$read(0x0, &(0x7f0000000200)=""/216, 0xd8)

23:36:07 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x2000002, 0x4032, 0xffffffffffffffff, 0x0)
exit(0x0)
madvise(&(0x7f00008ca000/0x4000)=nil, 0x4000, 0xf)

[  425.731351] binder: 28671:28673 ERROR: BC_REGISTER_LOOPER called without request
[  425.762808] binder_alloc: binder_alloc_mmap_handler: 28671 20010000-20013000 already mapped failed -16
23:36:07 executing program 2:
clone(0x0, &(0x7f00000012c0), &(0x7f0000001080), &(0x7f00000022c0), &(0x7f0000002300))
syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff000000000000000d0000000000000000d086749b2246e2b57680b84f22c987677d87826085fabe432aa2c22be40230906aae3ffac439906f09c8633a268b640e750162e8148264f60d77c1d9cb3f3d1c"], &(0x7f0000000180))
epoll_create1(0x80000)

23:36:07 executing program 1:
r0 = socket(0xa, 0x2, 0x0)
r1 = open(&(0x7f00004b8ff8)='./file0\x00', 0x200000000028042, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
timerfd_gettime(r1, &(0x7f0000000000))
fallocate(r1, 0x0, 0x10003, 0x9)
sendfile(r0, r1, &(0x7f0000e64ff8)=0x38, 0x10001)

[  425.800249] binder: BINDER_SET_CONTEXT_MGR already set
[  425.811529] binder: 28671:28673 ioctl 40046207 0 returned -16
23:36:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0)
mq_notify(r1, &(0x7f0000000240)={0x0, 0x1d, 0x7, @thr={&(0x7f0000000140)="d8a0e4d758d293f80be72150ef183304a6f56ea9bec8dbf54b946f1d5a300621a1099c811082277248c0dd", &(0x7f0000000180)="735050b731e209ea43c59edc3567e3eac58eb2da0d5a34edec840a30f94cdafd51d2502016fa5c44adc79dcd215a5717c3b3a7514d276f6ad41cf56c9dacfd9c172152f185ed941993fe4194ca1854c360232642b35dd6383099f0d4f0e55e48a05d0f2cdf468e8bd8314b99464384271eaeea23473548d3ee4776e891c885cea40159b2"}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x3)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8)
sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:36:08 executing program 2:
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
clone(0x0, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000080))
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00')

[  425.865534] binder_alloc: 28671: binder_alloc_buf, no vma
[  425.882406] binder: 28671:28682 transaction failed 29189/-3, size 0-0 line 3137
[  425.911285] binder: 28671:28673 ERROR: BC_REGISTER_LOOPER called without request
[  425.918967] binder: 28671:28702 got reply transaction with no transaction stack
[  425.931356] binder: 28671:28702 transaction failed 29201/-71, size 80-8 line 2922
23:36:08 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x800)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
socket$packet(0x11, 0x400000000003, 0x300)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0)
write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x2}, 0x8)
r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x2000)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@local}, &(0x7f0000000140)=0x14)
dup3(r1, r2, 0x0)

23:36:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  425.964901] binder: undelivered TRANSACTION_ERROR: 29201
[  425.970431] binder: unexpected work type, 4, not freed
[  425.996642] binder: undelivered TRANSACTION_COMPLETE
[  426.032698] binder: undelivered TRANSACTION_ERROR: 29189
[  426.055607] binder: BINDER_SET_CONTEXT_MGR already set
[  426.073253] binder: 28726:28728 ioctl 40046207 0 returned -16
[  426.079848] binder: undelivered TRANSACTION_COMPLETE
[  426.090515] binder: undelivered transaction 538, process died.
[  426.103357] binder: 28726:28728 got transaction to context manager from process owning it
[  426.119452] binder: 28726:28728 transaction failed 29201/-22, size 0-0 line 3005
[  426.138057] binder: 28726:28728 ERROR: BC_REGISTER_LOOPER called without request
[  426.183777] binder: 28726:28734 got reply transaction with no transaction stack
[  426.192789] binder: 28726:28734 transaction failed 29201/-71, size 80-8 line 2922
23:36:08 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180), 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:08 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$KDADDIO(r0, 0x4b34, 0x5)

23:36:08 executing program 5:
r0 = socket$inet6(0xa, 0x2100000000000002, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0x3f)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0)
keyctl$read(0xb, r2, &(0x7f0000000100)=""/15, 0xf)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x400000000002}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90, 0x5b}}, 0xe8)
sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000880)}, 0x0)
socketpair$inet6(0xa, 0xb, 0x5, &(0x7f0000000140))

23:36:08 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x12201)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240))
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x6)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080))
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @local}, 0x1c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8)
write$UHID_CREATE(r0, &(0x7f0000000440)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000380)=""/155, 0x9b, 0x9, 0x7, 0x40, 0xfff, 0x800}, 0x120)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000006c0)={0x3, 0x800, 0x0, 0x0, 0x1})
sendto$packet(r0, &(0x7f0000000180)="9c86901c251eaf839ddf6a997a5d768f540695ddbeb9513f6f84b904950f6ffd666836b57ae3158020251d5c5d3d8e7f09", 0x31, 0x50, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0xffffffffe306a699, 0x6, @broadcast}, 0x14)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000640))
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000600)={0x17, 0x7a, &(0x7f0000000580)="3778279eaea7bc9358e1046072179b3a416bd9b81592a52580fdf0cc9ae12e83c8c0596381cc5370c90bc2e30b0464606770ba03e4901c1892b1360a159861dc7cfc55a66a43662c814c533086c58a27fe256765cb77690daac6fbeb926ff7f79bcff38ce70122d7cc42cf1e5137531744720e1bbb85bf4cf240"})
pipe2(&(0x7f0000000680), 0x0)
ioctl$BLKRAGET(r1, 0x8000552c, &(0x7f0000000100))

23:36:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0)
mq_notify(r1, &(0x7f0000000240)={0x0, 0x1d, 0x7, @thr={&(0x7f0000000140)="d8a0e4d758d293f80be72150ef183304a6f56ea9bec8dbf54b946f1d5a300621a1099c811082277248c0dd", &(0x7f0000000180)="735050b731e209ea43c59edc3567e3eac58eb2da0d5a34edec840a30f94cdafd51d2502016fa5c44adc79dcd215a5717c3b3a7514d276f6ad41cf56c9dacfd9c172152f185ed941993fe4194ca1854c360232642b35dd6383099f0d4f0e55e48a05d0f2cdf468e8bd8314b99464384271eaeea23473548d3ee4776e891c885cea40159b2"}})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$l2tp(0x18, 0x1, 0x1)
setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x7, 0x3)
connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x0, 0x0, 0x800, 0xda0, 0x0, 0x8f8, 0x67}, 0x8)
sendmmsg(r3, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0)

23:36:08 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x101)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[]], 0x8)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x9, 0x9, 0x72, 0x800}, 0x14)
fcntl$addseals(r0, 0x409, 0x2)

23:36:08 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040), 0x4)
flistxattr(r0, &(0x7f00000001c0)=""/17, 0x11)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000000c0)={0x9, 0x1, 0x9, 0x10000}, 0x10)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0xfff, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}}, 0x88)

23:36:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000008f000/0x1000)=nil, 0x1000, 0xa, 0xa132, r0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00')

23:36:08 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x7, &(0x7f0000000140)="0a5cc80500efffffff0002ed0094948b9ae74ce0ac700b0ca416b9d84cb87922a3f4c5f530be69edb6092a5d3f0621270bf941b705921a626b68b03c57903d8cc7c5757918f838f93bdaf5283b826372daff518a3da152ea1b8f8f202e659ef9772523f56b3440eaa7")
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x98, 0x10000)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)={0x0, 0x10000, 0x0, 0xffffffffffffff8c, 0x5, 0x5, 0x5, 0x8, 0x900000000, 0x1})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
r3 = socket(0x10, 0x802, 0x0)
ioctl$int_in(r3, 0x5452, &(0x7f0000000100))
write(r3, &(0x7f0000001500)="240000001a0025f0006bb404feff141c020b5aff6e10b500001180cc0800100023020000", 0x24)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)="b36c3152e2d874af")

23:36:08 executing program 7:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00005b1ffc)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000080)='g', 0x1, 0x0, &(0x7f0000000340)={0xa, 0x10000000004e23, 0x0, @dev={0xfe, 0x80, [], 0x15}}, 0x1c)
sendto$inet6(r1, &(0x7f00000000c0)="43236057800b724a95a28198987e3eebafbef926cf2950091f07bf12338dc17ff3139217da5828254b01c371b40a55554fa982365ee89c6a0e22159fa9b30a8c5bf31d4df4867403983fcf6443aee8202b0743f18fc75c33f9c1552309cddfef7a884b1857", 0x65, 0x4000000, &(0x7f0000000000)={0xa, 0x4e21, 0x8001, @mcast2, 0x2}, 0x1c)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='syzkaller1\x00')
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='irlan0\x00', 0x10)
recvmmsg(r0, &(0x7f0000004a80)=[{{&(0x7f0000004300)=@un=@abs, 0x80, &(0x7f0000004940), 0x0, &(0x7f0000004a00)=""/73, 0x49}}], 0x1, 0x0, 0x0)

