Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. 2019/02/27 21:27:42 fuzzer started syzkaller login: [ 116.378330] cc1 (10953) used greatest stack depth: 53632 bytes left 2019/02/27 21:27:48 dialing manager at 10.128.0.26:36013 2019/02/27 21:27:49 syscalls: 1 2019/02/27 21:27:49 code coverage: enabled 2019/02/27 21:27:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/27 21:27:49 extra coverage: extra coverage is not supported by the kernel 2019/02/27 21:27:49 setuid sandbox: enabled 2019/02/27 21:27:49 namespace sandbox: enabled 2019/02/27 21:27:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/27 21:27:49 fault injection: enabled 2019/02/27 21:27:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/27 21:27:49 net packet injection: enabled 2019/02/27 21:27:49 net device setup: enabled 21:30:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 293.262745] IPVS: ftp: loaded support on port[0] = 21 [ 293.434851] chnl_net:caif_netlink_parms(): no params data found [ 293.510798] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.517528] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.526153] device bridge_slave_0 entered promiscuous mode [ 293.535531] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.542133] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.550529] device bridge_slave_1 entered promiscuous mode [ 293.587139] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 293.598683] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.631688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 293.640705] team0: Port device team_slave_0 added [ 293.647573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 293.656357] team0: Port device team_slave_1 added [ 293.662743] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.671552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 293.857515] device hsr_slave_0 entered promiscuous mode [ 294.023056] device hsr_slave_1 entered promiscuous mode [ 294.283846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 294.291462] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 294.324268] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.330824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.338088] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.344686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.414652] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.424580] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.473187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.489647] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 294.506858] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 294.513729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.522084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.540233] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 294.546455] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.563378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 294.570610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.579793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.588525] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.595079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.618117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.626001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.636309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.644733] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.651229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.669561] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 294.682245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 294.696092] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 294.704349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.713987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.723534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.732994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.744853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.758715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 294.773718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.783261] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.800116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 294.810540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.819408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.833711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 294.845106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.857560] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 294.863740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.873562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.882592] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.911882] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 294.931996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.078307] binder: 10966 RLIMIT_NICE not set [ 295.083059] binder: 10966 RLIMIT_NICE not set [ 295.088735] binder: 10966 RLIMIT_NICE not set [ 295.093558] binder: 10964:10966 got transaction with invalid data ptr [ 295.100250] binder: 10964:10966 transaction failed 29201/-14, size 16-0 line 3053 [ 295.108045] binder: send failed reply for transaction 2 to 10964:10966 [ 295.119054] binder_alloc: binder_alloc_mmap_handler: 10964 20001000-20004000 already mapped failed -16 [ 295.131094] binder: BINDER_SET_CONTEXT_MGR already set [ 295.136662] binder: 10964:10966 ioctl 40046207 0 returned -16 [ 295.144075] binder_alloc: 10964: binder_alloc_buf, no vma [ 295.149762] binder: 10964:10967 transaction failed 29189/-3, size 0-0 line 3035 [ 295.157901] binder: 10966 RLIMIT_NICE not set [ 295.163481] binder: undelivered TRANSACTION_COMPLETE [ 295.168731] binder: undelivered TRANSACTION_ERROR: 29201 [ 295.182838] binder: undelivered TRANSACTION_ERROR: 29190 21:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.229928] binder: undelivered TRANSACTION_ERROR: 29189 [ 295.295104] binder: 10970 RLIMIT_NICE not set [ 295.299755] binder: 10970 RLIMIT_NICE not set [ 295.306365] binder: 10970 RLIMIT_NICE not set [ 295.311067] binder: 10969:10970 got transaction with invalid data ptr [ 295.317912] binder: 10969:10970 transaction failed 29201/-14, size 16-0 line 3053 [ 295.325702] binder: send failed reply for transaction 6 to 10969:10970 21:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.379075] binder: undelivered TRANSACTION_COMPLETE [ 295.384876] binder: undelivered TRANSACTION_ERROR: 29201 [ 295.392908] binder: undelivered TRANSACTION_ERROR: 29190 [ 295.458817] binder: 10973 RLIMIT_NICE not set [ 295.463540] binder: 10973 RLIMIT_NICE not set [ 295.470388] binder: 10973 RLIMIT_NICE not set [ 295.475226] binder: 10972:10973 got transaction with invalid data ptr [ 295.482026] binder: 10972:10973 transaction failed 29201/-14, size 16-0 line 3053 [ 295.489701] binder: send failed reply for transaction 9 to 10972:10973 21:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.543984] binder: undelivered TRANSACTION_COMPLETE [ 295.549171] binder: undelivered TRANSACTION_ERROR: 29201 [ 295.556629] binder: undelivered TRANSACTION_ERROR: 29190 [ 295.634011] binder: 10975:10976 got transaction with invalid data ptr [ 295.640790] binder: 10975:10976 transaction failed 29201/-14, size 16-0 line 3053 [ 295.648644] binder: send failed reply for transaction 12 to 10975:10976 21:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.702156] binder: undelivered TRANSACTION_COMPLETE [ 295.707337] binder: undelivered TRANSACTION_ERROR: 29201 [ 295.714355] binder: undelivered TRANSACTION_ERROR: 29190 21:30:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.777890] binder_alloc: 10978: binder_alloc_buf, no vma [ 295.783667] binder: 10978:10979 transaction failed 29189/-3, size 16-0 line 3035 [ 295.791254] binder: send failed reply for transaction 15 to 10978:10979 [ 295.799472] binder: undelivered TRANSACTION_COMPLETE [ 295.804691] binder: undelivered TRANSACTION_ERROR: 29189 21:30:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 295.922614] binder_alloc: 10980: binder_alloc_buf, no vma [ 295.928269] binder: 10980:10982 transaction failed 29189/-3, size 16-0 line 3035 [ 295.936073] binder: send failed reply for transaction 18 to 10980:10982 [ 295.946915] binder: undelivered TRANSACTION_COMPLETE 21:30:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 296.077782] binder_alloc: 10984: binder_alloc_buf, no vma [ 296.083654] binder: 10984:10985 transaction failed 29189/-3, size 16-0 line 3035 [ 296.091237] binder: send failed reply for transaction 21 to 10984:10985 [ 296.100161] binder: undelivered TRANSACTION_COMPLETE [ 296.227058] binder: 10987:10988 got reply transaction with no transaction stack [ 296.234872] binder: 10987:10988 transaction failed 29201/-71, size 16-0 line 2801 21:30:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 296.291133] binder: release 10987:10988 transaction 24 out, still active [ 296.298139] binder: undelivered TRANSACTION_COMPLETE [ 296.305341] binder: send failed reply for transaction 24, target dead [ 296.380777] binder: 10990:10991 got reply transaction with no transaction stack [ 296.388617] binder: 10990:10991 transaction failed 29201/-71, size 16-0 line 2801 21:30:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 296.444356] binder: release 10990:10991 transaction 27 out, still active [ 296.451282] binder: undelivered TRANSACTION_COMPLETE [ 296.458484] binder: send failed reply for transaction 27, target dead [ 296.543226] binder: 10993:10994 got reply transaction with no transaction stack 21:30:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 296.599816] binder: release 10993:10994 transaction 30 out, still active [ 296.606871] binder: undelivered TRANSACTION_COMPLETE [ 296.613997] binder: send failed reply for transaction 30, target dead [ 296.722806] binder: 10996:10998 got reply transaction with no transaction stack 21:30:47 executing program 1: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) statfs(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=""/194) [ 297.447977] IPVS: ftp: loaded support on port[0] = 21 21:30:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 297.709457] chnl_net:caif_netlink_parms(): no params data found [ 297.719882] binder: 11002:11005 got reply transaction with no transaction stack [ 297.786251] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.793529] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.802017] device bridge_slave_0 entered promiscuous mode [ 297.813355] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.819939] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.828441] device bridge_slave_1 entered promiscuous mode [ 297.866586] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 297.879280] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 297.912320] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 297.921108] team0: Port device team_slave_0 added [ 297.929714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 297.938518] team0: Port device team_slave_1 added [ 297.946167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 297.955008] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 298.027734] device hsr_slave_0 entered promiscuous mode [ 298.072681] device hsr_slave_1 entered promiscuous mode [ 298.203510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 298.211090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 