23:36:08 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x82)
r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8)
quotactl(0x2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f00000004c0)="fdf0af0236285d62ed3f16308da20685732de7fdeb634e2877fc11d9b6c2cc0da90b01a11f754c1d46fb85c9ce09c748a2602752f5144edf637f4021aa87d593f89f8a79896209b7b692f89dcbf5618a8ce71d1a903a28ccd1a94c79dd1ef29ee7a3ba91a1b1143de391b861a96b664e74bd555f26b7bfe5c2b2b4b287a0aa3df2b48558331a204a5468c879d1a2b0dcdcae5ab808d36ba6b81964e86845919f0c367cf17de3186fe2d717d27c8ecdcf370aea500166acb80a91773e7f95b7774a6d239212e7d47af621ad7e3d0544000869067144def78f9d6172317fd58041d075c0ae38d81dbfe1ee51a853db061497d5b51ed6e6146deddd9e4a77276bc1dadcb531b3aadcac3b04ffc5539aa22c2b1b103fdef38a65bf0821b017d982fefb66cbe8f6bbffcbb1c1ed0a2230eb133052dc75a10093069adb8f114de708fb99119e5319affed5a10f327a9a3b12aea7c09546fc333ab627c29e9db484cdad42050ac10f5630588a3a96038307bbf93b295bbf23bb147fa693ce10f2e6f72e14e9366d575fb1fbbfb7dbf034ea13843c443fc3fa86053bd9e489f6de6f9c2802ffa4c5ec48bd12d05a293f0ae8dbfd068593bbf89e0a2468f78d41bd87fb19f542c91b9cf89214d0792123eb5ddcc3deb360440c8f48e58f071c9624b9a58cd2bdf35da9c9b01e6d4627f6e5bb709e9b88dc0bc578e768dd64e502472226025238bf5bfdf1df8bc8d38482d245c1370262f6f5f8ae9e736e782e9c77fbd1975d84013c6bee25b4d247aa70d41be2356b2cb9aec06b6b0e0d547a7ecdea0bfa91eeddae94f7d3e3329a054feafc64ebfb43fa14f809079704214f3f94172c0f9f56c2cb6f599628f53df22b3fba0a41db2903f5255e7ea7559c144cc5501464053cca7a3570d85b7b2c5c9d19ba2e998e3b3c2c81a63f157a00d88577097e0b24c7bdc826043dbbcdd28254eb3ff9280f201a35ff15148fbb1cd4075dfd86c2a0c017346d0ddcedb5215936ad24d66fd64aa1f0d25cdd54c7852ba9c4959bcf78640c945e2cda9d4e5780ed39d596813a2c76fb31146f6838d12e8f3c765a7cd4177a59eedee8c93ff536629014f25e0d3d88c1c1aaa9ea1c3f11041789bd0ba425f409ddcc2895951bf66ba1bcfbd90163f5461a637ec31544782945555cb3aa2bdaf186de2a4cfc5efccd5ad4fea2cf470db395a964c1c0d0e47d7756bd3fc7b074aebfd5b5429b03e6a2d93744582aaf95a1bff9bf553117ed0a05c1b905a7a712f9b1252a306942a6367cb16445b6e1b26c7bc87773360a3eaa8421b5c8ab2d8e56db807be124ad7a72c089b825cbb90dbafc60ba657e6c6f36d9b9ed3c2e1ae12a8b2f6d9fca521f570e19f6c1ebfb803bf0828c828183314c1da453ea590db7f94f84579d0ba2756093d71ad713b727061a6368b382d74e5f5dd5fe9881def16344ee273fc3621039771773600167d372f8f80250c1cd37f3ea8b2de7a1d65825b953be79643e63fd62f44c9bbf0569009925b2b79db2b11b254748ce97f4c19f0fca81eb0a3c3b5ee4b5f3f73b8736a06a6d4708b0e26043f080d650db8fa20aa574342c944552b6c3398dc0a1bea66c5c5d4923bbc99f5d9eaacea1dd2ceb018fe5ad919ddb87c226e8f624326055d3651c333784e3c1732087abf533939046644faba90d3c5a28a6e80db00ba542875fe217800274ec0f8aed98577b8e857c149289b0a37098aef1e4fac865310f06880ad7c33bde9fe5a7227dfbfeb676b6abc9dd08aede214b064c3ee125953a399f8e99d19ee428ec6a12e33e9ed1804d0b581f3686042b399e57fe0eb89c13f178587ee35c97696e37feda1321199c417fd4e6b7721b04e418c0fa043142c62b8297a886fe90e82792fdc3c5ffcb9ac82d73c2000f1e9feaf1bbc882fa0deff2b47f33b9bc38cc77d43f31c70fb5e0257e523687fee644f058e2dfe48e645164b44e5f516ca6496a40804432e695c7833985f3df3eb23541199984d005d37306640da8c3d51505cd18829ba1500d52dbb190682f9581b11b481f2a7b3c404725efc8106c79f1b9d17f6427d5618053025d1525b283e817c646ce46c307112f4476d3e8bac8917b9e70abeaa270782bc12bb23a4005e2151c970b6733ddb023f27e223c1412ec88a56cbb15e90fb4eb15b91b6fbe7f1957e8762237aff7ac8b7daec6bd9da2f63b05f38b932c2899c69f21e6f848357cee77872ec0c60fa2548dc30c57683ba46722896baa5412e93c16afd935b42973f07bfeacd5d77d27d2b42c952745d85d7dfdc0f0544a61ec7033e1dcbff61bcd72448f47a0332fe328d91d80a3f75535da2e7c86ca80bbe68a0ab873c8c390cfa3ac5e8d1b0337509561a9ec3d9091f0ce5b8862671cc4c77283d1e6f9b2ff1074ea830b7ad72987aebd49f9981912f6c4a19c1e70060bdf4bec9a24f5a5b1cca87c0a0d25c99407edb060a738e17c2346b571157023f0f312bf2a236485965053a18667d01d03c64b90dd5eeabf24c75635a443019bc76ef687412acb49506c152f8e7a6c218f523c4bf8d19b71326c29e1d60e7ab33d7c299f103876600e3aa42de9ee54f95d38a04fa9f8a93427d562969a0529be7d86580056a01405465cef6d6fc74dd0ea4c22dba549abd39851605b8de2eb73a8fe75dd0d4bcbad4a03971c54bffe0ce675dde98c5fc01b8e853ca9436a5bc14dcc24a7ad04381612591af3ef768bfcc381120ca260fac75478f736a922521bcfd118c3d46bed4cae31dbc01751e56229b4b9270205a0b5ebcc884829b5d38a8c09ac2c0f7f80970057e61d847b02fe6b5c44003bfa76624cfb36e9fd4f3f0b5e5b8a263553867793b264604ff5e576f664fa77cdd3e63a9b9b1d6c242209202a56a2fd20468e7f40d6e39e55cebf3edc0f94e6505297453b0a3e9494b64fcda1e3549a601e841f5a4a326fb01cd282c46dc19f72f9f23ff289d815d8d390c57189f9cb02e439af163cf1f9a20239076ea179d62292b427f2ce025c2984b15d84d561dcf714072aedef3ad67ec591e220337b23a3cae96ea385098aa8e8eb27a6ad14fecf85a8f6987dfcc4d703316b63a259e8b4046c73ba7a7ca35e9acb9de6ff98c2e6d714233b44f4f6e37ef9d042a1864458fbb1c5a92b2e9cb06b9b464f9ae89a04c1fcbc835e101890c9e9036eb4e2caadb377d5cdda8562a34ffcbee5f567fc7403be0732efa795761853775bf4bd331372e31768610eedc2b712aa3d69e7cc5dc686e64b0f85a1779ef932a8d913ebf6b95fa07505777fbcc5d5ca1d27fb2f0b46f84811e48749a1b97fe3d58e93b44199ff0143a0ffa385203fc376d72cebc3d77e898f452b5f7ca8f0948bbd19d62aeca35d766c72953da49d01766529ba01eedc059308fe90d696a641afc1215aad9386399616d010e5f978cf5f49d28c5b1a2bf8a848b3f278fce2495f46fcbef778b9cfcbfa1496c901c1aff2bba2b088c80ab2d0aae8eb6bab6ab5ea09db3d0b91abad759ba082d8cef2a1ceb87e939024a9fbc84147835baf7781bc2d8375f9c4dd8a41bf085383ec8b36d0925c90cfe5c98a2fe7cd75d92f4bbf3ff8020a5d6ecb127f2a2551b8c934224973b7919f00bf91484321253ea71a3b5ef691ead1fd7c71b3d358af564b29853c5405236b775060f75c22fcfbbfc340276127372981a9444347cd8498e0c4de3f60b5c907c71093b3a8004f996b963627714ef9bfaa111a24adb14f8185c91bea2dbb391db86ce333590ac764fce27a100a4b7a0d98341810d29c924626644724045b817832b3e083c986812db87b3c3c20e945854e591d81815d8cc609c254d25812fea23027cf0bbcf4b699020930506b92c5433deffd81d20611701c08ef8b4ce5d35213bc989cb0721e476ab013d54adb225e7a924c81d2cbf06c47d61e2ed02c52faa1ba75073d83e057b457efd82a7b10953b598305ac8a2c0fa5cd31bed8bae8e171920656742009cfb19977c4cfb8108d51c569bd77dfd290d9ee69d6469195acceb9ffd0c3ece979404f973a1f1fb3d6e34d1d3a7dbfc64bf77da9368f5e9b3ae789dc34ebdd439dec581fd2fc94c83cebdf78f4c295c307ab15d49f0f3dabc045915c2aaa4e29ee7bb871f4fe18b1f37d59e1e9abd9c78c39c600a10c3957c106e145fc971b3e4bc60939d5b8b99c1a7833f681836d0ba16d7bf213680cad1c04d7e963ade1d935b79d4d12ec2f3deb458e9e3c7e51315a36037f957a2594b41f4383058062dda7165db8b0aca69366d94c53af6dc15817bf39105da8d6373d8a723b9534c444ec4e9135652b8e23cbb47186701bd44de1196449aa7bda04d9a0ee292ded98f5d87a5ab73a9a15c67a8d1f07a2f6f6f8d7c253672f43634934364c8eaa05fa3a81085baa965abb8b598959fbbfd8176fd504761f2a97afee99a06d7d0408f299f597b6bda13899bb0a06f90906593c950cd20fa193898e34c8fb7d27bc16e7d46a21e773ca30f90fa93cb744308359a5751701f4c6fa21832943dd513e0ba8d4875079ee61c94363d96a4a258dc91bb41f10a449998b81c1642b0be69e82d3077638a3a3636162cb582e1efc9615fc635ffed2887bcd264cf65729c2f74645b52d3cb0148ae1f4332de8385355a212a9030b5e82bd0c2e1fc519b9d01c35eeee1093fc753146ee5b8697a8f3bdf2c08b4eafa3648e782a3053f3837d4264d26d50eb49b5b43d401d41c89d70fc34fe0812e169e503206d68d93726bbb714153d6288d528b10b65c2c3c683cd6076f5668157268a7ac2adb62c14ff613843b96f242df34f49a5a7452af22373298f35023ec2c975965b217b2d9c0c507d26630c47a649d3714c991c858e643b9e9be878ae598bbeba5cc5a5dd623c87081c6cd2e5c4ae3c13e5aef866766117cffed2f4cb05f9b07dc0657e4a62477e106b0db9a0772f76462d53beac43a400a93445dab38c0c42b3a10d2210e98a49a6e43feade1770c786937e19c95039126ed10ed2eff43d5220c439b5390e2e34ea71e05d6f0d45343a76a84897f8103b548a40905b8c850fdd3ef40a605e800ca09eccf542ecfcb550bdb51576e291c0fb94952da4536bdf2fdad2f43d854ca3f05e11a61f70991a92aab4d341268ad529786d2cfd9b9832d18842a34d3502190125bbe2b5138d8cb609e5786a9e9a6f7d0d909a8888779eca24a981e5181c5160c1850d7c987a040fab229c084ca4af47731f3acf9a0d7916d595ce53d11c0e4099d66a800903211876e71f2f375efb60208c41d75ce4d9d3c3d44798d4f46620c197c78c82c29ae9167b6f84446b4dd84d001a8baf18c300d5621cb92a6b60179008b0fc9bffd773acb0b65fc82ebaccff89b401df0c36c2a817a85da6a1781e16a5952269e29e1c632712208433bbfe0625006d1456debfbc370c74a3dfaebd2891b7c8ff30e8713f094c397e5a16229d022cf4157477827609ac6da0a48907414ac36a5568f5c1230effdd75d8a246030814b27df25627c0ca7aedfbf7a70b18677dbff911ca79bfe4c93bf629bf0bc2b0099158771b04e13a396bee1bddd44f7be086d23d2cdc0b42eb4a838918865fca97eee67e7e247c14fbd32f085cc45cb182c3a5c3bf847c985895d79e7d84360058c2a7947ee4c52c14342f98973f198fb06fcaac2e7e7b08fe3abc471df656c4d58a55f758f60a91a90c9194e8743b5a47c0d4828a0f9af1e7ab1d6509fc0008b6098759ba3339528e199b4f36d738d26f79b01b1f1c70a07e1fbfbe7076f00b709a1c1960")
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "aee9b11e5a3051c995a854d72e3ad399da247c7cce8ce256574c03fce341ea03a6f8919d2146b3ec13de10d5a08ba8407cdf1b7219d6621165b29e46e9bb2bba", "4a7f63b9fbe958a09f88a7347868ff0000000000000078072def140a070400000000001e000000000000060000d20016000000000000be0900", "96f0cbcb5961000080000080000008000000000000000000000000008000"})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000080)=0xe8)

23:36:08 executing program 3:
r0 = dup(0xffffffffffffff9c)
time(&(0x7f00000001c0))
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101001, 0x0)
write(r1, &(0x7f0000000740), 0x0)
unshare(0x40000000)
fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpid()
getresuid(&(0x7f0000000540), &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0))
sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000600)={&(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="c9cc444834a0ac2dd7e3dfa6ae9e85bb45d1615c67c0bd18a49fb075ef9a48d17d9e1fef67600cc55f04e19bc9772e2226030d77534dd55f01f36fe87aac318eeb6f24a35d8b976eec12bd4b6633cec601500f65243e118bdf1d83b27c4c3dcffdc32156a9fb05d37ebbd8b0c5c842eb226c2390af00773006a26ab9830840566eb560dc0c799544c0d0bd6cea43a41dd6a5959cd204220581f3592c6475a3f809d230423f93d1000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="7eb6ca6f7913a57d8a8393d56c7aa566759b5f39ca481c317eea5502c618ec15f6a91d48204bee77eb25cda198a15486d9b78907071c89904d4694d02f0f1d8e1928cabfa58b6a38e73fdac6794c75e7d4ec0ec41085e92e6d1583ff7fac101633e144c23ff435d9430ce63e0cb43ad05c63b38d833552100cdefdcc5e1ef92139dbb244a4f5c4df9bd4fc53e5300dc3637baa86721223450f370ba2aa17629094bca6181969c5b02290894d3c7f2ad620a249f6040de21b8af9ef48985c0290118bd8458c2dd49a3e23f8fbea215b5f852929402fb87f7275dff04562df4fb39a7c59ed94e0f7cbd00418bd890637e008005500", @ANYRES32=r6, @ANYBLOB="aa5377fd6d531e5a6f17150aacac9b6e3554ede7da963b22cc991bf76338938143d56f1b87269cf69dac44f32c0c92ea0eea6f8ab335781738cf55aa01fa9e2d87fab008c2ac3ffc80d394763b38cde5a1455bdf73b6b170e65cd2ed8436fc6318748523cfc576c1092d002d63034ec1928f9f80ae569efee745b2fb80644962eac52192a506db404704350495ea22fe74e95baccdd1c04c32f2f8a87808465cdc31b5d3c45f654a181af5b43d337dabe0b402f6fa5ba1529ed020fa503982e0fa80418ab79ac27c1f419117d07530e48b81e7cad8c60672aa3436d7974015b44cf30f028834a6bcb57680fbfa02b36ee8ecb8acb2a45ab07b84d3215e31b2968964f98179a65c91e8e2df67dab9267e70a437211b994f98dd2d383b3c5fa01ff182274ca3c3c9b51d0d89805aca6a064e6855dd963a09cb41f39d762bd865774160f244ae57129d28f0d70e4b9a10d7d703db3e132e1dc4132d05a847f947c3e563068c1eea8bc24789e470c7ac34a6040d24c73ddaf542f6d7804c6f0c80068aa67bf8369f3ccc8cb20a6c517e74556ed83ad70a5065924e2d60aac889de2142eca7973998a8d9cd9486cd57e2c65f23e9475fe5f72931299582f5bda0158d4602e099ad06d9a07c5e03c706164c904d68b566219b1863caf382b9d5da5061839ed51aeba2b8f89988c66f391f3993d651d3180715b7a11bcdd8ad9cdb3d3bf19630a55bf35503e4266c13cd218254411ad6a8eda374ba25f3078dc1bd949c330c3cf4ae1d0757796bf5de1395d0726caf83127c509a6676153ac236d6528112669c71e96f69393d397b34e66db1541fa4bf278345d736d2b89e120e442a2136ad2b432870bfc973dd9be62e9d7b9e2859b70583267f1d65b39c1c502e2aaa1b65e91ee96e03696b5a597b0bbac01e933106f5e6ce875137f44b2e7d181b183657dee5dccd87fb464c0ee4be94f99e08003d0002000000"], 0x18d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000680))
fgetxattr(r7, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000200)=""/5, 0x5)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000001680)="2582a931f75fca6bfec3bee9fd3bae839867c5efb9ba75738c6ceb1cfc3487d0bd06ad3d91cb7d7bae635af17055722d91c074be6dd7288c20c230ed51", 0x3d}], 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x2e}, &(0x7f00000002c0)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x1, r5})
timer_settime(r9, 0x0, &(0x7f0000000340)={{r10, r11+30000000}}, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000440)={0x0, @time, 0x81, {0x6}, 0x6, 0x1})
ioctl$TCSETAF(r2, 0x541b, &(0x7f0000000000))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x200000, 0x0)

23:36:08 executing program 6:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
ioctl$KIOCSOUND(r0, 0x4b2f, 0x1)
fgetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:08 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ftruncate(r1, 0x8200)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0)
lstat(&(0x7f0000002b80)='./bus\x00', &(0x7f0000002bc0))
fallocate(r1, 0x0, 0x7, 0x8000)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000ffffffff)
write$P9_RSTAT(r4, &(0x7f0000000140)={0x71, 0x7d, 0x2, {0x0, 0x6a, 0xbb8d, 0x5, {0x10, 0x1, 0x8}, 0x80010000, 0x1, 0xffffffffffffffff, 0x1f, 0x13, "776c616e317070703176626f786e6574302bf2", 0xa, 'systembdev', 0xd, './cgroup.cpu\x00', 0xd, './cgroup.cpu\x00'}}, 0x71)
write$P9_RREMOVE(r4, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7)

[  426.833410] binder: BINDER_SET_CONTEXT_MGR already set
[  426.852984] binder: 28726:28778 ioctl 40046207 0 returned -16
[  426.871680] binder: BINDER_SET_CONTEXT_MGR already set
[  426.885684] binder: 28726:28778 ioctl 40046207 0 returned -16
[  426.907664] binder_alloc: 28726: binder_alloc_buf, no vma
[  426.914812] loop_reread_partitions: partition scan of loop0 (áÓøwåêäSå]}dÐ
I
ºí!÷Þ’¨f›8ÌÖ&WÛõ®F5Eiceµ€Zâ%�»}
[  426.914812] ¾� �̈\‹©) failed (rc=-13)
[  426.920413] binder: 28726:28778 transaction failed 29189/-3, size 0-0 line 3137
[  426.937131] binder: 28726:28778 got reply transaction with no transaction stack
[  426.937968] binder: 28726:28734 ERROR: BC_REGISTER_LOOPER called without request
[  426.954850] binder: 28726:28778 transaction failed 29201/-71, size 80-8 line 2922
[  426.961002] IPVS: Creating netns size=2552 id=30
23:36:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  426.982776] binder: undelivered TRANSACTION_ERROR: 29201
[  426.997672] binder: undelivered TRANSACTION_ERROR: 29189
[  427.040554] binder: undelivered TRANSACTION_ERROR: 29201
[  427.047663] binder: undelivered TRANSACTION_ERROR: 29201
[  427.048629] binder: 28799:28800 transaction failed 29189/-22, size 0-0 line 3014
[  427.048711] binder: 28799:28800 ERROR: BC_REGISTER_LOOPER called without request
23:36:09 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, &(0x7f0000000100), &(0x7f00000002c0)=ANY=[]}, 0x78)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x8}}, 0x30)
recvfrom(r0, &(0x7f0000000040)=""/101, 0xfffffffffffffeec, 0x10100, 0x0, 0x0)
shutdown(r0, 0x0)

[  427.105579] loop_reread_partitions: partition scan of loop0 () failed (rc=-13)
[  427.121642] binder: 28799:28802 got reply transaction with no transaction stack
[  427.136862] pktgen: kernel_thread() failed for cpu 1
[  427.142080] pktgen: Cannot create thread for cpu 1 (-4)
[  427.148736] binder: 28799:28802 transaction failed 29201/-71, size 80-8 line 2922
[  427.168107] IPVS: Creating netns size=2552 id=31
23:36:09 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="8905", 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:09 executing program 6:
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:09 executing program 3:
r0 = dup(0xffffffffffffff9c)
time(&(0x7f00000001c0))
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101001, 0x0)
write(r1, &(0x7f0000000740), 0x0)
unshare(0x40000000)
fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpid()
getresuid(&(0x7f0000000540), &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0))
sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000600)={&(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="c9cc444834a0ac2dd7e3dfa6ae9e85bb45d1615c67c0bd18a49fb075ef9a48d17d9e1fef67600cc55f04e19bc9772e2226030d77534dd55f01f36fe87aac318eeb6f24a35d8b976eec12bd4b6633cec601500f65243e118bdf1d83b27c4c3dcffdc32156a9fb05d37ebbd8b0c5c842eb226c2390af00773006a26ab9830840566eb560dc0c799544c0d0bd6cea43a41dd6a5959cd204220581f3592c6475a3f809d230423f93d1000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="7eb6ca6f7913a57d8a8393d56c7aa566759b5f39ca481c317eea5502c618ec15f6a91d48204bee77eb25cda198a15486d9b78907071c89904d4694d02f0f1d8e1928cabfa58b6a38e73fdac6794c75e7d4ec0ec41085e92e6d1583ff7fac101633e144c23ff435d9430ce63e0cb43ad05c63b38d833552100cdefdcc5e1ef92139dbb244a4f5c4df9bd4fc53e5300dc3637baa86721223450f370ba2aa17629094bca6181969c5b02290894d3c7f2ad620a249f6040de21b8af9ef48985c0290118bd8458c2dd49a3e23f8fbea215b5f852929402fb87f7275dff04562df4fb39a7c59ed94e0f7cbd00418bd890637e008005500", @ANYRES32=r6, @ANYBLOB="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"], 0x18d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000680))
fgetxattr(r7, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000200)=""/5, 0x5)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000001680)="2582a931f75fca6bfec3bee9fd3bae839867c5efb9ba75738c6ceb1cfc3487d0bd06ad3d91cb7d7bae635af17055722d91c074be6dd7288c20c230ed51", 0x3d}], 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x2e}, &(0x7f00000002c0)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x1, r5})
timer_settime(r9, 0x0, &(0x7f0000000340)={{r10, r11+30000000}}, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000440)={0x0, @time, 0x81, {0x6}, 0x6, 0x1})
ioctl$TCSETAF(r2, 0x541b, &(0x7f0000000000))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x200000, 0x0)

23:36:09 executing program 2:
mkdir(&(0x7f000082f000)='./control\x00', 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000300)="5ed8b8f3f58e0dc7d8baf7b01bfdae1671697d2034f1b26d07ae008070962779779705ea0788011028d94f55215e0531d53189ae1e5bd79447c71fe58d97f0a0a23f19b56b4f334a88ca3e97b2cf9e15a4cfb41739e669775227fcee17570ea8df7b63416d0559060418a79af5b040dc5c937629e2ce4e995fa56845b8c72ca5a3d26a89c00da972301a5982c57797b056637aa9cb5e89efe3f0b838531325df320db897f35db70277dbf166b6dfb6dc9227274b7590618c726e30330ebb79ba19ebb3fee043acb5903a")
write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30)
unlink(&(0x7f00000002c0)='./control/file0\x00')
r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0))
lseek(r2, 0x0, 0x4)
clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
close(r0)
rename(&(0x7f0000000240)='./control\x00', &(0x7f0000000280)='./control/file0\x00')
utime(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000140))

23:36:09 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x80802, 0xfffffffffffffefe)
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}})
ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
dup(r1)
close(r0)

23:36:09 executing program 5:
r0 = socket$inet6(0xa, 0x1000000000004, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x109032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4)

23:36:09 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1d}, @empty, 0x0, 0x222, [@multicast1, @empty, @broadcast, @loopback]}, 0x20)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x80, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:09 executing program 6:
gettid()
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

[  427.527762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  427.538141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  427.558427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  427.566390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
23:36:09 executing program 5:
mq_open(&(0x7f0000000500)='posix_acl_access\x00', 0x41, 0x80, &(0x7f0000000780)={0x200, 0x7, 0x7fffffff, 0x81, 0x100, 0xfffffffffffffffa, 0x9, 0x5})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800d, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000"], 0x28}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)="70726f6a69645f6d617007ae0d4628e8752769db2ce31d6a13e4c67818886cfc80d650f3fef67b0056936da572f0ea35b3afc9793aba844ee86ff5f6d3e447979f5a0e051eaaede4b3fc6d7f79c94628329f8e94506140d2513e9223633a0943afd3482df5059090da384a3caf487eaeb28aaa9b6eccfb1a919e21b6bd83fed2d3faa9f1ed6101d67ac1bd40bc6e1df58989e170f545b39c4ec0d331f66f6d0a42e9a753c176e3b83857070000005298dfcc0e19432a518c6a08d6b4a92a6224ce1e42e6d51136520bec1cae")
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9)
pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000000140)="cdedce8d01d1af202cacf80a737a261f1916386927f642bb5376e4cfdb0608fb11f2a358d884f438d5930dbe5ff8154fe2be974b1a5202285e1238a8a1f7b70739eee85bbe56cc415aa93b644feaad2b56e5b2b07cae805292602a6221a297d5b4f9b304115d8e0b047bdcff2d1815dfde65", 0x72}], 0x2, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x145000)
setsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000200)="77623c97938123180891391c9b70c68a66fa0615acc1fe6d0d049d4408951a30ca9f900a0db8a39e6570b51ba2cf466023e8e7e99fa8aa673704536ba6342bd8120e665d5fb284c3802bd7f5261070b371dd80b92efe9cd1109fe80f1445f8dd039ca0aab8384d9391caf592a24b10c76c2880a3fefdb71718680d3cba9fbee54e943cbb6fe1eec5f49326a6643328d17562533300ebac917387c0673de99038352438fe69cff8a899e4a6d78609739458250330dfafed57d0da3b0b064da52df111dc9cec7f89ffd745c1bd4e622af7dc5825854c972cf1ac66e3b8d121812da34008fdf483", 0xe6)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x0, 0x0, 0x4f)

23:36:09 executing program 2:
r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x115040, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x1c)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f0000000100)="7facb868fadf28d0f3533d50180610493cae48a82f2651542b905bdcb657fc635349aa0ee26a382bc204aa86cdac73641fb03aea7612468294134671a0709407aa135227ec837e8218147bc9fe0d04390e1639cea68dd215f7fdfe1c5745b1dca32b2c31548b8d385d2e8db15d0ed6c9e613ea74778c086aeceef3f4", 0x7c, 0x5645, &(0x7f00000001c0)={r2, r3+10000000})
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x6002)
r4 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000002, 0x52, r4, 0x0)
pipe2(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0)

23:36:09 executing program 7:
gettid()
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f00000000c0)="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")
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)

23:36:09 executing program 6:
gettid()
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000240)={0x0, <r0=>0x0})
r1 = syz_open_procfs(r0, &(0x7f0000000200)='timers\x00')
fgetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000003c0)=""/2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000040)={{0x1, 0x3ff}, {0x32, 0xe9a}, 0x3, 0x2, 0x4})
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)

[  427.693212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'.
[  427.706500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'.
23:36:09 executing program 7:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003380)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000033c0)={'teql0\x00', 0x80000001})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg(r1, &(0x7f00000031c0)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000040)=""/17, 0x11}], 0x3, &(0x7f0000000140)=""/4, 0x4, 0x6}, 0x8}, {{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000640)=""/214, 0xd6}, {&(0x7f0000000740)=""/7, 0x7}, {&(0x7f0000000780)=""/20, 0x14}, {&(0x7f00000007c0)=""/135, 0x87}, {&(0x7f0000000880)=""/148, 0x94}, {&(0x7f0000000940)=""/195, 0xc3}], 0xa, &(0x7f0000000b00)=""/74, 0x4a, 0xe80}, 0x38a}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000b80)=""/150, 0x96}, {&(0x7f0000001c80)=""/216, 0xd8}, {&(0x7f0000001d80)=""/96, 0x60}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x4, &(0x7f0000002e40)=""/11, 0xb, 0x1004000000000}, 0x9}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e80)=""/20, 0x14}, {&(0x7f0000002ec0)=""/141, 0x8d}], 0x2, &(0x7f0000002fc0)=""/119, 0x77, 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000003040)=""/169, 0xa9}], 0x1, &(0x7f0000003140)=""/77, 0x4d, 0xffffffffffffffff}, 0x3}], 0x5, 0x100, &(0x7f0000003300)={0x0, 0x989680})
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000003340))
sendmsg$nl_netfilter(r3, &(0x7f0000000080)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000003400)=ANY=[@ANYBLOB="140000808f00003d88c2000030ae1b0000000000b3d2d098116aa923d8a54385e68b9d1e890069f77e96e6ccdda7d38a1d883cc885efa90000000000000000550e21114f92a93519b5d93b8a0b100070d46d1f0b23e745499135ff6a8b2014296e59e5d4723a4d5d714df70f2faa3a124300d4b2edd2fd12800b5e7fa4920b19d3f45a3da886d5419ac72b1986095d099267a18474fc47ef60ce"], 0x14}}, 0x0)
recvmmsg(r3, &(0x7f00000013c0), 0x1ad, 0x200002, &(0x7f0000000c40)={0x77359400})
setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000180)=0x4, 0x4)

23:36:09 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082)
r1 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2)
pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x1081806)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
prctl$void(0x15)
dup3(r1, r0, 0x0)

[  427.839808] binder_alloc: binder_alloc_mmap_handler: 28799 20010000-20013000 already mapped failed -16
[  427.859480] binder: BINDER_SET_CONTEXT_MGR already set
[  427.865941] binder: 28799:28802 ioctl 40046207 0 returned -16
[  427.873533] binder: 28799:28809 transaction failed 29189/-22, size 0-0 line 3014
[  427.874697] binder: 28799:28882 ERROR: BC_REGISTER_LOOPER called without request
23:36:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x14)
accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000380)={'team0\x00', r4})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  427.874924] binder: 28799:28882 got reply transaction with no transaction stack
[  427.874934] binder: 28799:28882 transaction failed 29201/-71, size 80-8 line 2922
[  427.904447] binder: undelivered TRANSACTION_ERROR: 29189
[  427.910133] binder: undelivered TRANSACTION_ERROR: 29201
[  427.930699] binder: undelivered TRANSACTION_ERROR: 29189
23:36:10 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x242400, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070")
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x54, 0x0, &(0x7f0000000140)=[@acquire, @clear_death, @increfs_done, @free_buffer, @dead_binder_done, @clear_death], 0x0, 0x0, &(0x7f0000000880)})

[  427.937175] binder: 28887:28888 ERROR: BC_REGISTER_LOOPER called without request
[  427.947235] binder: undelivered TRANSACTION_ERROR: 29201
[  427.953150] binder_alloc: binder_alloc_mmap_handler: 28887 20010000-20013000 already mapped failed -16
[  427.973461] binder: BINDER_SET_CONTEXT_MGR already set
[  427.981226] binder: 28887:28888 ioctl 40046207 0 returned -16
[  427.988224] binder_alloc: 28887: binder_alloc_buf, no vma
[  427.993998] binder: 28887:28891 transaction failed 29189/-3, size 0-0 line 3137
[  428.007416] binder: 28887:28888 ERROR: BC_REGISTER_LOOPER called without request
[  428.019755] binder: 28887:28889 got reply transaction with no transaction stack
[  428.027997] binder: 28887:28889 transaction failed 29201/-71, size 80-8 line 2922
[  428.030590] binder: BINDER_SET_CONTEXT_MGR already set
[  428.030598] binder: 28892:28894 ioctl 40046207 0 returned -16
[  428.030699] binder: 28892:28894 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  428.030708] binder: 28892:28894 BC_INCREFS_DONE u0000000000000000 no match
[  428.030716] binder: 28892:28894 BC_FREE_BUFFER u0000000000000000 no match
[  428.030725] binder: 28892:28894 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  428.030733] binder: 28892:28894 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  428.079680] binder: BINDER_SET_CONTEXT_MGR already set
[  428.079689] binder: 28892:28894 ioctl 40046207 0 returned -16
[  428.079770] binder: 28892:28897 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  428.079780] binder: 28892:28897 BC_INCREFS_DONE u0000000000000000 no match
[  428.079788] binder: 28892:28897 BC_FREE_BUFFER u0000000000000000 no match
[  428.079796] binder: 28892:28897 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  428.079804] binder: 28892:28897 BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  428.148901] binder: undelivered TRANSACTION_COMPLETE
[  428.159551] binder: undelivered transaction 555, process died.
23:36:10 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="8905", 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:10 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000211000000000000000000000005000600000000000a00000000000000020000000000000000000000000000000000000000000000030008000200000002000000e0000002000000000000000002b5c00000000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0x88}}, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc)

[  428.203214] binder: undelivered TRANSACTION_ERROR: 29201
[  428.210446] binder: undelivered TRANSACTION_ERROR: 29189
[  428.216537] binder: undelivered TRANSACTION_COMPLETE
[  429.000920] pktgen: kernel_thread() failed for cpu 0
[  429.006100] pktgen: Cannot create thread for cpu 0 (-4)
[  429.011489] pktgen: kernel_thread() failed for cpu 1
[  429.017027] pktgen: Cannot create thread for cpu 1 (-4)
[  429.022381] pktgen: Initialization failed for all threads
23:36:11 executing program 3:
r0 = dup(0xffffffffffffff9c)
time(&(0x7f00000001c0))
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101001, 0x0)
write(r1, &(0x7f0000000740), 0x0)
unshare(0x40000000)
fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpid()
getresuid(&(0x7f0000000540), &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0))
sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000600)={&(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="c9cc444834a0ac2dd7e3dfa6ae9e85bb45d1615c67c0bd18a49fb075ef9a48d17d9e1fef67600cc55f04e19bc9772e2226030d77534dd55f01f36fe87aac318eeb6f24a35d8b976eec12bd4b6633cec601500f65243e118bdf1d83b27c4c3dcffdc32156a9fb05d37ebbd8b0c5c842eb226c2390af00773006a26ab9830840566eb560dc0c799544c0d0bd6cea43a41dd6a5959cd204220581f3592c6475a3f809d230423f93d1000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="7eb6ca6f7913a57d8a8393d56c7aa566759b5f39ca481c317eea5502c618ec15f6a91d48204bee77eb25cda198a15486d9b78907071c89904d4694d02f0f1d8e1928cabfa58b6a38e73fdac6794c75e7d4ec0ec41085e92e6d1583ff7fac101633e144c23ff435d9430ce63e0cb43ad05c63b38d833552100cdefdcc5e1ef92139dbb244a4f5c4df9bd4fc53e5300dc3637baa86721223450f370ba2aa17629094bca6181969c5b02290894d3c7f2ad620a249f6040de21b8af9ef48985c0290118bd8458c2dd49a3e23f8fbea215b5f852929402fb87f7275dff04562df4fb39a7c59ed94e0f7cbd00418bd890637e008005500", @ANYRES32=r6, @ANYBLOB="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"], 0x18d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000680))
fgetxattr(r7, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000200)=""/5, 0x5)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000001680)="2582a931f75fca6bfec3bee9fd3bae839867c5efb9ba75738c6ceb1cfc3487d0bd06ad3d91cb7d7bae635af17055722d91c074be6dd7288c20c230ed51", 0x3d}], 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x2e}, &(0x7f00000002c0)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x1, r5})
timer_settime(r9, 0x0, &(0x7f0000000340)={{r10, r11+30000000}}, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000440)={0x0, @time, 0x81, {0x6}, 0x6, 0x1})
ioctl$TCSETAF(r2, 0x541b, &(0x7f0000000000))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x200000, 0x0)