298.245710] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.252395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.259584] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.266225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.371738] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 298.378092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.394187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 298.409089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.420628] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.430818] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.460392] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 21:30:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 298.488548] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 298.495338] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.511557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.520345] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.526962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.573933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.582570] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.589205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.638378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.648227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.660308] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 298.672791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.682360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 298.691153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 298.700061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 298.711765] binder: 11009:11011 got reply transaction with no transaction stack [ 298.720601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 298.728748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 298.765178] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 298.785445] 8021q: adding VLAN 0 to HW filter on device batadv0 21:30:49 executing program 1: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000)='nbd\x00') perf_event_open(0x0, 0x0, 0x0, r0, 0x9) [ 299.242792] hrtimer: interrupt took 32608 ns 21:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:49 executing program 1: timer_create(0x7, 0x0, 0x0) timer_getoverrun(0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) [ 299.617537] binder: 11023:11024 got reply transaction with no transaction stack 21:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 299.757003] binder: 11030:11031 got reply transaction with no transaction stack 21:30:49 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4800, 0x0) 21:30:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 299.938043] binder: 11034:11035 got reply transaction with no transaction stack 21:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:50 executing program 1: socket$inet(0x10, 0x0, 0xc) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000800)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) [ 300.134697] binder_alloc: 11040: binder_alloc_buf, no vma [ 300.140337] binder_transaction: 10 callbacks suppressed [ 300.140374] binder: 11040:11041 transaction failed 29189/-3, size 0-0 line 3035 [ 300.162811] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 300.185631] binder_set_nice: 18 callbacks suppressed [ 300.185647] binder: 11045 RLIMIT_NICE not set [ 300.216462] binder: 11040:11041 got reply transaction with no transaction stack [ 300.224612] binder: 11040:11041 transaction failed 29201/-71, size 16-0 line 2801 [ 300.243436] binder_release_work: 17 callbacks suppressed [ 300.243452] binder: undelivered TRANSACTION_ERROR: 29201 [ 300.247728] kvm: pic: non byte read [ 300.265534] kvm: pic: non byte read [ 300.269697] kvm: pic: non byte read [ 300.274544] kvm: pic: non byte read [ 300.278695] kvm: pic: non byte read [ 300.284689] kvm: pic: non byte read [ 300.289077] kvm: pic: non byte read [ 300.293916] kvm: pic: non byte read [ 300.298156] kvm: pic: non byte read [ 300.303030] kvm: pic: non byte read 21:30:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 300.338526] binder: undelivered TRANSACTION_ERROR: 29189 [ 300.415339] binder_alloc: 11047: binder_alloc_buf, no vma [ 300.421070] binder: 11047:11049 transaction failed 29189/-3, size 0-0 line 3035 [ 300.435060] binder: 11049 RLIMIT_NICE not set [ 300.496678] binder: 11047:11050 transaction failed 29201/-71, size 16-0 line 2801 [ 301.050933] kvm [11043]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000038 data 0x0 21:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.197674] binder: undelivered TRANSACTION_ERROR: 29201 [ 301.225443] binder: 11056 RLIMIT_NICE not set [ 301.230018] binder: 11056 RLIMIT_NICE not set 21:30:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.244022] binder: 11056 RLIMIT_NICE not set [ 301.248584] binder_alloc: 11055: binder_alloc_buf, no vma [ 301.254332] binder: 11055:11056 transaction failed 29189/-3, size 16-0 line 3035 [ 301.261999] binder: send failed reply for transaction 51 to 11055:11056 [ 301.284344] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.294901] binder: undelivered TRANSACTION_COMPLETE [ 301.300053] binder: undelivered TRANSACTION_ERROR: 29189 21:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.365335] binder: BINDER_SET_CONTEXT_MGR already set [ 301.370780] binder: 11058:11059 ioctl 40046207 0 returned -16 [ 301.395237] binder: undelivered TRANSACTION_ERROR: 29190 [ 301.422912] binder: 11058:11059 transaction failed 29189/-22, size 0-0 line 2896 [ 301.443040] binder: 11059 RLIMIT_NICE not set [ 301.478149] binder: 11062 RLIMIT_NICE not set [ 301.482859] binder: 11062 RLIMIT_NICE not set [ 301.488071] binder: 11062 RLIMIT_NICE not set [ 301.492973] binder_alloc: 11061: binder_alloc_buf, no vma [ 301.498586] binder: 11061:11062 transaction failed 29189/-3, size 16-0 line 3035 [ 301.506300] binder: send failed reply for transaction 55 to 11061:11062 [ 301.517162] binder: undelivered TRANSACTION_COMPLETE [ 301.522566] binder: undelivered TRANSACTION_ERROR: 29189 [ 301.523639] binder_transaction: 1 callbacks suppressed [ 301.523660] binder: 11058:11063 got reply transaction with no transaction stack [ 301.541945] binder: 11058:11063 transaction failed 29201/-71, size 16-0 line 2801 21:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.579661] binder: undelivered TRANSACTION_ERROR: 29190 [ 301.639257] binder: 11066 RLIMIT_NICE not set [ 301.655242] binder_alloc: 11064: binder_alloc_buf, no vma [ 301.660972] binder: 11064:11066 transaction failed 29189/-3, size 16-0 line 3035 [ 301.668765] binder: send failed reply for transaction 59 to 11064:11066 [ 301.684950] binder: undelivered TRANSACTION_COMPLETE [ 301.690207] binder: undelivered TRANSACTION_ERROR: 29189 21:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.745559] binder: undelivered TRANSACTION_ERROR: 29190 [ 301.826301] binder: 11068:11069 got reply transaction with no transaction stack [ 301.834089] binder: 11068:11069 transaction failed 29201/-71, size 16-0 line 2801 [ 301.843972] binder: release 11068:11069 transaction 62 out, still active [ 301.850910] binder: undelivered TRANSACTION_COMPLETE 21:30:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 301.904886] binder: send failed reply for transaction 62, target dead [ 301.985135] binder: 11071:11072 got reply transaction with no transaction stack [ 301.994301] binder: release 11071:11072 transaction 65 out, still active [ 302.001245] binder: undelivered TRANSACTION_COMPLETE 21:30:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 302.054768] binder: send failed reply for transaction 65, target dead [ 302.134505] binder: 11074:11075 got reply transaction with no transaction stack [ 302.152955] binder: release 11074:11075 transaction 68 out, still active [ 302.159913] binder: undelivered TRANSACTION_COMPLETE 21:30:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:52 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 302.248194] binder: send failed reply for transaction 68, target dead 21:30:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 302.413133] binder: 11080:11082 got reply transaction with no transaction stack 21:30:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:52 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 302.546655] binder: release 11080:11081 transaction 73 in, still active [ 302.553560] binder: send failed reply for transaction 73 to 11084:11085 [ 302.560509] binder: undelivered TRANSACTION_COMPLETE 21:30:52 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 302.735021] binder: 11089:11092 got reply transaction with no transaction stack 21:30:52 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 303.689577] binder: 11113:11115 got reply transaction with no transaction stack [ 303.760818] binder: BINDER_SET_CONTEXT_MGR already set [ 303.766377] binder: 11117:11118 ioctl 40046207 0 returned -16 [ 303.871724] binder: 11117:11119 got reply transaction with no transaction stack [ 303.887785] binder: release 11113:11114 transaction 79 in, still active [ 303.894784] binder: send failed reply for transaction 79 to 11117:11119 21:30:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 303.929619] IPVS: ftp: loaded support on port[0] = 21 [ 303.999060] binder: 11121:11122 got reply transaction with no transaction stack 21:30:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 304.116070] chnl_net:caif_netlink_parms(): no params data found [ 304.208782] binder: 11126:11127 got reply transaction with no transaction stack [ 304.224655] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.231273] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.239675] device bridge_slave_0 entered promiscuous mode [ 304.250772] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.257896] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.266298] device bridge_slave_1 entered promiscuous mode 21:30:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 304.320268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 304.352067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 304.409027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 304.418433] team0: Port device team_slave_0 added 21:30:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 304.453586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 304.462489] team0: Port device team_slave_1 added [ 304.485404] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 304.508330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 21:30:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 304.581458] binder_alloc: 11132: binder_alloc_buf, no vma [ 304.612871] binder: undelivered TRANSACTION_COMPLETE [ 304.638858] device hsr_slave_0 entered promiscuous mode [ 304.660696] binder: BINDER_SET_CONTEXT_MGR already set [ 304.664990] device hsr_slave_1 entered promiscuous mode [ 304.666343] binder: 11135:11136 ioctl 40046207 0 returned -16 [ 304.680590] binder_alloc: 11132: binder_alloc_buf, no vma [ 304.733966] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 304.741562] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 304.778570] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.785168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.792436] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.798984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.916451] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 304.923285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.939163] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 304.955383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.967650] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.977517] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.991354] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 