23:36:11 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = gettid()
ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000000)="0d01d8650ba98bdc5422fe5211eb31175b74bde1af39f83cce7c51e2319d2fbabed5d2de9c7f498571b350411c40d421f3d53662667700ae4cf42f4068ac372f0448f83761e6949cab77bf10ca0b1db44ce719b334232e6cdb6d19f0d4fdc9d5a5ea8a8dfbcc5c8e7407c3890d677f637978bbc9a9084e1ed4")
r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='GPL\x00', 0xfffffffffffffff8)
keyctl$update(0x2, r2, &(0x7f0000000140)="caf6860b8bb4cb5b4114eaa2abdb1f21ade9501ce481cca2fe37e00d1337e573b03fb335610b61a4b713211b0985e2a93e5fe5e4311c490f01ce26fdc3e7e1054f81b12acc0b1399a048763f2251", 0x4e)
mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x800000000003, &(0x7f0000ffb000/0x4000)=nil)

23:36:11 executing program 2:
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x2)
mkdir(&(0x7f0000000100)='./file0/bus\x00', 0x0)
mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe))
r1 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x9, 0x2800000, 0x4, 0x0, 0x1, 0x0, 0x9, 0x3f, 0x95e7, 0x0, 0x8, 0x3})
utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}, 0x100)
mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000080), &(0x7f00000002c0)}})

23:36:11 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x11, 0x80002, 0x5)
bind(r1, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"ffffffffff1000", 0x3})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @local}, &(0x7f0000000100)=0xc)
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x10)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x7)

23:36:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000280)})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000440))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0)
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000300))
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:11 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_team\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="2600100300372ac21f9f7aeaa1ecd267df8b8462706e58c3965c74419003e48ae87739422f51c61205ec28307c937982acc4292a8dfa3d2bd71a53d879690ed70025f142b76fbf57545a7db1211701324163760459fca3d89c0782fd36a5a8d54d455b11092616ad5c54d4df5ab5c313628b98cb7b872fc9b0bbfdb4cf689d57c0f00e229dc91a8c089082d3750a76e332a6ddc5111e99e0ffacbebefac4a76d1799e1ec10a9c26ed872edddc010e0ef5cc7c0caeed020f1ec7cf916d77103a107f9f8b7cab52887f6393026ead22af66d731646fcd9dcfcb534dea95d41efb64035507dd9b5da490060937a63873d842db32f844fa34821"]})
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0)
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/23)

23:36:11 executing program 7:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00')
lseek(r0, 0xfffffffffffd, 0x0)
connect$netlink(r0, &(0x7f0000000000), 0xc)

23:36:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="8905", 0x2)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:11 executing program 2:
r0 = socket$inet6(0xa, 0xfffffffffffe, 0x0)
ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070")
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@local, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1}, &(0x7f0000000240)=0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005780)={0x0, @dev, @remote}, &(0x7f00000057c0)=0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0x8, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14f2ffff21000104220000000000000000000000"], 0x14}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x3, 0x3, 0x2, 0x1, 0xffffffffffffffff, 0x207, 0x1ff}, 0x20)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x145100, 0x0)
ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000400))
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200300, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f000000010000105000000000000000000000000000000000000ffff000000000049731af4831483dd9819e72b0c951a20a70000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xf0}, 0x8}, 0x0)

23:36:11 executing program 7:
r0 = socket$inet(0x2, 0x80009, 0x4)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4004e23, @local}, 0x10)
connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendfile(r0, r1, &(0x7f0000000200), 0x73)

23:36:11 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207000002000000de3158afc08e9731"], 0x10}}, 0x0)
rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
read(r1, &(0x7f0000000280)=""/1, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

[  429.152001] binder: 28922:28924 ERROR: BC_REGISTER_LOOPER called without request
23:36:11 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendto(r1, &(0x7f0000000000)="54451f82539c790298ab8508353aba2e", 0x10, 0x4000, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @loopback}, 0x1, 0x2, 0x1, 0x4}}, 0x80)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/79, &(0x7f0000000080)=0x4f)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x401, 0x0)
recvmsg(r0, &(0x7f0000001d40)={&(0x7f0000001b00)=@xdp={0x2c, 0x0, <r3=>0x0}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/78, 0x4e}, {&(0x7f0000001c00)=""/183, 0xb7}], 0x2, &(0x7f0000001d00)=""/5, 0x5, 0x4}, 0x100)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001d80)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@dev}}, &(0x7f0000001e80)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001ec0)={{{@in=@multicast2, @in6=@remote, 0x4e24, 0x2, 0x4e21, 0x4c23, 0xa, 0xa0, 0x0, 0x0, r3, r4}, {0xaf9, 0x8, 0xffffffffffffffbe, 0x4b0, 0x177, 0x3, 0x8, 0x2}, {0x0, 0x3ff, 0xffffffff, 0xfff}, 0x7, 0x6e6bbf, 0x3, 0x0, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x7, 0x2, 0x7, 0x0, 0x6, 0x3}}, 0xe8)
r5 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00')
sendfile(r1, r5, &(0x7f00000000c0), 0x7fffffff)

[  429.207766] binder_alloc: binder_alloc_mmap_handler: 28922 20010000-20013000 already mapped failed -16
[  429.217625] binder: BINDER_SET_CONTEXT_MGR already set
[  429.222991] binder: 28922:28924 ioctl 40046207 0 returned -16
23:36:11 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000))
r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="16335c8cfb186c71cbf93a8e1a57e2e90436042b95a1189c9a0d78ac29cd3d9559c70e02634babf5e5aa7f605d86e4a0d8a03e44fc174384ef1f4e8404d6f0ce0524d0eda7cbe372dd76ee125016a68ad60ffe0855c901fa3d6585834c36c7738d3e0750f87f66d96f68a7818f2bdaa25e558d545dd52d54fecc8295de696fc627ceeec70d9f4245de866708d6a119ee94197d5191e8c8c0d4453bfb56eec5bd249d596f913281bcf223ec9067f6a6e630fe2735ff0fa682d5f7e4e3ca08665c24bdbd327eeb72b524a5186f7194c30ba928d67f26d89e8a8135eb69c38589ef595384c1", 0xe4, 0xfffffffffffffff8)
r1 = add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffff8)
r2 = add_key(&(0x7f0000001280)='pkcs7_test\x00', &(0x7f00000012c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$dh_compute(0x17, &(0x7f0000001300)={r0, r1, r2}, &(0x7f0000001340)=""/31, 0x1f, &(0x7f0000001480)={&(0x7f0000001380)={'tgr128\x00'}, &(0x7f00000013c0)="9b52de2d8de5e9c35362f2e5dbd575bf36386b0d6ad37cefb524e0951ba33b861e5ca1f034c009a274f5de8ec173ddca1a8d95da987d1fcc66e125f84d42ce1d025c58bb58d778f116ebf35d0d216096fd93aba459c4c47343aca21f48375497cf04106aa33302ec7583c5d1bd0ccc1384749e0e36818b92c573ba40f76c8bac3904e5a98e041349f777221ae0e7340ebb947cb2f0ffc65eb8d9836c14969c6327f7574f8f04b659bdde4951ff196a3dc9c9f4b79146eb5509", 0xb9})
chroot(&(0x7f0000000000)='./file0\x00')
umount2(&(0x7f0000000200)='./file0\x00', 0x0)
r3 = accept$unix(0xffffffffffffff9c, &(0x7f00000014c0), &(0x7f0000001540)=0x6e)
getpeername$unix(r3, &(0x7f0000001580)=@abs, &(0x7f0000001600)=0x6e)
tee(r3, r3, 0x1, 0x7)

23:36:11 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070")
r1 = memfd_create(&(0x7f0000000040)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801)
dup2(r2, r1)
r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/31, &(0x7f0000000080)=0x1f)
write$sndseq(r1, &(0x7f0000000080), 0xffffff17)

[  429.257433] binder_alloc: 28922: binder_alloc_buf, no vma
[  429.263408] binder: 28922:28932 ERROR: BC_REGISTER_LOOPER called without request
[  429.271529] binder: 28922:28924 transaction failed 29189/-3, size 0-0 line 3137
[  429.280632] binder: 28922:28952 got reply transaction with no transaction stack
[  429.291296] binder: 28922:28952 transaction failed 29201/-71, size 80-8 line 2922
23:36:11 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
pwrite64(r0, &(0x7f00000000c0)="5662cdc265465e26a4ecc0528ebb5a050fe02674b9f685b2698bb7442ad8c0898b3006850fbe46fdf4519962548e4ca6605e506a0d9b4ef9c03ec26b8324ca8a29c3a576b9361f6b46c32631cf0a36aff82e854a792eecad76bad83aebaaab3bd2693c8e4b10c1fb46633a26dd0f30b51144ebf6e5ac02079fc2006047fb6d1828b94183f58bca914af4a137e4909dc8bb47a052b0a1b1a1b0718fedea843f1a964f2b7792e9d35c275323c813e582313ef4a541dfba4e4eeb0d0416401b03918a0ba56ae4f820c10c0b2e49eb45", 0xce, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x48, &(0x7f0000000080)="1e1c686b", 0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/l2cap\x00')
write$input_event(r2, &(0x7f0000000040)={{}, 0x3, 0xe000000000000000, 0x3400000000000000}, 0x18)
ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000001c0))

23:36:11 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040), &(0x7f0000013000)=0x4)
mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)="636c6561725f72656673007edb")
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
close(r0)

[  429.348453] binder: undelivered TRANSACTION_COMPLETE
[  429.353593] binder: undelivered transaction 564, process died.
[  429.366227] binder: undelivered TRANSACTION_ERROR: 29201
[  429.372550] binder: undelivered TRANSACTION_COMPLETE
[  429.547641] binder: undelivered TRANSACTION_ERROR: 29189
[  430.579689] pktgen: kernel_thread() failed for cpu 0
[  430.584879] pktgen: Cannot create thread for cpu 0 (-4)
[  430.590267] pktgen: kernel_thread() failed for cpu 1
[  430.595786] pktgen: Cannot create thread for cpu 1 (-4)
[  430.601150] pktgen: Initialization failed for all threads
23:36:12 executing program 3:
r0 = dup(0xffffffffffffff9c)
time(&(0x7f00000001c0))
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0)
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x101001, 0x0)
write(r1, &(0x7f0000000740), 0x0)
unshare(0x40000000)
fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getpid()
getresuid(&(0x7f0000000540), &(0x7f0000000580)=<r6=>0x0, &(0x7f00000005c0))
sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000600)={&(0x7f0000003040)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="c9cc444834a0ac2dd7e3dfa6ae9e85bb45d1615c67c0bd18a49fb075ef9a48d17d9e1fef67600cc55f04e19bc9772e2226030d77534dd55f01f36fe87aac318eeb6f24a35d8b976eec12bd4b6633cec601500f65243e118bdf1d83b27c4c3dcffdc32156a9fb05d37ebbd8b0c5c842eb226c2390af00773006a26ab9830840566eb560dc0c799544c0d0bd6cea43a41dd6a5959cd204220581f3592c6475a3f809d230423f93d1000000000000000000000000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="7eb6ca6f7913a57d8a8393d56c7aa566759b5f39ca481c317eea5502c618ec15f6a91d48204bee77eb25cda198a15486d9b78907071c89904d4694d02f0f1d8e1928cabfa58b6a38e73fdac6794c75e7d4ec0ec41085e92e6d1583ff7fac101633e144c23ff435d9430ce63e0cb43ad05c63b38d833552100cdefdcc5e1ef92139dbb244a4f5c4df9bd4fc53e5300dc3637baa86721223450f370ba2aa17629094bca6181969c5b02290894d3c7f2ad620a249f6040de21b8af9ef48985c0290118bd8458c2dd49a3e23f8fbea215b5f852929402fb87f7275dff04562df4fb39a7c59ed94e0f7cbd00418bd890637e008005500", @ANYRES32=r6, @ANYBLOB="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"], 0x18d0}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000680))
fgetxattr(r7, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000200)=""/5, 0x5)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
writev(r2, &(0x7f0000000400)=[{&(0x7f0000001680)="2582a931f75fca6bfec3bee9fd3bae839867c5efb9ba75738c6ceb1cfc3487d0bd06ad3d91cb7d7bae635af17055722d91c074be6dd7288c20c230ed51", 0x3d}], 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
timer_create(0x7, &(0x7f0000000280)={0x0, 0x2e}, &(0x7f00000002c0)=<r9=>0x0)
clock_gettime(0x0, &(0x7f0000000300)={<r10=>0x0, <r11=>0x0})
fcntl$setownex(r3, 0xf, &(0x7f0000000700)={0x1, r5})
timer_settime(r9, 0x0, &(0x7f0000000340)={{r10, r11+30000000}}, &(0x7f0000000380))
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000440)={0x0, @time, 0x81, {0x6}, 0x6, 0x1})
ioctl$TCSETAF(r2, 0x541b, &(0x7f0000000000))
openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x200000, 0x0)

23:36:12 executing program 2:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80800)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000040), &(0x7f0000013000)=0x4)
mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)="636c6561725f72656673007edb")
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1)
close(r0)

23:36:12 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000))
ioctl(r1, 0x800, &(0x7f0000000280)="025cc80700145f8f764070")
sendmmsg(r1, &(0x7f0000000000), 0x0, 0x8000010000000)

23:36:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000140)=""/50, 0x32}, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="fdfffffffffffffff7348ea650f6f114ae222cd627ab9e2f32c8de045132d720cf5edee3aa9e9e0254d462cbed00d50ecc8b0580d0ad1d734a825293f061cd8542640f930639476a932c2f505db9cd260b6e0c5c6e69a3d2e2aeb425a4e08c23a407e6201616057447bbe707da6bc1755891e8202346947edffd"], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b50863e8eb131997fe7b4af7d"], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r4}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
r5 = syz_open_dev$usbmon(&(0x7f00000004c0)='/dev/usbmon#\x00', 0x2, 0x100)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000300)=0xfffffffffffffffc)
accept$unix(r5, &(0x7f0000000340), &(0x7f0000000480)=0x6e)

23:36:12 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070")
r1 = memfd_create(&(0x7f0000000040)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801)
dup2(r2, r1)
r3 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/31, &(0x7f0000000080)=0x1f)
write$sndseq(r1, &(0x7f0000000080), 0xffffff17)

23:36:12 executing program 6:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @mcast2}, 0xbb)
r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='smaps\x00')
sendfile(r0, r1, &(0x7f0000000080), 0x3412)

23:36:12 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207000002000000de3158afc08e9731"], 0x10}}, 0x0)
rt_sigtimedwait(&(0x7f00005a1000), &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
read(r1, &(0x7f0000000280)=""/1, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

23:36:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528", 0x3)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  430.731170] binder_alloc: 29075: binder_alloc_buf size -6250095866585044648 failed, no address space
[  430.731569] IPVS: Creating netns size=2552 id=32
[  430.746461] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  430.760004] binder: 29075:29077 transaction failed 29201/-28, size 2366415452761933874-188762691200769743 line 3137
[  430.773813] binder: 29075:29077 unknown command 1048989707
23:36:12 executing program 7:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75700000000000db887974a9d4b8049e206606a808fcfe3dd31291f786cee92a2ed9cc0eeb0f6e1b21700557d7d321c616f2a69f975e5d5807683103cf48516fd96063603193e1cc3109ac8eeb3489d6a5d86eea6fc66adc6c92378d49", 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f00000000c0)=""/127, 0xffffffffffffff44)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x21c0}, 0x2a, r2})
lseek(r1, 0x6, 0x1)
getdents64(r1, &(0x7f0000000200)=""/54, 0x3a9)