305.015286] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 305.021392] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.041976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.050410] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.056995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.079785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.088450] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.095049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.154548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 305.163938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 305.172801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.187257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 305.199632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.211630] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 305.217768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.226426] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.234984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.243920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.271180] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 305.297537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.362763] binder_release_work: 19 callbacks suppressed [ 305.362780] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.375187] binder: undelivered TRANSACTION_ERROR: 29189 21:30:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 305.452921] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.471489] binder_set_nice: 13 callbacks suppressed [ 305.471504] binder: 11141 RLIMIT_NICE not set [ 305.529129] binder_transaction: 18 callbacks suppressed [ 305.529167] binder: 11140:11143 transaction failed 29201/-71, size 16-0 line 2801 [ 305.544316] binder: BINDER_SET_CONTEXT_MGR already set [ 305.549720] binder: 11144:11145 ioctl 40046207 0 returned -16 [ 305.574596] binder: 11141 RLIMIT_NICE not set 21:30:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 305.579577] binder: 11145 RLIMIT_NICE not set [ 305.588824] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.625827] binder: 11144:11147 transaction failed 29201/-71, size 16-0 line 2801 [ 305.666198] binder: BINDER_SET_CONTEXT_MGR already set [ 305.671623] binder: 11148:11149 ioctl 40046207 0 returned -16 [ 305.691438] binder: 11149 RLIMIT_NICE not set [ 305.693598] binder: release 11140:11141 transaction 94 in, still active [ 305.702946] binder: send failed reply for transaction 94 to 11144:11145 [ 305.709762] binder: undelivered TRANSACTION_ERROR: 29201 21:30:55 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 305.715360] binder: send failed reply for transaction 96 to 11148:11149 [ 305.752508] binder: 11148:11150 transaction failed 29201/-71, size 16-0 line 2801 [ 305.795962] binder: 11153 RLIMIT_NICE not set [ 305.845321] binder: 11151:11154 transaction failed 29201/-71, size 16-0 line 2801 [ 306.334902] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.340459] binder: undelivered TRANSACTION_COMPLETE [ 306.345756] binder: undelivered TRANSACTION_ERROR: 29189 21:30:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 306.473442] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.494705] binder: BINDER_SET_CONTEXT_MGR already set [ 306.500121] binder: 11156:11157 ioctl 40046207 0 returned -16 21:30:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 306.520680] binder: 11157 RLIMIT_NICE not set [ 306.521278] binder: 11153 RLIMIT_NICE not set [ 306.539236] binder: undelivered TRANSACTION_COMPLETE [ 306.544704] binder: undelivered TRANSACTION_ERROR: 29189 [ 306.567619] binder_transaction: 7 callbacks suppressed [ 306.567640] binder: 11156:11158 got reply transaction with no transaction stack [ 306.580700] binder: 11156:11158 transaction failed 29201/-71, size 16-0 line 2801 [ 306.660023] binder: BINDER_SET_CONTEXT_MGR already set [ 306.665557] binder: 11160:11161 ioctl 40046207 0 returned -16 [ 306.676021] binder: 11161 RLIMIT_NICE not set [ 306.697788] binder: release 11151:11153 transaction 100 in, still active 21:30:56 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 306.704997] binder: send failed reply for transaction 100 to 11156:11157 [ 306.712046] binder: undelivered TRANSACTION_ERROR: 29201 [ 306.717560] binder: send failed reply for transaction 102 to 11160:11161 [ 306.742494] binder: 11160:11162 got reply transaction with no transaction stack [ 306.750014] binder: 11160:11162 transaction failed 29201/-71, size 16-0 line 2801 [ 306.796722] binder: 11165 RLIMIT_NICE not set [ 306.845654] binder: 11163:11166 got reply transaction with no transaction stack [ 306.853298] binder: 11163:11166 transaction failed 29201/-71, size 16-0 line 2801 [ 307.256804] binder: undelivered TRANSACTION_COMPLETE 21:30:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 307.361144] binder: 11165 RLIMIT_NICE not set [ 307.373432] binder: release 11168:11169 transaction 106 out, still active [ 307.380548] binder: undelivered TRANSACTION_COMPLETE 21:30:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:57 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 307.536188] binder: release 11163:11165 transaction 106 in, still active [ 307.543152] binder: send failed reply for transaction 106, target dead [ 307.549993] binder: undelivered TRANSACTION_COMPLETE [ 307.561100] binder: 11171:11172 transaction failed 29189/-22, size 0-0 line 2896 21:30:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 307.687214] binder: BINDER_SET_CONTEXT_MGR already set [ 307.693532] binder: 11176:11178 ioctl 40046207 0 returned -16 [ 307.706294] binder_alloc: 11177: binder_alloc_buf, no vma [ 307.712005] binder: 11177:11179 transaction failed 29189/-3, size 0-0 line 3035 [ 307.746213] binder_alloc: 11177: binder_alloc_buf, no vma [ 307.752942] binder: 11180:11182 transaction failed 29189/-3, size 0-0 line 3035 [ 307.777337] binder: 11177:11183 got reply transaction with no transaction stack 21:30:57 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:58 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 308.608374] binder_alloc: 11202: binder_alloc_buf, no vma 21:30:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 308.664084] binder: 11202:11208 got reply transaction with no transaction stack [ 308.682069] binder: BINDER_SET_CONTEXT_MGR already set [ 308.687487] binder: 11205:11206 ioctl 40046207 0 returned -16 [ 308.785771] binder: BINDER_SET_CONTEXT_MGR already set [ 308.791261] binder: 11210:11211 ioctl 40046207 0 returned -16 [ 308.798717] binder_alloc: 11202: binder_alloc_buf, no vma [ 308.853003] binder: 11210:11212 got reply transaction with no transaction stack 21:30:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:59 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 309.566184] binder: 11214:11215 got reply transaction with no transaction stack 21:30:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:30:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 309.832690] binder: BINDER_SET_CONTEXT_MGR already set [ 309.838139] binder: 11222:11223 ioctl 40046207 0 returned -16 [ 309.863600] binder: 11224:11225 got reply transaction with no transaction stack [ 309.908259] binder: 11222:11226 got reply transaction with no transaction stack 21:31:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:00 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 309.950848] binder: release 11217:11218 transaction 120 in, still active [ 309.958008] binder: send failed reply for transaction 120 to 11224:11225 [ 309.965014] binder: send failed reply for transaction 121 to 11222:11223 [ 310.070842] binder: undelivered TRANSACTION_COMPLETE [ 310.171316] binder: 11231:11232 got reply transaction with no transaction stack 21:31:00 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:00 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 310.482335] binder_set_nice: 13 callbacks suppressed [ 310.482352] binder: 11238 RLIMIT_NICE not set [ 310.577339] binder: undelivered TRANSACTION_COMPLETE [ 310.579932] IPVS: ftp: loaded support on port[0] = 21 [ 310.582658] binder_release_work: 19 callbacks suppressed [ 310.582672] binder: undelivered TRANSACTION_ERROR: 29189 [ 310.598910] binder: undelivered TRANSACTION_ERROR: 29201 [ 310.605948] binder: 11243 RLIMIT_NICE not set 21:31:00 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:00 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 310.842359] binder: BINDER_SET_CONTEXT_MGR already set [ 310.847838] binder: 11246:11248 ioctl 40046207 0 returned -16 [ 310.889650] binder: BINDER_SET_CONTEXT_MGR already set [ 310.895184] binder: 11249:11250 ioctl 40046207 0 returned -16 [ 310.906645] binder: 11250 RLIMIT_NICE not set [ 310.911495] binder_alloc: 11237: binder_alloc_buf, no vma [ 310.917328] binder_transaction: 12 callbacks suppressed [ 310.917366] binder: 11246:11251 transaction failed 29189/-3, size 0-0 line 3035 [ 310.931334] chnl_net:caif_netlink_parms(): no params data found [ 310.941236] binder: 11248 RLIMIT_NICE not set [ 310.987219] binder: 11246:11251 transaction failed 29201/-71, size 16-0 line 2801 [ 311.004094] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.010750] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.019313] device bridge_slave_0 entered promiscuous mode [ 311.030055] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.036814] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.045208] device bridge_slave_1 entered promiscuous mode [ 311.082178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 311.095213] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 311.127952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 311.136797] team0: Port device team_slave_0 added [ 311.143655] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 311.152527] team0: Port device team_slave_1 added [ 311.159504] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 311.168268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 21:31:01 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 311.247867] device hsr_slave_0 entered promiscuous mode [ 311.271201] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.292519] device hsr_slave_1 entered promiscuous mode [ 311.323562] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 311.331228] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 311.381706] binder: 11254 RLIMIT_NICE not set [ 311.404297] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.410844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.418113] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.424731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.440358] binder: 11253:11255 transaction failed 29201/-71, size 16-0 line 2801 [ 311.521355] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 311.527660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.541252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 311.555902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 311.566860] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.576139] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.588471] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 311.619590] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 311.626284] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.633790] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.639543] binder: undelivered TRANSACTION_ERROR: 29189 21:31:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 311.677527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.686093] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.692658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.761945] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.770295] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.776870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.787153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.796508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.805391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.834914] binder: BINDER_SET_CONTEXT_MGR already set [ 311.840332] binder: 11257:11258 ioctl 40046207 0 returned -16 [ 311.847746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.860840] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 311.867004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.881396] binder_alloc: 11253: binder_alloc_buf, no vma [ 311.887687] binder: 11257:11260 transaction failed 29189/-3, size 0-0 line 3035 [ 311.927376] binder: 11258 RLIMIT_NICE not set [ 311.948678] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 311.970850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.973670] binder_transaction: 3 callbacks suppressed [ 311.973691] binder: 11257:11260 got reply transaction with no transaction stack [ 311.989963] binder: 11257:11260 transaction failed 29201/-71, size 16-0 line 2801 [ 312.001312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 312.010229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 312.202598] binder_alloc: 11253: binder_alloc_buf, no vma [ 312.208471] binder: 11262:11263 transaction failed 29189/-3, size 0-0 line 3035 [ 312.233562] binder: undelivered TRANSACTION_ERROR: 29201 21:31:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:02 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 312.330420] binder: undelivered TRANSACTION_ERROR: 29189 [ 312.395102] binder: 11267 RLIMIT_NICE not set [ 312.399649] binder: BINDER_SET_CONTEXT_MGR already set [ 312.399683] binder: 11266:11269 ioctl 40046207 0 returned -16 [ 312.400164] binder: 11269 RLIMIT_NICE not set [ 312.434268] binder: BINDER_SET_CONTEXT_MGR already set [ 312.439774] binder: 11270:11271 ioctl 40046207 0 returned -16 [ 312.447969] binder_alloc: 11265: binder_alloc_buf, no vma [ 312.453791] binder: 11270:11271 transaction failed 29189/-3, size 0-0 line 3035 [ 312.463584] binder: 11271 RLIMIT_NICE not set [ 312.476632] binder: 11266:11272 got reply transaction with no transaction stack [ 312.484829] binder: 11266:11272 transaction failed 29201/-71, size 16-0 line 2801 [ 312.513816] binder: 11270:11273 got reply transaction with no transaction stack [ 312.521490] binder: 11270:11273 transaction failed 29201/-71, size 16-0 line 2801 [ 312.626171] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.631985] binder: undelivered TRANSACTION_ERROR: 29189 21:31:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 312.764171] binder: BINDER_SET_CONTEXT_MGR already set [ 312.769543] binder: 11275:11276 ioctl 40046207 0 returned -16 [ 312.816382] binder_alloc: 11265: binder_alloc_buf, no vma [ 312.822385] binder: 11275:11276 transaction failed 29189/-3, size 0-0 line 3035 [ 312.830832] binder: 11276 RLIMIT_NICE not set [ 312.877812] binder: 11275:11277 got reply transaction with no transaction stack 21:31:03 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 313.225544] binder: undelivered TRANSACTION_ERROR: 29201 21:31:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:03 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x100) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7ff}, 0xffffffffffffff3c) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x2, 0x0) [ 313.414407] binder: BINDER_SET_CONTEXT_MGR already set [ 313.419888] binder: 11282:11283 ioctl 40046207 0 returned -16 [ 313.458055] binder: 11282:11283 ioctl c0306201 0 returned -14 21:31:03 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000320029080000000000f1ffff02000000180000001400010004000000040000000000000000000001"], 0x2c}}, 0x0) [ 313.519785] binder: 11282:11288 got reply transaction with no transaction stack 21:31:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 313.651975] openvswitch: netlink: Duplicate key (type 0). 21:31:03 executing program 3: socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket$inet6(0xa, 0x803, 0x3) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000140), 0x800) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000740)="8dde0de0926296db6a298f8dd6e776042a7e86566cae22b27c146b256c83a704425d16ca1fde9fa8b832bd4e01edb6010ceb5c04a9d72e95090a8c544d205e733b8440d2fb3b729966cde9f3a6e6d6f679b7232b495e07fbbae387bf8897f69e0bd88ac927899f66ca3001369a4cdca4d273b6768fe5", 0x76) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r2, 0x8912, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000003c0)={0x0, 0x7530}, 0x314) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)={0xb, 0x755, 0x7, 0x5, 0x1, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x0, 0x3608, 0x9, 0x7fff, 0x4, r4, 0x3}, 0x2c) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000100)=0x300, 0x2) accept4(r5, 0x0, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) listen(r3, 0x9) setsockopt(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r7 = accept(r3, 0x0, 0x0) sendto$unix(r6, &(0x7f00000001c0)="56f306928edfe1b0f5677cf109d8d904a94d5234c28cb3006a1abec4b6ad98da8aec", 0x22, 0x8000, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f00000020c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000fddb2699f98701f9df250100000008", @ANYRES32=0x0, @ANYBLOB="04000200"], 0x20}}, 0x4000) sendmmsg(r6, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d243c126285718070") [ 313.733149] binder: BINDER_SET_CONTEXT_MGR already set [ 313.738520] binder: 11294:11295 ioctl 40046207 0 returned -16 [ 313.761313] binder_alloc: 11279: binder_alloc_buf, no vma [ 313.832217] binder: 11294:11299 got reply transaction with no transaction stack [ 314.041441] dccp_close: ABORT with 64 bytes unread [ 314.049176] dccp_close: ABORT with 1095 bytes unread 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/kvm\x00', 0x64000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) io_setup(0x1, &(0x7f0000000000)=0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x480000, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_PIE_ON(r6, 0x7005) r7 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x4, 0x101800) r8 = syz_open_dev$media(&(0x7f00000015c0)='/dev/media#\x00', 0x5, 0x80) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/sequencer2\x00', 0x141400, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) io_submit(r3, 0x8, &(0x7f0000001840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000040)="97", 0x1, 0x2, 0x0, 0x2, r4}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000340)="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", 0x1000, 0x10001, 0x0, 0x3, r6}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x1, r2, &(0x7f0000000180)="881c690e8e276fadc6b19aa4d060d1239691d00e2441355e6129b332d116aa1ee0b54bda66057e87bb553df43ea313ddcce3392833bcfba663f0c539828f09607cdc858580557fdaf51d7845154e0b7aa8cd37d72d50614b1b38ad1d49c89dca9d933fad8496b32ad2c29007f28a2136fe472c340df326b143b7d9517b84735e2e5bb42e21f95b83e53d46", 0x8b, 0x7ff, 0x0, 0x2, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000001340)="3b3bf6cbb1a27680ae428d6121110bdadee9e22338e7cb361d37e3aeedf0dd20bd3544e20c5320ee5d541711f31b782baa08e915ef6f93f249965de880b8844680a1792ca07b5648c08feaabb0492d4ad98751ca4b19669253c92008c846366695a06cd01cb1493591873afeeea4b7c5dde023adbc39ae04961c01afc3e9dd50cff8c40d1377e8b57ea1da5e82a8b7d17e29a3e673eaa4d72e43160387c3775032635edb25682277b3e9db361ab5e9609a59c40bc7be66dc139f03fb47593e139d453ffceba73dc697ac81cac866b2c7b773329ce12956304c057549e90d59f744e8db2f9e4b984a7f2c66b0d7b89b98", 0xf0, 0x3, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000001440)="d50cd4de4a337c317e62df2c97105b2be15a332bb1b4ea84147c829d278e211cc3eb9558bdb882e2ab270699635c75aa4dc622776fd9a71cd2e5f3e62c0bba4867aeeb1539cfb689206a44c1cc4ee9f5ae14b617e4a6e28d8e2b5140f45d518d077d47166231efb7cec861eca4e7cfca7dbb6e62996ad3dc3e06e4db06d5866e3b342f913b04b562819a31fb", 0x8c, 0x0, 0x0, 0x1, r7}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f0000001540)="03a6c87b9bfa3e2925ddeb55f7ad21c44530a5bb68c6cf1755a70a87f3127213864850220705acb2d6b0bff63a6a74383145907149bd7d6a6b39ffc774d005acbb30b2adb811af1c5db7eeaf89fc5dcc33ce79c8d9214c67c6d7e82ed1cc83916b9175053ec185556a4ece0fa3571668275263f7a15e66", 0x77, 0x3f, 0x0, 0x3, r8}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x3, 0xffffffffffffffc1, r1, &(0x7f0000001640)="35f66443ce98383b75d728f080c077704f8a28bf936e", 0x16, 0xd7, 0x0, 0x2}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000016c0)="4b9ac7d005981db04abf4a3603fbc6d176b1a1e019b392f933ae24e6b78e841f9319225dbcd93ff05b783d49804d3d9f5682e681c61bc065a75d8d587b1eece65f8bf0eb14aed1882e0df68a618bdd2acc90bf0694ecd1952f0022a031a89326c05496247e8078c0f5bce1a3ad1b5990d35b777b5eab3bc77119124712d5bbe41c1dcac3280059138d0d8c651f6048526e14afc67e4e4e5ad1443dbcb2f4223793a4ff5ba8cd605135ab5a3c893a969652a9d03daa37a3e5474fd907c737cbc8fc24530c00d037ccf564afe863d695c9e02907", 0xd3, 0x9, 0x0, 0x1, r9}]) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 21:31:04 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:04 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00\xc0\xd9\xae\x7f\xf9\x19!\x81f\x14\xe4\x1c\xden*\xbco\x06\x00><\xa2', 0x200002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) fchdir(r0) open$dir(&(0x7f0000000000)='.\x00', 0x49483f, 0x0) [ 314.390254] binder: 11310:11311 ioctl c0306201 0 returned -14 [ 314.463681] binder: 11310:11313 got reply transaction with no transaction stack 21:31:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:04 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 314.670462] binder_alloc: 11310: binder_alloc_buf, no vma [ 314.689321] binder: 11321:11322 got reply transaction with no transaction stack 21:31:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000340)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0xfffffdfd}) 21:31:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:05 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 314.932297] binder_alloc: 11310: binder_alloc_buf, no vma [ 314.988577] binder: 11330:11331 got reply transaction with no transaction stack 21:31:05 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:05 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)='\x00', 0x1) accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x40000000000010c, 0x0, 0x0) close(r2) 21:31:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:05 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 315.344127] binder: 11344:11346 got reply transaction with no transaction stack [ 315.383052] binder: 11347:11348 ioctl c0306201 0 returned -14 21:31:05 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:05 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x87ed) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "e4ed4589b94875533536b6f05cf608c13892d597aaf44c4200000000f689df69", 0x7, 0x200, 0x4, 0x400, 0x4, 0x4, 0x0, 0x10001}) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 21:31:05 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) r7 = getegid() sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x333, &(0x7f0000000280)=[@cred={0x0, 0x1, 0x2, r5, r6, r7}, @rights={0x0, 0x1, 0x1, [r1, r4, r3, r2, r4]}]}, 0x0) sendmsg$unix(r3, &(0x7f0000e4ffc8)={0x0, 0x0, 0x0, 0x0, &(0x7f000053c000)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}, 0x0) close(r3) close(r2) close(r1) [ 315.688555] binder: BINDER_SET_CONTEXT_MGR already set [ 315.694195] binder: 11357:11359 ioctl 40046207 0 returned -16 [ 315.724891] binder_set_nice: 8 callbacks suppressed [ 315.724906] binder: 11359 RLIMIT_NICE not set 21:31:05 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:06 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x400000, 0x3, 0x0, 0x1000, &(0x7f0000028000/0x1000)=nil}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000140)=r4) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000180)={0x7, [0x9, 0x4, 0x80000001, 0x2, 0x7f, 0x0, 0x6]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fc749"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:31:06 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 316.323929] binder_release_work: 14 callbacks suppressed [ 316.323948] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.400719] binder: 11382 RLIMIT_NICE not set 21:31:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe078bc36f1600000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x4) lsetxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='}cpusetppp1!