23:36:12 executing program 2:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8000000008b0d, &(0x7f0000000000)={"7665000400", @ifru_flags})
socket$inet6(0xa, 0x7, 0x40)

[  430.781652] binder: 29075:29077 ioctl c0306201 20000140 returned -22
[  430.799173] binder: 29075:29077 got reply transaction with no transaction stack
23:36:12 executing program 7:
r0 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@l2, &(0x7f0000000000)=0x80, 0x800)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x8200})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001ac0)={<r5=>0x0}, &(0x7f0000001b00)=0xc)
getresuid(&(0x7f0000001b40)=<r6=>0x0, &(0x7f0000001b80), &(0x7f0000001bc0))
r7 = getegid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001c00)={<r8=>0x0}, &(0x7f0000001c40)=0xc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c80)={0x0, <r9=>0x0}, &(0x7f0000001cc0)=0xc)
lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000001ec0)="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")
sendmsg$netlink(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)={0x16a0, 0x26, 0x1, 0x70bd29, 0x25dfdbfc, "", [@nested={0x11c4, 0x3, [@typed={0x8, 0x50, @uid=r2}, @generic="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", @typed={0x8, 0x17, @u32=0x7f}, @typed={0x14, 0x7f, @str='/usr/sbin/ntpd'}, @typed={0x8, 0x5, @uid=r3}, @generic="82e89e67912c9a0782d118916e04654d8294cc6831a4cb7ebd0194c8771b94e974745ddebeb6b249170d2b656464df0f6620f3eabb31062b02823328f647c008f6b88fa4fcc8bc0c0b7ef8b2e2d71c727d8e3fa0784f1ef91f21f81585b8abc63cb5d37f7bced1d111952e1d2065fba676eb0864fe0d4eeae4d7deb59c53a7b1da238b701062546b6495a6d76b690696ab6505b50e057cdcd83e1e620aa9c704a94f6da29e30468ae5c4fa23672b7e0a6995e887c0ecb2cb5a3b8dacbfa6dd39fec88ebe56", @typed={0x8, 0x77, @ipv4=@remote}, @generic="c4d3767f1a3bc5cb82735b13a8000513d0583d3a88897e68449e808116b4c3431462c063509f89eb", @typed={0x8, 0x1b, @fd=r0}, @typed={0x94, 0x3, @binary="ea58353fd71da24936342bbbb6658436e1ab68808e7fa2e9bb39e4c50cb05955f183317ec307642f7d4656bb0a399d14a3648973814eed5a91b141c708824f1c8f53ecd16afda6074fe037b34f8205cbe18c8afc2105d16d1994d742c6a1bd01f2122c5aef57535182172684321cd20ef634e1f73d85d67b52764b4fff1ccd78643bcdea6503e690398a96db344982"}]}, @typed={0x4, 0x85}, @nested={0x30c, 0x4e, [@generic="3103d34fbf7714f42a47cf1e750438470f177489f6c06a32a843719c5706df1a41ea9e71d953f994090c15c85127837a99cd09217333585c1fa65cc8fc7eabab577cf290ebb9b603f7810bdcef812435e8ff15e4fc01d5524daed5582f5b8a0a02b69a19cef15189e27610e7e67280b4bd3ac8ab9ba2a465dac67ca88d46603fb99646fc752489b69d18aa6d7a7d97098e02dad77e35e856c6b2e23dc74fc5f603e5960649f020b6aebbedf3533c", @typed={0x38, 0x95, @str="74727573746564656d3076626f786e6574305c9b24706f7369785f61636c5f61636365737376626f786e6574302d6574683000"}, @generic="b9ff7199365446b7ab72752cf7d9f5e4fc997310a70859c38823adcbe9c9967d5d85bfb565b5713abd0771632b3a66965ee4ce96ff79c6aa7f78f23896ba034de3eee463bf25641a4cdb420a97dd01edadb685abf0341d3f59aea20f89f2a09046e58442950ecac2a1fafa4fece6aec078cf1382fafcf980a23dc3e434d6362a0fd1f58edd4ee2c59093a9f6b87a751ca173a2f15ba9c23719165c58f62b23ac3d0327184d70aba1b675bd180104320bafa4dd39185db039679e195e7bfb0c", @generic="321563a91a107453c6aab8b8168b92167a81c4d3fa67800b", @typed={0x8, 0x85, @uid=r4}, @typed={0x14, 0x30, @ipv6=@local}, @generic="f127887dd52c00ff0ca2016f8867b321539abc5be7194ab1b2613ed696d43b", @generic="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", @typed={0x10, 0x43, @str='/dev/zero\x00'}]}, @generic="4d83f7b455529eecd4629fc030f8dadacc8def0840822d6801d0ab4456ae6656cafc59df122f1715739dc8f22a0584a654849de8e02a93f9d939d09b83f976eea408dd0ee9eae1dd81f0f7e824e0e806c421a0633b1d63b49688f90429e954b65a2899809d0c8475583d40d3609865f38667051c4d06f6bf5d5783a88f7dee5b2839436ef794fc2d0cbc8e4e758174566a6d33ab63c2d8988cab19653f038245fef82508008fbefbaeca891bccc284b9a4004354fb72958c022ee0f697dc243c830bb8ba157804b514388628be5dcade624dbb784bef8e7594d25bd3a6f84c5504dc0ef99b41a0dc8c79fe047877a9c29adf8c84c56ba6", @typed={0xb0, 0x82, @binary="a5d71ebca7ed9e36599ff51bb313b0025c67f379664823384104afbc1bb2f50be6f3f6efc7df39bdd49aa57ac7bef748eaed81678f04441572a96bf49a8eec5a75d737a53c12ad448aeb32da5a8f4a296a6adb70c086cd29fb9bbadfaf3f78707459686e09854e2bb11ff1308017906674c6579a2fc66c5654325b05f6301e69333c35f08de1bff5c1873668d1af810c3f49396bd97c7a144dd81573f322e92ae4dfba91bad2a2dc2b1f917f"}, @typed={0x14, 0x2b, @ipv6=@ipv4={[], [], @local}}]}, 0x16a0}, {&(0x7f0000001a40)={0x18, 0x19, 0x100, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0x7e, @u32=0x81}]}, 0x18}], 0x2, &(0x7f0000001dc0)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r1, r0, r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}], 0x88, 0x80}, 0x20000080)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @local}, {0x14, 0x0, @broadcast}})
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x100, 0x0)
write$selinux_create(r11, &(0x7f00000001c0)=@access={'system_u:object_r:dhcpc_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7}, 0x46)

[  430.827464] binder: 29075:29077 transaction failed 29201/-71, size 80-8 line 2922
23:36:13 executing program 7:
unshare(0x40000000)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000300)={0x0, 0x80000000, 0x100000001})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'sit0\x00', @ifru_data=&(0x7f0000000040)="d7d0582ea3d2e9dd65b57c021ccf6ba003951d02cfd206e8e2eb43b217ef875c"})
syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0xc)

23:36:13 executing program 2:
inotify_init()
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
clone(0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300))
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4)
inotify_init()
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0)
inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x80000002)

[  430.869546] binder: BINDER_SET_CONTEXT_MGR already set
[  430.876784] binder: 29075:29107 ioctl 40046207 0 returned -16
[  430.897014] binder_alloc: 29075: binder_alloc_buf, no vma
[  430.903222] binder: 29075:29104 transaction failed 29189/-3, size 2366415452761933874-188762691200769743 line 3137
23:36:13 executing program 3:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
select(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)={0x0, 0x7530})
r0 = dup(0xffffffffffffff9c)
ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x3)

[  430.942343] binder: 29075:29077 unknown command 1048989707
[  430.948419] binder: 29075:29107 got reply transaction with no transaction stack
[  430.959037] binder: 29075:29077 ioctl c0306201 20000140 returned -22
[  430.970323] binder: 29075:29107 transaction failed 29201/-71, size 80-8 line 2922
[  430.989297] binder: undelivered TRANSACTION_ERROR: 29201
23:36:13 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
r1 = dup(r0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0x10)
sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x0, 0x7, 0x6, 0x6, 0x12, 0x200})
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
ioctl$void(r2, 0x5451)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

23:36:13 executing program 3:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r1=>0x0)
setpgid(r0, r1)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000e05000)=ANY=[@ANYBLOB="020d00001800000000000000000000000400040000000001000000000000000000000000000000000000000000000000080012000000030000000000000000000600000000000000000000000000000000001d00000000000000000000001000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff32a8000000000000"], 0xc0}}, 0x0)

23:36:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b630002d9b5cf71fe"], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  431.043844] binder: undelivered TRANSACTION_ERROR: 29201
[  431.075224] binder: undelivered TRANSACTION_ERROR: 29189
[  431.091051] binder: undelivered TRANSACTION_ERROR: 29201
[  431.098334] binder: 29152:29154 unknown command 33579787
[  431.111426] binder: 29152:29154 ioctl c0306201 20000140 returned -22
[  431.123320] binder: 29152:29154 got reply transaction with no transaction stack
[  431.131054] binder: 29152:29154 transaction failed 29201/-71, size 80-8 line 2922
23:36:13 executing program 3:
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x4033, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2})
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x402000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x3, 0x1}, 0x9, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x100, 0x10000000000000, 0x4})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080))

23:36:13 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
clock_getres(0x9fa26e329ae06eb3, &(0x7f0000000080))

23:36:13 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000100)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000070000000702040000000000"], 0x18}}], 0x2, 0x0)

[  431.140908] binder_alloc: binder_alloc_mmap_handler: 29152 20010000-20013000 already mapped failed -16
[  431.186291] binder: BINDER_SET_CONTEXT_MGR already set
[  431.191683] binder: 29152:29154 ioctl 40046207 0 returned -16
[  431.206979] binder_alloc: 29152: binder_alloc_buf, no vma
[  431.213376] binder: 29152:29173 unknown command 33579787
23:36:13 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100000000000000000000000000505aba84b9158877a4b8d53306b0ee2e48656d2db6b635fc45b95dfcf4aee95621e3edfba34c171efe4d8930c08b149bcee2905643cf2a31d0a21c109caab9b63ed121192e0b4feaf59bce00555b0e63cf790cd5bb559200000000099a1c4ed97fda0617c755ff5fea1b21bc572f576c1a83c219066c06e010dbba0c598acb83b3e020", @ANYRES32=r2, @ANYBLOB="00000000000000000c000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0)

[  431.229664] binder: 29152:29159 transaction failed 29189/-3, size 0-0 line 3137
[  431.237349] binder: 29152:29173 ioctl c0306201 20000140 returned -22
[  431.252369] binder: 29152:29154 got reply transaction with no transaction stack
[  431.259059] binder: undelivered TRANSACTION_ERROR: 29201
[  431.259145] binder: send failed reply for transaction 575 to 29152:29154
[  431.259882] binder: undelivered TRANSACTION_COMPLETE
[  431.259896] binder: undelivered TRANSACTION_ERROR: 29189
23:36:13 executing program 6:
prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1ffffffffffffc1a, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffffffff83be}]})
time(&(0x7f00000001c0))
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x14)

[  431.298150] binder: 29152:29154 transaction failed 29201/-71, size 80-8 line 2922
[  431.316886] binder: undelivered TRANSACTION_ERROR: 29201
[  431.329878] binder: undelivered TRANSACTION_ERROR: 29189
[  431.373407] netlink: 12 bytes leftover after parsing attributes in process `syz-executor2'.
23:36:13 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in6=@local}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000140)=0xe8)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x800, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x498, 0x270, 0x140, 0x270, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f00000007c0), {[{{@arp={@multicast1, @empty, 0xffffff00, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x2, 0x8, 0x1000, 0x9, 0xfa8f, 0x10000, 'bond0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x0, 0x8b}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @rand_addr=0xfff, @multicast1, 0x0, 0x1}}}, {{@arp={@multicast2, @multicast1, 0xffffffff, 0xffffffff, @mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff]}, 0x0, 0xffffffffffffffc1, 0x81, 0x6, 0xf1, 0x400, 'vcan0\x00', 'bridge0\x00', {0xff}}, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "520a7a796e9e1db6ef30ab51781b0b541a9ebfc0242cdceef6dd48eadb18"}}, {{@arp={@broadcast, @rand_addr=0xffffffffffff671c, 0xffffffff, 0x0, @mac=@broadcast, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x9, 0x37, 0x2, 0x1, 0x256, 0x8, 'ip6gre0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x9}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @loopback, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000740)=0x8001)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000780))
setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x4a0, 0x0, 0x0, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000001c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xe}, @empty, @broadcast, @rand_addr=0x46e5, 0x0, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x3, 0xffffffff, 0xffffff00, @mac, {[0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x3, 0x9, 0x8000000000000, 0xffffffffffffffad, 0x3, 0x6e94781f, 'veth1\x00', 'veth0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast}}}, {{@arp={@loopback, @empty, 0xffffff00, 0xff000000, @empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff]}, 0x5, 0xffffffffffffff33, 0x5ae8, 0x1c000000, 0x6, 0x447, 'ipddp0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x1a8}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0xd5b, 0x3}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0)
setsockopt$inet6_int(r0, 0x29, 0x40000000000c9, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'ip_vti0\x00', {0x2, 0x4e22, @local}})

23:36:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
write$cgroup_subtree(r0, &(0x7f00000001c0)={[{0x2f, 'cpu'}, {0x2d, 'pids'}, {0x2f, 'cpu'}, {0x2f, 'rdma'}]}, 0x16)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:13 executing program 3:
r0 = syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000002c0))
r1 = dup(r0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

23:36:13 executing program 5:
r0 = gettid()
unshare(0x40000000)
r1 = syz_open_procfs(r0, &(0x7f0000000080)="6e65742f69665f696e65743600689d001e363b6c264fa887a26fda3eca58373161f13a12a92be6a993b4720d86396a9b1cc039d178e14492de97786eb30b86bb0ae2163b7ed177ff87e312d09bd390ce2ce4d13622dbc9d6b533c3f99225e401466f9ef8a9ea53c0f11c5a10cf9677596ce7721105a3ac3b287b2ca64a5ad4aad7c941387ab5acedea8f64c584562f2a3eb7aac4df59716b44156fd857da4ad2")
sendfile(r1, r1, &(0x7f0000000000)=0x10, 0x5)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"])
rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0xbb})
ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/91)
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50227}]})
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5)

23:36:13 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x100000000, 0x4})