-vboxnet1mime_typenodev/^wlan1\x00', 0x2b, 0x3) [ 316.442596] binder: BINDER_SET_CONTEXT_MGR already set [ 316.448179] binder: 11384:11385 ioctl 40046207 0 returned -16 [ 316.513292] binder: 11385 RLIMIT_NICE not set 21:31:06 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 316.560803] binder_transaction: 13 callbacks suppressed [ 316.560848] binder: 11384:11389 transaction failed 29201/-71, size 16-0 line 2801 [ 316.577856] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.604843] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.635068] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.659495] binder: BINDER_SET_CONTEXT_MGR already set [ 316.665328] binder: 11391:11393 ioctl 40046207 0 returned -16 [ 316.675561] binder: 11393 RLIMIT_NICE not set 21:31:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x37f6, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000080)) [ 316.723633] binder: 11391:11395 transaction failed 29201/-71, size 16-0 line 2801 21:31:06 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000100)={0x800}, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigsuspend(&(0x7f0000000080), 0x8) 21:31:07 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 317.326932] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.374285] binder: 11405 RLIMIT_NICE not set [ 317.442253] binder: BINDER_SET_CONTEXT_MGR already set [ 317.447797] binder: 11407:11408 ioctl 40046207 0 returned -16 21:31:07 executing program 1: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 317.497467] binder: 11408 RLIMIT_NICE not set [ 317.508700] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.545484] binder_transaction: 4 callbacks suppressed [ 317.545507] binder: 11407:11410 got reply transaction with no transaction stack [ 317.558549] binder: 11407:11410 transaction failed 29201/-71, size 16-0 line 2801 [ 317.607541] binder: BINDER_SET_CONTEXT_MGR already set [ 317.613016] binder: 11411:11412 ioctl 40046207 0 returned -16 [ 317.626979] binder: 11412 RLIMIT_NICE not set [ 317.675907] binder: 11411:11413 got reply transaction with no transaction stack [ 317.683577] binder: 11411:11413 transaction failed 29201/-71, size 16-0 line 2801 21:31:07 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x338d, 0x2, 0x0, 0x1}, 0x2c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x201, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x9, 0x3, 0x9, 'queue0\x00', 0x7}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r0, &(0x7f0000000080), 0x0}, 0x18) 21:31:08 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @local, 0x0, 0x1, [@multicast2]}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x84000) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)=ANY=[@ANYBLOB="ffffffffffff00001400000000000000e000000100004e2100089078"], 0x0) 21:31:08 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000001d40)='/dev/dsp#\x00', 0x1, 0x8042) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000040)) fstatfs(r0, &(0x7f0000000100)=""/105) 21:31:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 318.339639] binder: 11425 RLIMIT_NICE not set [ 318.345716] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.418918] binder: BINDER_SET_CONTEXT_MGR already set [ 318.424580] binder: 11429:11430 ioctl 40046207 0 returned -16 [ 318.448401] binder: 11430 RLIMIT_NICE not set 21:31:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 318.484012] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.500353] binder: 11429:11434 got reply transaction with no transaction stack [ 318.508024] binder: 11429:11434 transaction failed 29201/-71, size 16-0 line 2801 [ 318.590732] binder: BINDER_SET_CONTEXT_MGR already set [ 318.596396] binder: 11436:11437 ioctl 40046207 0 returned -16 [ 318.610246] binder: 11436:11437 ioctl c0306201 0 returned -14 [ 318.617046] binder: 11437 RLIMIT_NICE not set [ 318.665430] binder: 11436:11438 got reply transaction with no transaction stack [ 318.673138] binder: 11436:11438 transaction failed 29201/-71, size 16-0 line 2801 21:31:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000001d40)='/dev/dsp#\x00', 0x1, 0x8042) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) ioctl$int_in(r0, 0x800060c0045002, &(0x7f0000000040)) fstatfs(r0, &(0x7f0000000100)=""/105) 21:31:08 executing program 4: prctl$PR_SET_FP_MODE(0x2d, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7fffffff, 0x200000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000180)=[0xee01, 0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x1000000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}], [{@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r4}}, {@subj_type={'subj_type', 0x3d, '\x1a:'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$FUSE_ATTR(r0, &(0x7f0000000480)={0x78, 0xfffffffffffffffe, 0x4, {0x50000000000, 0x4, 0x0, {0x3, 0x1b48d03f, 0x2, 0x4, 0x3, 0x5, 0x400000000000000, 0xffffffff, 0x100, 0xbf, 0x3, r1, r3, 0x93b, 0x8}}}, 0x78) r5 = syz_open_dev$sndctrl(&(0x7f0000000500)='/dev/snd/controlC#\x00', 0x7fffffff, 0x301000) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000540)) getsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000580)=""/119, &(0x7f0000000600)=0x77) setxattr$trusted_overlay_redirect(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)='trusted.overlay.redirect\x00', &(0x7f00000006c0)='./file0\x00', 0x8, 0x3) ioctl(r0, 0x45f3, &(0x7f0000000700)="08f1fa78199f1b16a3f73b71f357a695e6ad6e299aa0883d42dba8ecca0a2fd02d5b7760156a08f5d51ea8de3b43e0397e64816751e5b563f2b749c9689f0717ed6a62d423e854d563ea14381807ac2c1645803ca614bbc9fad9f387f3106b405199dfc144b1b274ad0f122607bd0548ab9cd6d4230064d7cf167590c4fdcf35deb355cd7229a96da9815b4267941953a34ba11d0e77e1886bdbb2cd1d8d1b7f7e8d60f9f7db3561d14eb28564") ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000007c0)=0xfffffffffffffff9) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @local, 0xf000000000000000}}, 0x8b6, 0x7, 0x5, 0x1, 0x1}, &(0x7f0000000980)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000009c0)={r6, 0x10001}, &(0x7f0000000a00)=0x8) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000a40)=0x5) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a80)={r7, 0x7}, &(0x7f0000000ac0)=0x8) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000b00)=0x7, &(0x7f0000000b40)=0x2) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000000bc0)={0xa0, 0x15, "e004b953c91956eef4269d32faab5cd8aeae6a8708"}) symlink(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)='./file1\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001c80)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000da9000/0x3000)=nil, &(0x7f0000e6d000/0x2000)=nil, &(0x7f0000e86000/0x1000)=nil, &(0x7f0000000c80)="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", 0x1000, r5}, 0x68) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000001d00)={0xfffffffffffffff7, 0x4, [0x10000]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000001d40)=""/225) r9 = add_key$user(&(0x7f0000001e40)='user\x00', &(0x7f0000001e80)={'syz', 0x0}, &(0x7f0000001ec0)="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", 0x1000, 0xfffffffffffffff9) r10 = add_key(&(0x7f0000002ec0)='big_key\x00', &(0x7f0000002f00)={'syz', 0x2}, &(0x7f0000002f40)="81c66b41b306bf4ecd422d85ac91d14ad6e8d8fe8443a40de750f8eab91a2d26e5e4d56dc397634ab50b85f41ef7ea2dca3eec6e34e96700437d99038e42a665eb1e6d359d37855b882111651c85037c4c2fb69400486f9b8fbb1eb7f2a12ea0a03b69eb9cf43b548bc9aea94f3a1d092b352888b3fd9dfc6e8a86cc7bfb7d67d1581b050968ac04f5881004e292b1a8d5d1c892317f09a323956a89ca59d1d3df6da05ec647ed784a4248394ea7d93e36dadd23e374be4fa02fc67e7f4e58d79d1e712cb98d6e472746593ecdf6c7b3ad164334035511d9ea6184e5392df9f5f0", 0xe1, 0xfffffffffffffffe) r11 = add_key(&(0x7f0000003040)='blacklist\x00', &(0x7f0000003080)={'syz', 0x3}, &(0x7f00000030c0)="e097362ef559dec20c3a2bd5817bca04326dfd636835d5cda0d870746a276e2e7585f184a0e29eb1cd80236014de727eaf82007e4b8b1a57ffd5ba45ad6cb7e6f8c4dfc9df9b7f62f75209e6ab30f670e9c4b149506428156c1dfc417b8c19080a202930029c70c756b282efef40e3d9dc8ddf828646fd7f7d829a15052b65aca5a19d2748f7fc760d326894d85abd59aaac114542d2dcbd3e4fc7fe1bd87f8b59da1bbe772287ced096e8bd0cde874c77350b094852698a95654f12f0", 0xbd, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000003180)={r9, r10, r11}, &(0x7f00000031c0)=""/224, 0xe0, &(0x7f0000003340)={&(0x7f00000032c0)={'sha256-ni\x00'}, &(0x7f0000003300)="7fdcdd6bccc14eb3", 0x8}) 21:31:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/108) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x2) write$FUSE_NOTIFY_POLL(r3, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0xfffffea6) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x0, 0x1, 0x1, r3}) 21:31:09 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 319.336701] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.453388] binder: BINDER_SET_CONTEXT_MGR already set [ 319.458901] binder: 11453:11454 ioctl 40046207 0 returned -16 21:31:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 319.507501] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.529618] binder: 11453:11455 got reply transaction with no transaction stack [ 319.537346] binder: 11453:11455 transaction failed 29201/-71, size 16-0 line 2801 [ 319.639758] binder: BINDER_SET_CONTEXT_MGR already set [ 319.645382] binder: 11457:11458 ioctl 40046207 0 returned -16 [ 319.662365] binder: 11457:11458 ioctl c0306201 0 returned -14 [ 319.726004] binder: 11457:11459 got reply transaction with no transaction stack [ 319.733806] binder: 11457:11459 transaction failed 29201/-71, size 16-0 line 2801 [ 320.049291] IPVS: ftp: loaded support on port[0] = 21 21:31:10 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 320.366211] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.442751] chnl_net:caif_netlink_parms(): no params data found [ 320.505995] binder: BINDER_SET_CONTEXT_MGR already set [ 320.511358] binder: 11468:11469 ioctl 40046207 0 returned -16 21:31:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x200000000000006, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r2, &(0x7f0000002700)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @local, 0xd}, 0x80, &(0x7f0000001640)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x45) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/\x00\x00\xb6\x97<[0@\xac\xa4R\xce{f\xe9\xbb\x8fyI\x90q\xe5?