[  431.573173] binder: 29215:29220 ERROR: BC_REGISTER_LOOPER called without request
[  431.621657] binder_alloc: binder_alloc_mmap_handler: 29215 20010000-20013000 already mapped failed -16
[  431.645986] binder_alloc: 29215: binder_alloc_buf, no vma
[  431.646107] binder: BINDER_SET_CONTEXT_MGR already set
[  431.646117] binder: 29215:29220 ioctl 40046207 0 returned -16
[  431.658873] binder: 29215:29220 ERROR: BC_REGISTER_LOOPER called without request
[  431.658919] binder: 29215:29230 got reply transaction with no transaction stack
[  431.658928] binder: 29215:29230 transaction failed 29201/-71, size 80-8 line 2922
[  431.659440] binder: unexpected work type, 4, not freed
[  431.659443] binder: undelivered TRANSACTION_COMPLETE
[  431.659487] binder: undelivered TRANSACTION_COMPLETE
[  431.659502] binder: undelivered transaction 581, process died.
[  431.663089] binder: undelivered TRANSACTION_ERROR: 29201
[  431.713397] binder: 29215:29228 transaction failed 29189/-3, size 0-0 line 3137
[  431.727184] binder: undelivered TRANSACTION_ERROR: 29189
[  432.889896] pktgen: kernel_thread() failed for cpu 0
[  432.895105] pktgen: Cannot create thread for cpu 0 (-4)
[  432.900500] pktgen: kernel_thread() failed for cpu 1
[  432.905648] pktgen: Cannot create thread for cpu 1 (-4)
[  432.911310] pktgen: Initialization failed for all threads
[  432.998502] pktgen: kernel_thread() failed for cpu 0
[  433.003664] pktgen: Cannot create thread for cpu 0 (-4)
[  433.009153] pktgen: kernel_thread() failed for cpu 1
[  433.014317] pktgen: Cannot create thread for cpu 1 (-4)
[  433.019705] pktgen: Initialization failed for all threads
[  433.118246] pktgen: kernel_thread() failed for cpu 0
[  433.123381] pktgen: Cannot create thread for cpu 0 (-4)
[  433.129532] pktgen: kernel_thread() failed for cpu 1
[  433.134732] pktgen: Cannot create thread for cpu 1 (-4)
[  433.140144] pktgen: Initialization failed for all threads
23:36:15 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000044000))
getsockname(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000280)=0x80)
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/keychord\x00', 0x145880, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140), 0x8})

23:36:15 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

23:36:15 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528", 0x3)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:15 executing program 1:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0)
r1 = gettid()
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='fdinfo/4\x00')
fcntl$getownex(r2, 0x10, &(0x7f00000000c0))
exit(0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x3, 0x1, {0xffffffffffffffff, 0x1, 0x6, 0x3, 0x3}})
socketpair(0x4, 0x806, 0x2, &(0x7f0000000080))
write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x1, {0xe0, 0x2, 0x4}}, 0x14)

23:36:15 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000200)='vcan0\x00', 0xd95fc62d0aaf1d50)
write(r1, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648", 0x26)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0)
sendfile(r1, r1, &(0x7f0000317000), 0xff8)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e24, @multicast1}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040))
prctl$setendian(0x14, 0x1)
socket$inet6(0xa, 0x2, 0x800)

23:36:15 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070")
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0xffffffffffffffff)
ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080))
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='/dev/sg#\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x26)

23:36:15 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
fgetxattr(r0, &(0x7f0000000640)=@random={'user.', ',{,posix_acl_access.pbdev*\x00'}, &(0x7f0000000680)=""/231, 0xe7)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$RTC_PIE_OFF(r3, 0x7006)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$invalidate(0x15, r4)
r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xbc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08631040", @ANYRES64=r5, @ANYBLOB="0200000000000000056304400000000000634040040000000000001000000000000000000000000001000000000000000000000018000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000400000000000000"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000078000000000000001800000000000000"], @ANYBLOB="066304400400000009631040", @ANYRES64=r5, @ANYBLOB="03000000000000000e630c400300000003000000000000000e630c4002000000000000000000000008631040", @ANYRES64=r5, @ANYBLOB="000000000000000006630440020000000b630000"], 0xd7, 0x0, &(0x7f0000000500)="e44f784f3afa6e119d64c83c23920e4ac87e7936ef807b0848e2f273a8317891df9d2429f2ca8cde0df83de40b35904c2f96dcfb46df811a0235f198bf3a9d184bb0879e5f089e25d204941087a039523ba6309ab0ace67de21af5d0c732d236de62c0c6527ccaeeb69f247509d30fb7f7ae8f1131fbbd0a7960b66fc821df600dcef5094e9ba410d457e5034f0c1fa28a4c1e37af3279f30c848521ffe784fa9e8d94ca2fca8a8590e4a73b5fcbcc5e46e9373f0e273c95acba957ceae695c23842963eda63c0e4a792e3db03e44696f5a8113b045197"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000600)=[@register_looper], 0xc6, 0x0, &(0x7f0000000380)="f0"})
execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000a00)=[&(0x7f00000002c0)='keyring/vmnet0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='ns/user\x00', &(0x7f0000000840)=',{,posix_acl_access.pbdev*\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='user.syz\x00', &(0x7f0000000980)="6e6f6465765b5b5dd200", &(0x7f00000009c0)='bdev,!\x00'], 0x1000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000003c0), 0xfffffffffffffd62, 0x0, &(0x7f0000000880)="fed9114924351ee47beb110606e057cd8330a593462c18531685"})
finit_module(r2, &(0x7f00000001c0)='/dev/binder#\x00', 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000780)=0x4)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x100, 0x0)

23:36:15 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0xff, {{0x2, 0x1000000004e20, @multicast1}}}, 0x65e)
mq_open(&(0x7f00000000c0)=',\x00', 0x40, 0x28, &(0x7f0000000180)={0xa14f, 0x1, 0x800, 0x2, 0x9, 0x8001, 0x6, 0x5})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
gettid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
r4 = getpgrp(r3)
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r5=>0x0})
rt_tgsigqueueinfo(r4, r5, 0x28, &(0x7f0000000140)={0x8, 0x9, 0x3f, 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000100), 0x4)
mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil)

23:36:15 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a)
clock_gettime(0x0, &(0x7f0000000200)={0x0, <r4=>0x0})
recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r4+10000000})

23:36:15 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00')
fchdir(r0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

23:36:15 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x40000000a}, 0x1c)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0)

23:36:15 executing program 7:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070")
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r1, 0x407, 0x100000)
r2 = socket$inet(0x2, 0x2, 0x0)
bind(r2, &(0x7f0000000200)=@in={0x2, 0x4e20}, 0x80)
sendto$inet(r2, &(0x7f0000000240), 0x22c, 0x0, &(0x7f0000000140)={0x2, 0x8004e20}, 0x10)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000640)=0x10, 0x4)
recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000700)=""/172, 0xac}}], 0x1, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380})
vmsplice(r1, &(0x7f0000001340)=[{&(0x7f00000013c0)='6', 0x1}], 0x1, 0x0)

[  433.306459] binder: 29264:29271 BC_INCREFS_DONE u0000000020ffa000 no match
[  433.323789] binder: 29264:29271 got transaction to invalid handle
[  433.344486] binder: 29264:29271 transaction failed 29201/-22, size 24-24 line 3014
23:36:15 executing program 2:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x2081fc)
ftruncate(r0, 0x6)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x90)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0)
readv(r1, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/233, 0xe9}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000003ec0)=""/61, 0x3d}], 0x3)

[  433.381267] binder: 29264:29285 ERROR: BC_REGISTER_LOOPER called without request
[  433.408317] binder: 29264:29271 unknown command 536936448
[  433.413969] binder: 29264:29271 ioctl c0306201 20000940 returned -22
23:36:15 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80ffffff, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0)
r1 = memfd_create(&(0x7f0000000080)='cgroup\x00', 0x2)
signalfd4(r1, &(0x7f0000000000)={0x9}, 0x8, 0x800)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x4)

[  433.426674] binder_alloc: binder_alloc_mmap_handler: 29264 20010000-20013000 already mapped failed -16
[  433.445471] binder: BINDER_SET_CONTEXT_MGR already set
[  433.450712] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  433.457296] binder: 29264:29285 BC_INCREFS_DONE u0000000020ffa000 no match
[  433.470341] binder_alloc: 29264: binder_alloc_buf, no vma
23:36:15 executing program 2:
r0 = eventfd2(0x6, 0x20000000080000)
fcntl$setpipe(r0, 0x407, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000280), 0x1d9, &(0x7f00000013c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000000000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="09000000000000000011"], 0x14}}, 0x0)
fcntl$getown(r1, 0x9)

[  433.476363] binder: 29264:29285 got transaction to invalid handle
[  433.482646] binder: 29264:29271 ioctl 40046207 0 returned -16
[  433.489775] binder: 29264:29297 transaction failed 29189/-3, size 0-0 line 3137
[  433.498408] binder: 29264:29285 transaction failed 29201/-22, size 24-24 line 3014
[  433.508467] binder: 29264:29306 unknown command 536936448
[  433.514129] binder: 29264:29306 ioctl c0306201 20000940 returned -22
23:36:15 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', <r1=>0x0})
sync_file_range(r0, 0x7ff, 0x1, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_FLAGS={0x8, 0x8, 0x415}, @IFA_LOCAL={0x14}]}, 0x34}}, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0)

23:36:15 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f000000f000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@local, @in6=@ipv4={[], [], @rand_addr}}, 0x0, 0x3}}, 0x50}, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, 0x8040)
r1 = dup(r0)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x1, 0x5, 0x4})
ioctl$int_out(r0, 0x2, &(0x7f0000000040))

[  433.529258] binder: 29264:29305 ERROR: BC_REGISTER_LOOPER called without request
[  433.545976] binder: release 29264:29285 transaction 589 in, still active
[  433.558355] binder: send failed reply for transaction 589 to 29264:29285
[  433.594096] binder: undelivered TRANSACTION_ERROR: 29189
[  433.600338] binder: undelivered TRANSACTION_COMPLETE
[  433.608281] binder: undelivered TRANSACTION_ERROR: 29189
23:36:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
r3 = gettid()
syz_open_procfs(r3, &(0x7f00000001c0)='mountinfo\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

[  433.641629] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  433.696385] binder: 29322:29323 ERROR: BC_REGISTER_LOOPER called without request
[  433.707126] binder_alloc: binder_alloc_mmap_handler: 29322 20010000-20013000 already mapped failed -16
[  433.716853] binder: BINDER_SET_CONTEXT_MGR already set
[  433.722585] binder: 29322:29323 ioctl 40046207 0 returned -16
[  433.722655] binder_alloc: 29322: binder_alloc_buf, no vma
[  433.722698] binder: 29322:29325 transaction failed 29189/-3, size 0-0 line 3137
[  433.723161] binder: 29322:29326 ERROR: BC_REGISTER_LOOPER called without request
[  433.723384] binder: 29322:29325 got reply transaction with no transaction stack
[  433.723393] binder: 29322:29325 transaction failed 29201/-71, size 80-8 line 2922
[  433.723689] binder: unexpected work type, 4, not freed
[  433.723692] binder: undelivered TRANSACTION_COMPLETE
[  433.728520] binder: undelivered TRANSACTION_COMPLETE
[  433.728535] binder: undelivered transaction 595, process died.
[  433.794762] binder: undelivered TRANSACTION_ERROR: 29201
[  433.805351] binder: undelivered TRANSACTION_ERROR: 29189
23:36:16 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528", 0x3)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:16 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4200, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r1 = timerfd_create(0x0, 0x80800)
mq_open(&(0x7f00000000c0)='keyringppp0loem0vboxnet0\x00', 0x0, 0x20, &(0x7f0000000100))
timerfd_settime(r1, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0))
readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/88, 0x58}], 0x1)

23:36:16 executing program 6:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

23:36:16 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
fgetxattr(r0, &(0x7f0000000640)=@random={'user.', ',{,posix_acl_access.pbdev*\x00'}, &(0x7f0000000680)=""/231, 0xe7)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r2, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x1, 0x0)
ioctl$RTC_PIE_OFF(r3, 0x7006)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$invalidate(0x15, r4)
r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xbc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08631040", @ANYRES64=r5, @ANYBLOB="0200000000000000056304400000000000634040040000000000001000000000000000000000000001000000000000000000000018000000000000001800000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000400000000000000"], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000078000000000000001800000000000000"], @ANYBLOB="066304400400000009631040", @ANYRES64=r5, @ANYBLOB="03000000000000000e630c400300000003000000000000000e630c4002000000000000000000000008631040", @ANYRES64=r5, @ANYBLOB="000000000000000006630440020000000b630000"], 0xd7, 0x0, &(0x7f0000000500)="e44f784f3afa6e119d64c83c23920e4ac87e7936ef807b0848e2f273a8317891df9d2429f2ca8cde0df83de40b35904c2f96dcfb46df811a0235f198bf3a9d184bb0879e5f089e25d204941087a039523ba6309ab0ace67de21af5d0c732d236de62c0c6527ccaeeb69f247509d30fb7f7ae8f1131fbbd0a7960b66fc821df600dcef5094e9ba410d457e5034f0c1fa28a4c1e37af3279f30c848521ffe784fa9e8d94ca2fca8a8590e4a73b5fcbcc5e46e9373f0e273c95acba957ceae695c23842963eda63c0e4a792e3db03e44696f5a8113b045197"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000600)=[@register_looper], 0xc6, 0x0, &(0x7f0000000380)="f0"})
execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000a00)=[&(0x7f00000002c0)='keyring/vmnet0\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='ns/user\x00', &(0x7f0000000840)=',{,posix_acl_access.pbdev*\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='user.syz\x00', &(0x7f0000000980)="6e6f6465765b5b5dd200", &(0x7f00000009c0)='bdev,!\x00'], 0x1000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f00000003c0), 0xfffffffffffffd62, 0x0, &(0x7f0000000880)="fed9114924351ee47beb110606e057cd8330a593462c18531685"})
finit_module(r2, &(0x7f00000001c0)='/dev/binder#\x00', 0x2)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000780)=0x4)
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000800)='/dev/vga_arbiter\x00', 0x100, 0x0)

23:36:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)

23:36:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x400000, 0x0)
write$selinux_user(r3, &(0x7f0000000300)={'system_u:object_r:hald_log_t:s0', 0x20, 'system_u\x00'}, 0x29)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

23:36:16 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8)
r2 = dup(r1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x2007fff)
sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe)
sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, &(0x7f0000000040), 0x273, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x1a)
clock_gettime(0x0, &(0x7f0000000200)={0x0, <r4=>0x0})
recvmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x1ab, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/110, 0x6e}}, {{&(0x7f0000001d80)=@sco, 0x80, &(0x7f0000002280), 0x97, &(0x7f0000002340)=""/114, 0x223}}], 0x2, 0x0, &(0x7f0000002840)={0x0, r4+10000000})

23:36:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970")
r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x100000001, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1)

23:36:16 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00000000c0), &(0x7f0000000040)=0xffffffffffffff58)

[  434.097170] binder: 29336:29339 transaction failed 29189/-22, size 0-0 line 3014
[  434.113590] binder: 29336:29339 transaction failed 29189/-22, size 0-0 line 3014
[  434.131090] binder: undelivered TRANSACTION_ERROR: 29189
[  434.169599] binder: undelivered TRANSACTION_ERROR: 29189
[  434.367574] binder: 29350:29351 BC_INCREFS_DONE u0000000020ffa000 no match
[  434.378979] binder: 29350:29351 got transaction to invalid handle
[  434.389052] binder: 29350:29351 transaction failed 29201/-22, size 24-24 line 3014
[  434.415995] binder: 29350:29365 ERROR: BC_REGISTER_LOOPER called without request
[  434.431993] binder: 29365 RLIMIT_NICE not set
23:36:16 executing program 7:
socketpair$unix(0x1, 0x600000005, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x400000, 0x0)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040))
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000000fe, 0x0)

[  434.463208] binder: BINDER_SET_CONTEXT_MGR already set
[  434.468744] binder: 29368:29370 ioctl 40046207 0 returned -16
[  434.477502] binder: 29368:29370 ERROR: BC_REGISTER_LOOPER called without request
[  434.491846] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
23:36:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x620000, 0x0)
ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000280))
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:16 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4800, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}}, 0x0)
ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000140)=""/240)

23:36:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x7ac)
ioctl(r0, 0x100008912, &(0x7f0000000680)="025cc80700145f8f764070")
mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0)

[  434.510880] binder: 29350:29351 unknown command 536936448
[  434.524081] binder: 29368:29371 got reply transaction with no transaction stack
[  434.532397] binder: 29368:29371 transaction failed 29201/-71, size 80-8 line 2922
[  434.548830] binder: 29350:29351 ioctl c0306201 20000940 returned -22
23:36:16 executing program 5:
r0 = memfd_create(&(0x7f000000e000)="000f", 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001200)=""/55)
clock_gettime(0x0, &(0x7f0000001040)={<r2=>0x0, <r3=>0x0})
write$sndseq(r0, &(0x7f0000001300)=[{0x600000000000, 0x1, 0x5, 0x5, @tick=0x400, {0x8001, 0x5}, {0x1, 0x2}, @quote={{0x7, 0x1000}, 0x6, &(0x7f00000012c0)={0x4, 0x53, 0x33, 0x800, @tick=0x3, {0x8, 0x100}, {0x101, 0x85}, @time=@tick=0x7fff}}}], 0x30)
write$sndseq(r1, &(0x7f0000001080)=[{0x81, 0x4e31, 0x4, 0x0, @time={0x0, 0x989680}, {0x7fffffff, 0x6}, {0x1ff, 0x2}, @raw8={"cf5163fb14af7fae32a3c3f2"}}, {0x1, 0x7fffffff, 0x8000, 0x5, @tick=0xdf12, {0x9, 0x5}, {0x0, 0x6}, @raw8={"904ec092a3b77dc5284a0ac8"}}, {0x8ef, 0x8, 0x7, 0xd54, @time={0x77359400}, {0x7, 0x7ffffffb}, {0xffffffffffffff7f, 0xff}, @ext={0x1000, &(0x7f0000000000)="14ce7e4c4ea8a6295033af0c0ae0701a53815416b96f3b74570e895a87f0e2728891ab0d0536538caf92076850502f1dfec0964d17c0baab643fe6a68254bbd46e362062e5f7760d880392a36c8588c256572b2840353f8a79deef18685c2cb33d20ce5d4f5665d3c7dcc516eafa2740c2c6bdc37bcce1e1087dcec02f91fe3b58f7872129d814bf247b3888a53621c0c0ecf4674725c61279616871aaf3bf8a10cbc1129618869675caf9af64fdb8b8262d80d23c297b9c1faea2ae9b7e602fc92045015ca17b64ac1fb30973202ca033b8fc10b45d597b876bc3b883d810bd63dbc59c3931cb258e125760f4e378577fdc83d54cffd4f90d7385c90446b5f4d268783c8cdb12637863a46a01f325d54f8c8c2262b894f8620b014d45066f30a266435ad8221051194cecab87d9b5c73e73d87185fedee157ba2d5a4464aae1948cacff1ff5ac03d6021b3acdf9e470ef84d62b04c199e1369c2de7e58ad0ec7a8fa01a0f1ba39f3a925bc7537365f81b0bda23ad8cfcdd515b3577c8d73a494a9c24279dc6bc97bc0e7b9272368aa88af45632a6053f1730f5e830774c1736408c20b03e688049edf5cf2981a0fe06aeeb48eec66055b4d6070a629f223d488002068e2a5647a2d8981299ef0e3d898db8fbad819c8778fa2239a5c8fb4ca9f802095f0cc80dd929b90f87aac8cdcc32158c88b55546738c283789deb29fb491fd1510f488abbe6678da519ff6cd3985a1087de965c44fdbdae2cc2a94837496e22f43a027e0df022b07d6ed34a1c852739377de03f9703700cf84aa65e3e32c65362a666ca934a42acd5bbf1e0ce4e032cf1c530c8daa67bdc71036323df83e6ed124d3abebea15e6a938c856a5236ecfa55a894a90faadc4ede2b736e6ed8ac618df590119ab6f58c385c7f8f53809e0e93ce7587220d6a2b5fee62d0af8dfaa573c2a1c13c71ac39854b6000e6d8d6cb560e67df3fa28dd0e3885ad543b267d4897452c341d909b1ef55cc663ff0f3dc5815a0b374f1fa658422aed4a958014da2485955cacf332aadedbeabc0d96ed6a5085d2db863b922bba7b6a52dd98f32823a13becbb3e85d89c87976ac5e111cf523a6f25cb6d092675cfff25965acba2651f65ca716f8fe456ec5734b72c93f3e3a1faa2684bc6e38baefdf104a4180fcca8aa2987838e61c46723bc63bfaf3b822a3b65b6a82af3d1a17413de4d586f5cf7656f050e0b28c8045c088c84ca9133dd68a34ef61733ee3e3886478ab22a7e7d9a9ba947997074bc6dfe246162389ede38e270669db307ea72d98ac5b6e00931935b4922f2dc83f7cb9efa7db5d55cfec3fe4a6448ab7ede86ec89fc2e87c47b891c2d8c83a462aceaa56f4601a0f624410a8578c613e6cd960fad9c3365634816a2f35e9b38cb78b596d48ad747802ac5ac8ca1db63222af320fd9ab69ea8b9061cc97c0bbbac5b797001c9e0e2ef84f7f0c3c348e877bfc4e0ebc8e79ff9a88112fd637fa315840d88b34f55782302a6ddc493a834ac5139012dba36f3ffacaed3cc215a4e8d537bca231a30a1c422ef1db5b0ba18407606d74d60d4bf2f0bd5f9cc2e827b93c86fae988056d559c1bcb44bdff0d8535d88d09f6fb40e315abd47a679feed2023e001d8bb1d290982760bd3aa161d1ad9a0502a8a978c9e0a876c879a34f87226f657babd95d23315bf3ec206ea0212b634c3dc684edaa907e9ae13310d8073d484aa5a58a288110e0c84caf27a665c9892d72f365fe0faf73ded79de3c4cdadec2cf198e856f4cbcba37799514991ff883ae757ee213719c3e8dc7503a3019223960ad6a4f168426ac0044a68a434059afb5977e1278271cb814815ee13d453d22c4ef298e69fa05dfd131a3bbc2ce03cea209c8297afeb95e53d1f63e8610970e46971a248778d287350e5f4d15c9f7a6596217435442000fab5b3b88579fd7e0ccb85f2f26fa9f31a166d555f84b92ed06086322bbf4be8b2e24dac446c4aa923ffd326397af2bfd25936d5c8a9c1e14e5a5f0caead2b3abfe8e610bda853e960310d9c51ab6d9703e15b18e069ae739d5a4122df1ca9884c44cce2eb3076ebec148a7f982b711ab37a52a65fcbfac5acb350c822106abaab6cb6362ef22ca96b738916efdbe32daad53169144364db84d94cf6e8fa1e017045a6b729790ea977d2b2b543e11359b89f110fbb80f9f0fc35ddcf113920e42da8dc74becef2aff1efb981f089d68263e8d4772c70adb4dd060228ef2b211a7d32fcddc873a839aa32de00fa9a4c366ebf4ad5961b103b70be04db9cc407fee51b11a1af9704368a82243f932d839f1d26fa424001664b7cc95a0fe29ce7bb12e04e6786b7d581ba1555edc46bd9b9c50c2cc0f7198feabbff9332562435effca47edbbeade17e938ffd6928f0cc2d160af497a4c508c15e364e499f5268cd33c6c972c21ce0a95d255fbe886b3874dd0a43ca68110903f5d30fcb52bdd755951b1a318861f9fad338653368ca37cb67d60e1817dc9c21bc042d01d0d08469f6148870f046a2da4720b29a2a2a4601eda0a456e854dc4ae73e67a05fd46fbe4aebaff916f8d934a6a1b006502229e920ccc082da88582022e545b781900da56a01cc9944da6cdab675ee692dbae6d4821684466fb80be310f210ff48146e3512e3b2fde7283eb6465762f643df2ec8032f73c5d5b531ff8ff2735bc214f904e723150e2693e3828a6f5240af92eae4ce3d2c0a8466f4cfb25697ed8da001cee6d4601531f08a64443da1eba9d34cb940e2a940385e284714c50432ad48f1b6e2d9c38a01a233159cd43930a9395572d3a12c29078b3bc109e3578b6dd453fb572aa68826b2ca3d03c8f93946557db9becbe0e2eb4a434845324513d093f4e7b45df6cbc07bb5fc62b9a08ebd4e67884b412d68eaaeba4024985391b6c3a29256ba939f876f30c85f61be0fcbd0ef23389d91ffb501ce85f7f779e216badcd555e702ff74f721b393bc0c358374cdb88a9b6ae0dca9a5e1b4037cd7533bcc671a38cdbdbf7e5173b5c3a754e06b6e16c423e37e8ed1293aec1416743f64c35c70df943284d86523ef497463d598a75cfdbbaa318ed458c0989c88317bc0ad6817cb0ae47e3ca09ef280578287d9e6607e31a9f620522bfb2259193ebfa1d231c4628448e73c94a2d94904976030e80eeddd2c038b67edafeef6e42bdd90f478531218b2d0dd0cf5d65fd12be7479e18f783eb9da1a69d863ca6fb4f6d8c456a6e3da7af80ccc8e6d842ab6e04acc11af2a8e5ab80d93d0432a0f34fe1160bab5f14c3ff75cb4817758446ebfcef488f9c9a74fbb09063369b6f3d00bda326844e42df1a51bf0ca1ce6d3ae2ac4e8644bb640f2acc0128ddc7c0cded0607dec3cd131c6b378f83ed12769d96f1a94dba07be8fa6028bb938b22d7407295019b902641cfa676815cfdcac1a6696595df42941526ebadcf8880934f10603e34e015eca44ff0bebaf0f3686f5b5fc52953f7eac017aac7a1fb181037f9fa6e60ef944313f912e6f086242855f5d1dee79d55148286a0e193c14a54c94c6ac5945cf31f2eb42976efa781f313783bec875c2b58f2c9d29d59cbf4c6e3d5edbe90684ed57992d9e2c1ae1b3de82a522ba35865d078dd00db913ddabdc7558b6f663b3f4b632f74dc3fed9e86be1ac793688ef4c8b3ddb7ab19c51fadd0fb4b040da9faa4322abbe8acd66ff94a883663b5cd5402f25ba64a4f751e403711b76a1263a92a22fcf96820d9b97684f7b2b7d902a14fa7bf719e1dfb8857608446aa43b9464ab5e0705435418aa602d3fd818734246a463d1fc35ee1dc7469e2111733ea3db2c30d765dc909c44156a848ad19bd8acc9bb21a8b1dd6302a35e48e1b8c9af784c59c0e90dfdd58538685ffb150cd32d37afce624799e48659098ec1d13afab4e57abd32633d1b6e29b07a6f53b6338aec346a16f02f8304a772a3446c209d9db0739ad9da648f4fa3f0b538b25974c6975db97fca174d4acd1d324704ec09e8e140651c926bed26a063e589af05418110c9be5f2b73ddc0cc87bf4d7dbeec01554e1ea887a772a1cbf8f6fc5e69c22395e0c4525c00fa0dfae4160faba5bb12f7deb6772d8bdfa48f7185b847cc28e3784db0a8d386303c9aa820813718ff3ee8f9f1c251f9453ccc520533a333d83ed9a71ea77879ef87e770ead30e9cb19515cec59108d7ac7af2294a6f97b7ea07ea56fce88eba585d11f2708c69a568ebb934e2b12caeffd9a04a5fe22f62d16df7e25c5c9236aff2f94f91a014ce1f374a2217268817768090bf9fe82fc5543c0754259a3afb46405f2fc45dad5514fddfdb3045c60f6609fa5d6f05e9ab9f399f2b1014e98be592bf33a7ab47bbada5f6288c18783c69d29a2a3b10c0da4d42114b5e8e48b70129bb77103ecf7e47446c53612d59a3830ef8504677c330647b2df277e44546f3e0ef2ac4eff2d35729bcc37ee06d4dc4d8809016c04531f2b290d7ec6f8b0b37ac29e8388c2bfbb0df167f9b7497ad7eac2e3721571a26658a7cb474a35ea3f4124c8112561e42ee1b5175559964df7984206ad7163fe3ece0bad0236a985abbbffc0dafeb95d24a9c37b9ed7ee62a51c09c8d2dee2c83ba5367b04ed490d52465e1f4a4f42dc3c77cbc0ef7afa0bae100203917ba236714b3ab1c2e4d0495debd1ec1d10316d3a0806ceeba023ac74f6bbad3ba95e985f1eeb8f173e22339120968434f17cf8913eb8360041e02cf012e0b1f3ebca81ad8d555b49ad3b26cb2b2dc28ec1c5bbb8f22ccde8db1cb54153ada35d673e502f92378d67a515cecb82a71aba4a2a850ce14eec8dc4258d48697d1946387396799ee8776334907ba8881f5c2e71bbc4f2ad402f5e48edb6821d8100f61e7817d8cc1a8d4cec6e8656e4b33ed84af060627bac89b6cfc5ad155c01b437d60bfe066740c25c7a1aa6eed6478467a82bbeaf6d4bf714750f667ff4b3171c5f7b7beb5c2e9f852b1052656ec78cd1e64f72bb2a35d5982a0ddd611f0c7e7285827f5f2a113daa660198032d8711b1c2646d4fc2a8260ad2714b110d0e6592178cb00eb8ad769c748cc8324515e3b60143b4271bb139bb290911312b243b8357e8a90f70bcdefbca654a2b20a6d9ccf437ab75212f76ceb22eb28fd53727c111bd1bff79686f268b8ad01a4745a9e8383c90a00c8feb92c4060b2e6b277e0a18e5e479a6d400eedc5ce4e7735db894fbb32d71d9017038ebb75618d12bc20e3b7f5f9913c1f51842d45ec81ed4f303e3165c8b1f92519f2286a7b74669b7a6547ef6a7145bd408fa2334eb234fad0236044070a23378b1634ef6f377e048f06bfb4be9d87bcabe0c25c2e04192379fdf1e3689ddc32757cfa6e83c28513aa24388b5ca63f57c1fce154d1f85e71da3d36ab0611441669641b4f9314634358214c0a33b5b70aa5cb4581c0611cee9644b74b159d1334c4e8ad631e53c0de7c199c97f5a5d96b62704375b578f4b6f8bc5332420db31ac58f5d6145b2e2338556f2aa8f7afd3f25a9efb8c9d61c15537f37ef8230547530f4938ffc7d6f5805347d09cae8b9ca62ab4f7972bc5ef5b6f8711762232ddd541ce084df6c72551a35e7c60bbc6354b1d731283824694b983d3f63852c5e0aad034f816b176c1325a423345eec3acfaf7b4f051295f602302d0da8bd8f501e9982d886b9e693d96e675cd7ddf591997ac41def77f13d30fbaac30edf82908d912abc3a8e06142895518f6f603a36b1013c655fcccef662a"}}, {0x8, 0x8794, 0x80, 0x400, @time={0x77359400}, {0x7fffffff, 0x4}, {0x7fff}, @quote={{0x9, 0x9}, 0xdea9, &(0x7f0000001000)={0x1, 0xffffffff7fffffff, 0x7ff, 0x1000, @tick=0x400, {0x1, 0x2}, {0x10000, 0x1}, @control={0x40, 0x9, 0x1}}}}, {0x7, 0x6, 0x4, 0x0, @tick=0x5, {0xfffffffffffffd87}, {0x5, 0x3}, @note={0x8, 0x1, 0x19b, 0xffffffffffffff01, 0x6}}, {0x5, 0x1, 0x10001, 0x9, @time={r2, r3+10000000}, {0x16f0, 0x8}, {0x1, 0x1}, @note={0x401, 0x8, 0x5, 0x4d7, 0x200}}, {0x9, 0x9, 0xffffffff80000000, 0x57, @tick, {0x20, 0x1}, {0x1, 0x9}, @result={0xaa3, 0xfc63}}, {0x3ff, 0x5, 0x0, 0x9, @tick=0x8, {0xfff, 0x120000000000}, {0x3, 0x7}, @result={0x1f, 0xfffffffffffffffc}}], 0xb0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000001240)={0x2, 0x5c012a80, 0x4, 0x4, 0x200000000000000})