\xa8\xbc\xc1\n\x15\xc7cC\xce-\xb7\xbb>:\xf7\x92\x83x\xb5o/\xa9Q\xbdi\x15c\xebxd\x19\xb4\xe2^\xb5\xe4b\xcc\xa9\xee\xeb4\xe7\xf5\xfc\xa6\xce(67G\x18E\xe2\xa1\xbaP]\xf6\xae\x98a\x06\xd1o!\xd8\xe7hU\x9a\x8d\xd3\xeaQ\xc1y+2!\x89\xc8\xfc\rWP\xd1\x9d\x8b\xbf\xb1\xe6I\xb9\x19\xfb\x02\xbb\xe2\x04\xee\x8b\xe4\xe8\xb7&GV\xfdd\x11\x9cO\xe2\xafykv\x06L:X\xfd\xefn\xd0Se\x89\xa2J-\xdb\xb8C\xb2\x8a\x9a\xae\xfcO\xf4\x85\x99\xb7gT\x9a\xbf\x05$!k\xd4\xb2\x1f^\xa5eB\xbd\x98\x99p\x14\xb1\xb7!{\x1de\xd8eP[\xc56\x95\x0eu\v,1?\xe3\x99\xe6g\xc9\x1d\a', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r1) 21:31:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 320.559380] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.595860] binder: 11468:11470 got reply transaction with no transaction stack [ 320.603642] binder: 11468:11470 transaction failed 29201/-71, size 16-0 line 2801 [ 320.640367] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.647238] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.656349] device bridge_slave_0 entered promiscuous mode [ 320.687237] binder: BINDER_SET_CONTEXT_MGR already set [ 320.692977] binder: 11473:11475 ioctl 40046207 0 returned -16 [ 320.731376] binder: 11473:11475 ioctl c0306201 0 returned -14 [ 320.740892] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.747684] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.756343] device bridge_slave_1 entered promiscuous mode [ 320.767432] binder_set_nice: 5 callbacks suppressed [ 320.767448] binder: 11475 RLIMIT_NICE not set [ 320.786424] syz-executor.3 (11476) used greatest stack depth: 53176 bytes left [ 320.825447] binder: 11473:11478 got reply transaction with no transaction stack 21:31:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0xa9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='team0\x00', 0x642) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r3 = getpid() r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x2}}, 0x18) tkill(r3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 320.833111] binder: 11473:11478 transaction failed 29201/-71, size 16-0 line 2801 [ 320.849056] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 320.861386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 320.899205] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 320.908162] team0: Port device team_slave_0 added [ 320.917763] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 320.926578] team0: Port device team_slave_1 added [ 320.935626] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 320.947205] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 321.040044] device hsr_slave_0 entered promiscuous mode [ 321.097348] device hsr_slave_1 entered promiscuous mode [ 321.158930] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 321.180267] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 21:31:11 executing program 3: clone(0x41f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)={0x9}) ptrace(0x10, r0) ptrace$poke(0x1, r0, 0x0, 0x0) 21:31:11 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 321.283989] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.290572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.297830] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.304551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.385321] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.400700] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.460441] binder: 11489 RLIMIT_NICE not set [ 321.466605] binder: undelivered TRANSACTION_ERROR: 29201 [ 321.528819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.581601] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.602166] binder: undelivered TRANSACTION_ERROR: 29201 [ 321.607862] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 321.622715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.630665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.659704] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 321.665960] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.704623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 321.714509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.723472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.731778] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.738361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.751520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 321.759750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.768715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.777103] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.783791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.800553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 321.807859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.828908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 321.836208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.859663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 321.868140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.877987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.888320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.903222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 321.917340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 321.924959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.934154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.943183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.951631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.970299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 321.981509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.993614] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 321.999700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.008511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 322.018776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.042926] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 322.070222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.476528] could not allocate digest TFM handle sha256-ni [ 322.547586] could not allocate digest TFM handle sha256-ni 21:31:12 executing program 4: mq_open(&(0x7f0000000080)=')\x00', 0x882, 0x2, &(0x7f00000000c0)={0x1, 0x2a4, 0x40, 0x7, 0xac6, 0x2, 0xfffffffffffffffc, 0x3ff}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") getpriority(0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1f0}, 0x1, 0x0, 0x0, 0x48004}, 0x10) 21:31:12 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200400, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000080)={0x100000000}) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x200) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYPTR64], 0x8) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000002900)=""/4096, 0xfffffe6d}], 0x1, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 322.708478] binder: 11514 RLIMIT_NICE not set [ 322.717164] binder: 11517 RLIMIT_NICE not set [ 322.735585] binder: BINDER_SET_CONTEXT_MGR already set [ 322.740997] binder: 11513:11515 ioctl 40046207 0 returned -16 [ 322.765888] binder: 11509:11520 got reply transaction with no transaction stack [ 322.773700] binder: 11509:11520 transaction failed 29201/-71, size 16-0 line 2801 21:31:12 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 322.807941] binder: 11521 RLIMIT_NICE not set [ 322.825463] binder: 11513:11515 got reply transaction with no transaction stack [ 322.833259] binder: 11513:11515 transaction failed 29201/-71, size 16-0 line 2801 21:31:12 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x80, 0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x9, &(0x7f0000000140)={0xffffffffffff7fff}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000010, &(0x7f0000000280)=0xe76, 0x67) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x100, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000002c0)) 21:31:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20001000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r3 = dup3(r0, r1, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000015) [ 322.978330] binder: 11525 RLIMIT_NICE not set 21:31:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 323.035941] binder: undelivered TRANSACTION_ERROR: 29201 21:31:13 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 323.159942] binder: BINDER_SET_CONTEXT_MGR already set [ 323.165546] binder: 11530:11533 ioctl 40046207 0 returned -16 [ 323.185077] binder: 11533 RLIMIT_NICE not set [ 323.231684] binder: 11530:11539 got reply transaction with no transaction stack [ 323.239501] binder: 11530:11539 transaction failed 29201/-71, size 16-0 line 2801 [ 323.309782] binder: 11541 RLIMIT_NICE not set 21:31:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8fffff5000069a2f8ff00000000bf2000000000000095"], 0x0}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x224) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, r2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 21:31:13 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) 21:31:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 323.616788] binder: BINDER_SET_CONTEXT_MGR already set [ 323.622487] binder: 11546:11547 ioctl 40046207 0 returned -16 [ 323.628948] binder: undelivered TRANSACTION_ERROR: 29201 21:31:13 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 323.819906] binder: 11550 RLIMIT_NICE not set [ 323.867899] binder: 11549:11553 got reply transaction with no transaction stack [ 323.875585] binder: 11549:11553 transaction failed 29201/-71, size 16-0 line 2801 [ 323.890931] binder: BINDER_SET_CONTEXT_MGR already set [ 323.896450] binder: 11552:11554 ioctl 40046207 0 returned -16 21:31:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 324.036563] binder: undelivered TRANSACTION_ERROR: 29201 21:31:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="66670f32ba4100ed0f20e06635010000000f22e03e650f353e650f01cbf3640f06baa100b02aeebaf80c66b89ff8738c66efbafc0cb0d1ee670f22520f01cf", 0x3f}], 0x1, 0x1, &(0x7f0000000300), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0x8090ae81, 0x713000) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x8, 0x0, [{0x80000001, 0x0, 0x0, 0x0, @sint={0x2, 0x100000000}}, {0x33, 0x7, 0x0, 0x0, @msi={0x5, 0x5}}, {0x3, 0x1, 0x0, 0x0, @adapter={0x3, 0x0, 0x9, 0xffffffff, 0x4}}, {0x7, 0x4, 0x0, 0x0, @sint={0x8, 0xffffffff}}, {0x802, 0x3, 0x0, 0x0, @msi={0x1, 0x4c9b, 0x3}}, {0x7, 0x3, 0x0, 0x0, @sint={0xfff, 0xffffffff}}, {0x5, 0x4, 0x0, 0x0, @msi={0x1, 0x4, 0x9a}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x0, 0x800, 0x5, 0xfffffffffffffff8, 0x100000000}}]}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0x6, 0x800}) r4 = open(0xffffffffffffffff, 0x0, 0x35) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) [ 324.093067] protocol 88fb is buggy, dev hsr_slave_0 [ 324.098740] protocol 88fb is buggy, dev hsr_slave_1 21:31:14 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 324.260658] binder: BINDER_SET_CONTEXT_MGR already set [ 324.266181] binder: 11559:11562 ioctl 40046207 0 returned -16 [ 324.337474] binder: 11562 RLIMIT_NICE not set [ 324.383387] binder: 11559:11570 got reply transaction with no transaction stack [ 324.391103] binder: 11559:11570 transaction failed 29201/-71, size 16-0 line 2801 21:31:14 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 21:31:14 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x0, 0xfffffffffffffffe, 0x0, 0x0, "0118c05a71bb54462e5338900f16afc8ce3a7c9c42be4bba5ed22d952db6531e"}) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r3 = getuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000840)='/dev/mixer\x00', 0x20082, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000980)=0xe8) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/full\x00', 0x4000, 0x0) bind$xdp(r6, &(0x7f0000000a00)={0x2c, 0x7, r7, 0x29, r8}, 0x10) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0xd) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000680)=0xc) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() getgroups(0x6, &(0x7f0000000780)=[0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee00]) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r1}, {0x2, 0x2, r3}, {0x2, 0x2, r4}, {0x2, 0x6, r5}, {0x2, 0x2, r9}, {0x2, 0x1, r10}, {0x2, 0x3, r11}, {0x2, 0x1, r12}], {0x4, 0x7}, [{0x8, 0x5, r13}, {0x8, 0x5, r14}, {0x8, 0x7, r15}], {0x10, 0x1}, {0x20, 0x6}}, 0x7c, 0x1) [ 324.549897] binder: BINDER_SET_CONTEXT_MGR already set [ 324.555669] binder: 11575:11576 ioctl 40046207 0 returned -16 [ 324.597710] binder: 11575:11576 ioctl c0306201 0 returned -14 21:31:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:14 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 324.704390] binder: undelivered TRANSACTION_ERROR: 29201 [ 324.877125] binder: 11582:11587 got reply transaction with no transaction stack [ 324.884781] binder: 11582:11587 transaction failed 29201/-71, size 16-0 line 2801 [ 324.906835] binder: BINDER_SET_CONTEXT_MGR already set [ 324.912392] binder: 11585:11586 ioctl 40046207 0 returned -16 [ 324.931116] binder: 11585:11586 ioctl c0306201 0 returned -14 21:31:15 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 325.115676] binder: BINDER_SET_CONTEXT_MGR already set [ 325.121225] binder: 11588:11590 ioctl 40046207 0 returned -16 [ 325.137925] binder: undelivered TRANSACTION_ERROR: 29201 [ 325.159587] binder: 11588:11590 ioctl c0306201 0 returned -14 21:31:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:15 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8100, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e22, @local}}) socket$isdn(0x22, 0x3, 0x26) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585605, &(0x7f0000000200)={0x0, 0x0, {0x0, 0x0, 0x3009}}) 21:31:15 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 325.382316] binder: BINDER_SET_CONTEXT_MGR already set [ 325.387781] binder: 11593:11594 ioctl 40046207 0 returned -16 [ 325.399476] binder: BINDER_SET_CONTEXT_MGR already set [ 325.405071] binder: 11592:11597 ioctl 40046207 0 returned -16 [ 325.479496] binder: 11593:11599 got reply transaction with no transaction stack [ 325.487231] binder: 11593:11599 transaction failed 29201/-71, size 16-0 line 2801 21:31:15 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000004740)={&(0x7f0000000100)=@in6={0xa, 0x4e21, 0x0, @local, 0x9}, 0x80, 0x0}, 0xe803) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000b80)='9', 0x1}], 0x1}, 0xc000) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @loopback}], 0x20) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="1c", 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001140)="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", 0x57b}], 0x1}, 0x8000) sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001e80)='r', 0x1}], 0x1}, 0x0) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000000c0)=0x1c) 21:31:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 325.677864] binder: undelivered TRANSACTION_ERROR: 29201 21:31:15 executing program 4: prctl$PR_GET_FPEMU(0xd, &(0x7f0000000100)) 21:31:15 executing program 3: setreuid(0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0, 0x8d071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000005, 0x4012, r0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca32, 0xffffffffffffffff, 0x0) [ 325.820418] binder_set_nice: 2 callbacks suppressed [ 325.820547] binder: 11610 RLIMIT_NICE not set [ 325.868051] binder: 11609:11611 got reply transaction with no transaction stack [ 325.875878] binder: 11609:11611 transaction failed 29201/-71, size 16-0 line 2801 21:31:16 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x7ff, 0x4, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x10000) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x8, 0x7, 0x5}) ioctl$KDDISABIO(r0, 0x4b37) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff8000/0x4000)=nil, 0x4000}, 0x2}) close(r1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x400000, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000280)=0x10001) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x2000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000180)={0x1, 0xe08, 0xffff}) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) 21:31:16 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='netdevsim0\x00', 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x2}}, 0x18) 21:31:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:16 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 326.274115] binder: undelivered TRANSACTION_ERROR: 29201 21:31:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x600210) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r0, 0x0, 0x2002700) [ 326.370046] binder: BINDER_SET_CONTEXT_MGR already set [ 326.375851] binder: 11628:11629 ioctl 40046207 0 returned -16 [ 326.428497] binder: BINDER_SET_CONTEXT_MGR already set [ 326.434111] binder: 11631:11632 ioctl 40046207 0 returned -16 [ 326.468423] binder: 11634 RLIMIT_NICE not set [ 326.483262] binder: 11628:11629 got reply transaction with no transaction stack [ 326.490855] binder: 11628:11629 transaction failed 29201/-71, size 16-0 line 2801 21:31:16 executing program 3: accept4$packet(0xffffffffffffffff, &(0x7f0000005780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000057c0)=0x14, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000bd000000000000000ba00000000000009500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41f00, 0x0, [], r0}, 0x48) 21:31:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 326.730532] binder: undelivered TRANSACTION_ERROR: 29201 21:31:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:16 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x81) [ 326.776348] binder: undelivered TRANSACTION_ERROR: 29201 [ 326.871681] binder: 11643 RLIMIT_NICE not set [ 326.918010] binder: 11642:11649 got reply transaction with no transaction stack [ 326.925859] binder: 11642:11649 transaction failed 29201/-71, size 16-0 line 2801 21:31:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 326.998081] binder: BINDER_SET_CONTEXT_MGR already set [ 327.003778] binder: 11650:11651 ioctl 40046207 0 returned -16 21:31:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 327.056975] binder: 11650:11651 unknown command 25344 [ 327.062476] binder: 11650:11651 ioctl c0306201 200001c0 returned -22 [ 327.086747] binder: 11651 RLIMIT_NICE not set 21:31:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:17 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 327.408246] binder: BINDER_SET_CONTEXT_MGR already set [ 327.413970] binder: 11662:11663 ioctl 40046207 0 returned -16 21:31:17 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCXONC(r1, 0x540a, 0x101) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000000)='&', 0x1) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 21:31:17 executing program 3: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:17 executing program 3: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 327.737168] binder: undelivered TRANSACTION_ERROR: 29201 21:31:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 327.880763] binder: undelivered TRANSACTION_ERROR: 29201 [ 327.881234] binder: 11679 RLIMIT_NICE not set 21:31:18 executing program 3: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 327.969585] binder: BINDER_SET_CONTEXT_MGR already set [ 327.975266] binder: 11680:11682 ioctl 40046207 0 returned -16 [ 327.989166] binder_transaction: 1 callbacks suppressed [ 327.989187] binder: 11678:11683 got reply transaction with no transaction stack [ 328.002377] binder_transaction: 1 callbacks suppressed [ 328.002413] binder: 11678:11683 transaction failed 29201/-71, size 16-0 line 2801 21:31:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 328.054302] binder: 11680:11684 unknown command 25344 [ 328.059680] binder: 11680:11684 ioctl c0306201 200001c0 returned -22 [ 328.100358] binder: 11682 RLIMIT_NICE not set [ 328.161126] binder: BINDER_SET_CONTEXT_MGR already set [ 328.166878] binder: 11688:11690 ioctl 40046207 0 returned -16 [ 328.175396] binder: 11688:11690 unknown command 25344 [ 328.180873] binder: 11688:11690 ioctl c0306201 200001c0 returned -22 [ 328.189073] binder: 11690 RLIMIT_NICE not set [ 328.195451] binder: 11680:11692 got reply transaction with no transaction stack [ 328.203356] binder: 11680:11692 transaction failed 29201/-71, size 16-0 line 2801 21:31:18 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 328.238031] binder: 11688:11693 got reply transaction with no transaction stack [ 328.245759] binder: 11688:11693 transaction failed 29201/-71, size 16-0 line 2801 21:31:18 executing program 3: r0 = syz_open_dev$video(0x0, 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 328.330991] binder: BINDER_SET_CONTEXT_MGR already set [ 328.336757] binder: 11694:11696 ioctl 40046207 0 returned -16 21:31:18 executing program 3: r0 = syz_open_dev$video(0x0, 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:18 executing program 3: r0 = syz_open_dev$video(0x0, 0x100000000005, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 328.821393] binder: undelivered TRANSACTION_ERROR: 29201 21:31:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:18 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 328.862402] binder: undelivered TRANSACTION_ERROR: 29201 [ 329.014918] binder: 11710:11712 unknown command 25344 [ 329.020406] binder: 11710:11712 ioctl c0306201 200001c0 returned -22 [ 329.043236] binder: BINDER_SET_CONTEXT_MGR already set [ 329.048670] binder: 11709:11713 ioctl 40046207 0 returned -16 21:31:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2f, &(0x7f0000000200)=0x6, 0x4) bind(r0, &(0x7f0000000140)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x3f, 0x4) bind(r0, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) shutdown(r0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) [ 329.080042] binder: 11715 RLIMIT_NICE not set [ 329.087244] binder: undelivered TRANSACTION_ERROR: 29201 [ 329.103542] binder: 11713 RLIMIT_NICE not set [ 329.117371] binder: 11710:11712 got reply transaction with no transaction stack [ 329.125146] binder: 11710:11712 transaction failed 29201/-71, size 16-0 line 2801 21:31:19 executing program 3: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:19 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 329.151310] binder: 11709:11717 got reply transaction with no transaction stack [ 329.158995] binder: 11709:11717 transaction failed 29201/-71, size 16-0 line 2801 [ 329.267603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 329.351437] binder: BINDER_SET_CONTEXT_MGR already set [ 329.357009] binder: 11724:11725 ioctl 40046207 0 returned -16 21:31:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 329.416525] binder: undelivered TRANSACTION_ERROR: 29201 21:31:19 executing program 3: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 329.561344] binder: 11729:11730 unknown command 4219648 [ 329.567209] binder: 11729:11730 ioctl c0306201 200001c0 returned -22 21:31:19 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @multicast2}}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x24, r1, 