23:36:16 executing program 7:
socket$inet(0x2, 0x7, 0x34)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070")
r1 = socket(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c)
unshare(0x20400)
getsockname$packet(r1, &(0x7f00000013c0), &(0x7f0000001400)=0x14)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)

[  434.597131] binder: release 29350:29365 transaction 605 out, still active
[  434.609656] binder: undelivered TRANSACTION_COMPLETE
[  434.619665] binder: release 29350:29365 transaction 605 in, still active
[  434.632102] binder: send failed reply for transaction 605, target dead
23:36:16 executing program 1:
r0 = memfd_create(&(0x7f0000000140)='\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"})
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0xfffffdc5)
write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/87, 0x57, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x120)
fcntl$setlease(r1, 0x400, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x41)

[  434.642652] binder: send failed reply for transaction 606 to 29368:29370
23:36:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:17 executing program 2:
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000280)={{0x0, 0xfffffffffffffffd}})
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000140))
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0x3ff, 0x9, 0x8001, 'queue0\x00', 0xfff})
socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x10}, 0x5}, 0x1c)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x78, r2, 0x804, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40040c4)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000003c0)=0x2)

23:36:17 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
listen(r0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080))
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x8})

23:36:17 executing program 1:
add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680), 0x0, 0x0, 0xfffffffffffffffe)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400200, 0x0)
readahead(r0, 0x5, 0x9e0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x2)

23:36:17 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3332653")
fchown(r0, 0x0, 0x0)

23:36:17 executing program 6:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
openat$cgroup_int(r1, &(0x7f0000000180)="6875736167655f696eccc3a0385f6279", 0x2, 0x0)
setrlimit(0x7, &(0x7f0000000000))
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @loopback}})
accept4$inet(r0, 0x0, &(0x7f0000000080), 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40000, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0xfffffffffffff7f5, 0x7, {0x8}}, 0xffffffffffffffad)

23:36:17 executing program 3:
mmap(&(0x7f0000aa5000/0x3000)=nil, 0x3000, 0x1, 0x3d, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000080)={0x1})
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000007e80)='/dev/ppp\x00', 0x2003, 0x0)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000007ec0)=0x80000000)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000007f00)={'bridge_slave_0\x00', 0x800})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$l2tp(0x18, 0x1, 0x1)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x200000, 0x0)
connect$l2tp(r5, &(0x7f0000007f40)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x4, 0x3, 0x4, 0x4}}, 0x2e)
connect$l2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
recvmmsg(r4, &(0x7f0000007bc0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1, &(0x7f0000000200)=""/52, 0x34, 0xfff}, 0x100000001}, {{&(0x7f0000000240)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001740)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/34, 0x22}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000001400)=""/95, 0x5f}, {&(0x7f0000001480)=""/58, 0x3a}, {&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000001680)=""/138, 0x8a}], 0x8, &(0x7f00000017c0)=""/122, 0x7a, 0x3}, 0x7ff}, {{&(0x7f0000001840)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002a00)=[{&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x3}}, {{&(0x7f0000002a40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000002ac0)=""/104, 0x68}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/239, 0xef}, {&(0x7f0000003c40)=""/233, 0xe9}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/132, 0x84}], 0x6, &(0x7f0000004e80)=""/45, 0x2d, 0x7ff}, 0xc03}, {{&(0x7f0000004ec0)=@ax25, 0x80, &(0x7f0000007040)=[{&(0x7f0000004f40)=""/4096, 0x1000}, {&(0x7f0000005f40)=""/111, 0x6f}, {&(0x7f0000005fc0)=""/91, 0x5b}, {&(0x7f0000006040)=""/4096, 0x1000}], 0x4, &(0x7f0000007080)=""/134, 0x86, 0x6}, 0x3}, {{&(0x7f0000007140)=@xdp, 0x80, &(0x7f00000073c0)=[{&(0x7f00000071c0)=""/94, 0x5e}, {&(0x7f0000007240)=""/111, 0x6f}, {&(0x7f00000072c0)=""/198, 0xc6}], 0x3, 0x0, 0x0, 0x7fffffff}, 0x4}, {{&(0x7f0000007400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007480)=""/180, 0xb4}, {&(0x7f0000007540)=""/100, 0x64}, {&(0x7f00000075c0)=""/98, 0x62}, {&(0x7f0000007640)=""/210, 0xd2}, {&(0x7f0000007740)=""/148, 0x94}, {&(0x7f0000007800)=""/158, 0x9e}, {&(0x7f00000078c0)=""/177, 0xb1}, {&(0x7f0000007980)=""/83, 0x53}, {&(0x7f0000007a00)=""/84, 0x54}], 0x9, &(0x7f0000007b40)=""/128, 0x80, 0x688}, 0x3}], 0x7, 0x10000, &(0x7f0000007d80))
close(r4)
getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000007dc0)=""/78, &(0x7f0000007e40)=0x4e)
close(r3)

23:36:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:17 executing program 2:
ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070")
futex(&(0x7f000000cffc)=0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000000)=0xfffffffffffffffc, 0xfffffffffffffffe)
r0 = memfd_create(&(0x7f0000000300)='wlan0systemposix_acl_access\'{cpuset\x00', 0x3)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000340))
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000380))
r1 = accept(0xffffffffffffffff, 0x0, &(0x7f00000040c0))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000004100)={0xb9, 0x2, 0x5, 0x375b}, 0x10)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8)
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={@local, 0x1e, r2})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000002c0)="a01cbc99b2d05509c92f1ed3dced1c57", 0x10)
futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0)

23:36:17 executing program 7:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4)
sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x815, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x23, 0x3, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r1=>0x0)
timer_delete(r1)
r2 = timerfd_create(0x6, 0x800)
timerfd_gettime(r2, &(0x7f0000000180))

[  435.111616] BUG: unable to handle kernel NULL pointer dereference at 0000000000000080
[  435.119984] IP: [<ffffffff835a93b8>] l2tp_session_create+0x948/0x1030
[  435.126671] PGD b5514067 PUD b9206067 PMD 0 
[  435.131424] Oops: 0002 [#1] PREEMPT SMP KASAN
[  435.136438] Dumping ftrace buffer:
[  435.139961]    (ftrace buffer empty)
[  435.143645] Modules linked in:
[  435.146935] CPU: 0 PID: 29443 Comm: syz-executor3 Not tainted 4.4.150-g5541782 #83
[  435.154622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  435.163965] task: ffff8800934c4800 task.stack: ffff8801bef10000
[  435.169994] RIP: 0010:[<ffffffff835a93b8>]  [<ffffffff835a93b8>] l2tp_session_create+0x948/0x1030
[  435.179279] RSP: 0018:ffff8801bef17b48  EFLAGS: 00010246
[  435.184718] RAX: 0000000000000000 RBX: ffff8801d4826f00 RCX: ffffc90000c24000
[  435.191965] RDX: 1ffff1003a904e10 RSI: ffffffff835a3493 RDI: ffff8801d4827080
[  435.199223] RBP: ffff8801bef17bb8 R08: ffff8800934c5100 R09: 0000000000000000
[  435.206476] R10: 0000000000000000 R11: ffffffff8463a140 R12: ffff8801d4826d28
[  435.213720] R13: ffff8801bef17cd0 R14: ffff8801d4826c80 R15: ffffffff835a2f70
[  435.220972] FS:  00007fd37822d700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000
[  435.229180] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  435.235036] CR2: 0000000000000080 CR3: 000000008d9da000 CR4: 00000000001606f0
[  435.242303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  435.249547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  435.256789] Stack:
[  435.258923]  ffffffff81140961 ffff8801d4826f20[  435.261938] binder_alloc: binder_alloc_mmap_handler: 29368 20010000-20013000 already mapped failed -16
[  435.262291] binder_alloc: 29368: binder_alloc_buf, no vma
[  435.262328] binder: 29368:29371 transaction failed 29189/-3, size 0-0 line 3137
[  435.262357] binder: 29368:29371 ERROR: BC_REGISTER_LOOPER called without request

[  435.293287]  ffff8801d4826dd8 ffff8801d4826c90
[  435.298390]  ffffffff838caa10 ffff8801d4826d30 ffff8801d4826dd0 ffff8801d4826fe0
23:36:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
syz_open_pts(r2, 0x20000)
r3 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r3}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={r3})
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)

23:36:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000300), &(0x7f0000000340)=0x4)
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000))

23:36:17 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x420000, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/234, &(0x7f00000000c0)=0xea)
fchdir(r0)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x2008200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000140), 0x8000fffffffe)
r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r4, 0x20, 0x0, 0x10000)

23:36:17 executing program 6:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x1, &(0x7f0000000080)="0a5cc80700315f85715070")
write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x77359400}, 0x1, 0x4, 0x7}, {{}, 0x100000001, 0x2000000000004}], 0x30)
r1 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002)
write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a)

23:36:17 executing program 7:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0xaf, &(0x7f0000000080)="0a5cc80700315f85715070")
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8)

23:36:17 executing program 2:
r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0)
write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000001000000000000000003003e00ff0300000000000000000000d9feffffffffffff0000000000000000000000000000380003"], 0x39)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = getegid()
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getgroups(0x3, &(0x7f0000000180)=[r1, r2, r3])
execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000080), &(0x7f0000000500), 0x1000)

23:36:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x408000000000004}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

[  435.306393]  d108c62200000000[  435.308545] binder: 29368:29445 got reply transaction with no transaction stack
[  435.308554] binder: 29368:29445 transaction failed 29201/-71, size 80-8 line 2922
[  435.311995] binder: undelivered TRANSACTION_COMPLETE
[  435.312009] binder: undelivered TRANSACTION_ERROR: 29189
[  435.312236] binder: undelivered TRANSACTION_ERROR: 29201
[  435.324204] binder: undelivered TRANSACTION_ERROR: 29189
[  435.324318] binder: undelivered TRANSACTION_ERROR: 29201

[  435.351316]  ffff8801d3479100 0000000000000000[  435.355780] binder: 29448:29453 ERROR: BC_REGISTER_LOOPER called without request
[  435.358865] binder_alloc: binder_alloc_mmap_handler: 29448 20010000-20013000 already mapped failed -16
[  435.358934] binder: BINDER_SET_CONTEXT_MGR already set
[  435.358941] binder: 29448:29453 ioctl 40046207 0 returned -16
[  435.359293] binder_alloc: 29448: binder_alloc_buf, no vma
[  435.359330] binder: 29448:29453 transaction failed 29189/-3, size 0-0 line 3137
[  435.359365] binder: 29448:29456 ERROR: BC_REGISTER_LOOPER called without request
[  435.359406] binder: 29448:29453 got reply transaction with no transaction stack
[  435.359413] binder: 29448:29453 transaction failed 29201/-71, size 80-8 line 2922
[  435.359586] binder: undelivered TRANSACTION_ERROR: 29201
[  435.359625] binder: unexpected work type, 4, not freed
[  435.359627] binder: undelivered TRANSACTION_COMPLETE

[  435.435429]  ffff8801d3479130
[  435.438942] Call Trace:
[  435.441514]  [<ffffffff81140961>] ? __local_bh_enable_ip+0x81/0xd0
[  435.447819]  [<ffffffff838caa10>] ? _raw_read_unlock_bh+0x30/0x40
[  435.454037]  [<ffffffff835ad7b0>] pppol2tp_connect+0x10f0/0x1910
[  435.460165]  [<ffffffff835ac6c0>] ? pppol2tp_recv+0x320/0x320
[  435.466039]  [<ffffffff81c55f5f>] ? security_socket_connect+0x8f/0xc0
[  435.472605]  [<ffffffff82f266a8>] SYSC_connect+0x1b8/0x300
[  435.478212]  [<ffffffff82f264f0>] ? SYSC_bind+0x280/0x280
[  435.483730]  [<ffffffff8157ee30>] ? get_unused_fd_flags+0xd0/0xd0
[  435.489949]  [<ffffffff812d4f60>] ? do_futex+0x17f0/0x17f0
[  435.495560]  [<ffffffff82f28711>] ? SyS_socket+0x121/0x1b0
[  435.501168]  [<ffffffff82f285f0>] ? move_addr_to_kernel+0x50/0x50
[  435.507384]  [<ffffffff82f28fe4>] SyS_connect+0x24/0x30
23:36:17 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000000180)="890528e4", 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x2be, 0xc3)

23:36:17 executing program 7:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0xaf, &(0x7f0000000080)="0a5cc80700315f85715070")
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8)

[  435.512731]  [<ffffffff838cb0a5>] entry_SYSCALL_64_fastpath+0x22/0x9e
[  435.519285] Code: 00 00 48 8d bb 80 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 36 06 00 00 48 8b 83 80 01 00 00 <f0> ff 80 80 00 00 00 48 8d 43 20 48 89 c7 48 89 45 b0 e8 f1 13 
[  435.546506] RIP  [<ffffffff835a93b8>] l2tp_session_create+0x948/0x1030
[  435.553281]  RSP <ffff8801bef17b48>
[  435.556885] CR2: 0000000000000080
23:36:17 executing program 2:
r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0)
write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4600000001000000000000000003003e00ff0300000000000000000000d9feffffffffffff0000000000000000000000000000380003"], 0x39)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
r2 = getegid()
fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getgroups(0x3, &(0x7f0000000180)=[r1, r2, r3])
execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000080), &(0x7f0000000500), 0x1000)

23:36:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000040)="f0"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r2}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, &(0x7f0000000480)})
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000200))
fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000080)=""/2, 0x33f)
socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0))

23:36:17 executing program 7:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0xaf, &(0x7f0000000080)="0a5cc80700315f85715070")
ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a32fd3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8)

[  435.635093] binder: 29471:29474 ERROR: BC_REGISTER_LOOPER called without request
[  435.662473] binder_alloc: binder_alloc_mmap_handler: 29471 20010000-20013000 already mapped failed -16
[  435.686675] binder: BINDER_SET_CONTEXT_MGR already set
[  435.692020] binder: 29471:29474 ioctl 40046207 0 returned -16
[  435.699036] binder_alloc: 29471: binder_alloc_buf, no vma
[  435.707526] binder: 29471:29487 ERROR: BC_REGISTER_LOOPER called without request
[  435.709736] binder: 29471:29481 transaction failed 29189/-3, size 0-0 line 3137
[  435.709756] ---[ end trace 52112cb539fe96ad ]---
[  435.709761] Kernel panic - not syncing: Fatal exception
[  435.715465] Dumping ftrace buffer:
[  435.715468]    (ftrace buffer empty)
[  435.715471] Kernel Offset: disabled
[  435.743754] Rebooting in 86400 seconds..