0x209, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 329.630765] binder: 11730 RLIMIT_NICE not set [ 329.678281] binder: 11729:11733 got reply transaction with no transaction stack [ 329.686100] binder: 11729:11733 transaction failed 29201/-71, size 16-0 line 2801 21:31:19 executing program 3: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0xf, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:19 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x24040) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) getsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0x4) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/92, 0x5c) 21:31:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 329.889668] binder: undelivered TRANSACTION_ERROR: 29201 21:31:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) [ 330.008559] binder: BINDER_SET_CONTEXT_MGR already set [ 330.014689] binder: 11745:11746 ioctl 40046207 0 returned -16 [ 330.074826] binder: 11745:11748 got reply transaction with no transaction stack [ 330.082551] binder: 11745:11748 transaction failed 29201/-71, size 16-0 line 2801 21:31:20 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000140)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x3, 0xfffffffffffffffd, 0xa1) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) 21:31:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 21:31:20 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) [ 330.243856] sctp: [Deprecated]: syz-executor.4 (pid 11753) Use of int in maxseg socket option. [ 330.243856] Use struct sctp_assoc_value instead [ 330.301610] sctp: [Deprecated]: syz-executor.4 (pid 11757) Use of int in maxseg socket option. [ 330.301610] Use struct sctp_assoc_value instead 21:31:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 21:31:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 330.435345] binder: BINDER_SET_CONTEXT_MGR already set [ 330.440864] binder: 11760:11761 ioctl 40046207 0 returned -16 [ 330.471759] binder: undelivered TRANSACTION_ERROR: 29201 21:31:20 executing program 4: accept4(0xffffffffffffffff, &(0x7f0000000200)=@sco, &(0x7f0000000280)=0x80, 0x80000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_smc(0x2b, 0x1, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x7a, 0x101000) r1 = accept4(r0, 0x0, &(0x7f0000000340)=0x11a, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x100000000, @media='eth\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r4 = dup(r3) fremovexattr(r4, 0x0) [ 330.581009] binder: 11765:11766 unknown command 4219648 [ 330.586904] binder: 11765:11766 ioctl c0306201 200001c0 returned -22 [ 330.645609] binder: 11765:11771 got reply transaction with no transaction stack [ 330.654328] binder: 11765:11771 transaction failed 29201/-71, size 16-0 line 2801 21:31:20 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:20 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x969fa4816d8095dc) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\n\b@\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 21:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 330.957030] binder: 11777:11778 unknown command 4219648 [ 330.962750] binder: 11777:11778 ioctl c0306201 200001c0 returned -22 [ 331.010632] binder_set_nice: 2 callbacks suppressed [ 331.010649] binder: 11782 RLIMIT_NICE not set [ 331.046058] binder: 11777:11778 got reply transaction with no transaction stack 21:31:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 331.053745] binder: 11777:11778 transaction failed 29201/-71, size 16-0 line 2801 21:31:21 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) setuid(0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r1) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x7f, 0x4) syz_execute_func(&(0x7f00000001c0)="0faef24029450ff3440f1157f13a911b911bf9174c464119467d597f8a54aa0b6f55f40fb11d0039804167640f71f6452b610df34c0f38f6a30a000000c40fb3ccc928808fcd78a3000006b5d31e0ff7c6") [ 331.097459] binder: BINDER_SET_CONTEXT_MGR already set [ 331.103116] binder: 11785:11786 ioctl 40046207 0 returned -16 [ 331.121284] binder: 11785:11786 unknown command 25344 [ 331.126865] binder: 11785:11786 ioctl c0306201 200001c0 returned -22 [ 331.215231] binder: 11788 RLIMIT_NICE not set [ 331.215965] binder: 11785:11786 got reply transaction with no transaction stack [ 331.227613] binder: 11785:11786 transaction failed 29201/-71, size 16-0 line 2801 21:31:21 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) 21:31:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:21 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) 21:31:21 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) setuid(0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r1) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x7f, 0x4) syz_execute_func(&(0x7f00000001c0)="0faef24029450ff3440f1157f13a911b911bf9174c464119467d597f8a54aa0b6f55f40fb11d0039804167640f71f6452b610df34c0f38f6a30a000000c40fb3ccc928808fcd78a3000006b5d31e0ff7c6") 21:31:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 331.677774] binder: BINDER_SET_CONTEXT_MGR already set [ 331.683255] binder: 11804:11806 ioctl 40046207 0 returned -16 [ 331.779121] binder: BINDER_SET_CONTEXT_MGR already set [ 331.784774] binder: 11810:11811 ioctl 40046207 0 returned -16 [ 331.820035] binder: 11810:11811 unknown command 25344 [ 331.823634] binder: release 11801:11803 transaction 205 out, still active [ 331.825578] binder: 11810:11811 ioctl c0306201 200001c0 returned -22 [ 331.832354] binder: undelivered TRANSACTION_COMPLETE 21:31:21 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 331.865883] binder: 11814 RLIMIT_NICE not set 21:31:21 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) [ 331.949225] binder_release_work: 4 callbacks suppressed [ 331.949243] binder: undelivered TRANSACTION_ERROR: 29201 [ 331.960332] binder: send failed reply for transaction 205, target dead 21:31:22 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) 21:31:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 332.163852] binder: undelivered TRANSACTION_ERROR: 29201 21:31:22 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) setuid(0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_getoverrun(r1) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x7f, 0x4) syz_execute_func(&(0x7f00000001c0)="0faef24029450ff3440f1157f13a911b911bf9174c464119467d597f8a54aa0b6f55f40fb11d0039804167640f71f6452b610df34c0f38f6a30a000000c40fb3ccc928808fcd78a3000006b5d31e0ff7c6") 21:31:22 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 332.308121] binder: undelivered TRANSACTION_ERROR: 29189 21:31:22 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa0000000000000, 0x80000) ioctl$VT_RELDISP(r0, 0x5605) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x0, 0x400}}, 0x30) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x140) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x8000, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x3, 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001580)={0x0, 0xffffffffffffffff, 0x1ff, 0x12de}, &(0x7f00000015c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001d80)={0x0, @in={{0x2, 0x4e23, @local}}, 0x8, 0x6}, &(0x7f0000001e40)=0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000005400)={0x0, 0xffffffffffff849e}, &(0x7f0000005440)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000005b80)={0x0, 0x40, "3f70752d0f9a77fd96af3cc181b806f40a8906d19207a9b8b2f4e9445878abaedbf6ea489a61905eeda933c390a9f2795b134f7bbe3ce6ca04467c74389e4358"}, &(0x7f0000005c00)=0x48) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000005c40)={0x0, 0x1}, &(0x7f0000005c80)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000005cc0)=@assoc_value={0x0, 0xe91}, &(0x7f0000005d00)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000005e40)={0x0, 0x101}, &(0x7f0000005e80)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000006080)=[{&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x9, @empty}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="3380921fbda915b3143ab2ac2cb56c880fda724d01e34b4ab7137193f9d898359e0fc1ccd2e0cde3bdd1320c6575cc19257dd79b87e34bdbc28cc72c0c1916b538ce6928558fcd020ccfbfff8e7b5a7bea2e2fc09dae809ccc469071e42cd27660f00c7345ee1c9a1cc15d103e9d1b508c2644b91e", 0x75}, {&(0x7f0000001240)="3b7de33402f1a91c967aa34c0d26f4539692a7f7da7595ccd75e61cdc47232b4f683683e972f4583ca0e3f57e1c079594c39c43487a71797a016a0ef462e87fcaa5a230a381d3940fbf99ea2", 0x4c}, {&(0x7f00000012c0)="97755eae736a964779d60067b312f72ebbf8bde4386a2e78eca8315bd507630d2f6c6cdfbe05bdaa24e6a61721a17ab7e88004669f58daf16b280195a61418a3288ca5243bd37cd19ba993cae4fb09c9150534de1431ebc9139b5602a45e1941ce815315c552219d15e175cbabf8c5578be50e0905e75d068910d4b2c67c7b", 0x7f}, {&(0x7f0000001340)}, {&(0x7f0000001380)="2232e6ac89bc3dacae600bbc47a58fde7be44004cffb3e51f4c5177fa7486c7e17e8c011c83312158821c3880556b2b883139fa74fae1b3f48ccbc8527455b0b37ef20ed9ed3aad61a74059b378a9b83b1a263826603bc6144285b34191677594cf78ab4213ff60ec611ad2fc1da4e6644e1eb609ad71f89744679023f8672f18b3abb0bc6443281fa78b794af1573d6261c0ed33ed544c7e780c9449a718eee7a01287079c47eb49232e0", 0xab}, {&(0x7f0000001440)="e65689576776c42c743f0ecb5f7026a243876957b41636c2987768837e360dd4eac3ae5855c146d1ecb33f2468424a94daf9ce110414eaf5292d8a4b4184afe5fac7857ce0099c0269882896589373d36fbb29c6e253e181", 0x58}, {&(0x7f00000014c0)="ff0da2484117adb6a3a81a2d1cdbfa56c41420f6f951bb93e86c50df4249", 0x1e}], 0x8, &(0x7f0000001600)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x9, 0x0, 0x9ca2, 0xde, 0x7d, 0x4, 0x2e6, r3}}], 0x48, 0x2000c040}, {&(0x7f0000001680)=@in6={0xa, 0x4e21, 0x0, @mcast2, 0x100000000}, 0x1c, &(0x7f0000001a40)=[{&(0x7f00000016c0)="560d4d4bbce8e6329fa208391a34c0c803b0251ec085f37fb91b5f740b8c2d832b8d6dfea0ee07", 0x27}, {&(0x7f0000001700)="bb6d95c70aca49ac7ca5a397b010d464b4f1e81af394bb475459f6d2", 0x1c}, {&(0x7f0000001740)="85feaa6edf60ff2ecc452847feac4645ca3090977aaef08ea3ff8430a1c7b0b4240a02df7ed897d973c8951a320a5477279c9cc2279a486d7cea2a883f51adf800d6031fd91954d50e83a65cfc07a7e2e6a759760e9123a8dd2e86f3c400d5ed35f9aa4de1ea8f633d4a7434da3d99d7ecc71eb0903cbf6a9a949b0bfb2e14f9b4aa6171a4bdb7fad5060d3f10ed4aefe6b81e27446b6fe6289e444631361eb8433b5dc06bb120a3d76fa0a30781", 0xae}, {&(0x7f0000001800)="d80b1dc7bafadb2df2630323f6263140abb4ad8b03d9c2d9bef0af3f4fe9ee", 0x1f}, {&(0x7f0000001840)="944e4ed6405cfc1da875a73276c7e271223b4d08d292d24fe90189deacee9001e79806913c3a37b660ae5ef442565f2d", 0x30}, {&(0x7f0000001880)="0808926e7168c9110006756c7e74b27ad18d1d474751b87870c4f95c6371e1e207d6e52c57eba665f325f432d6624fa47bdb61dc1f4a3169cdedee90201af8346e32302b437f49852399ab3ffa6b6224ad2fcfdd94ab71e6fdd00f71f29bfbbd761d6f63aa67fd61033e755e9002e155beff1f66115687bcbf215b0bc62b52d97dd71751374325284af0f30a6e75929bb708b569ef7a90f02f932e1af82ef6d7834b4b7f4d63a652c01f9d38916241c5e983ba05c0cd672ba77045436cb49ddaa86c435240085cdefe21", 0xca}, {&(0x7f0000001980)="2ac0f5fb64ebd9ca0ffdf0e4ac4811acf5bbc8f85e9ce21c8b931ad4e5b2c4c51eec2c6cf35f9632816089686eea4fd2949c18294cb11e6d0eb335c98682ff4ff9f8a4201556dd2a594efcb1a30fae86b3347b7d82b33c08cc4438318c246e68ef9e650e9444e3cd46f333ca0fe062c89d6d1aee27570680b7fa413e32a1e0793b0d8df0b6878a2115ab0b33a89856aedacc6252", 0x94}], 0x7, 0x0, 0x0, 0xc4}, {&(0x7f0000001ac0)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000001b00)="ae162749783d0edb792f31c7b4804461dc33e6bdf7cdeec69b46fac141d97794d2204ac6f62a488ee770c68c5cc6ec", 0x2f}, {&(0x7f0000001b40)="163a889106c019806179d27312647b3ff6194886734dd12926ce2f3a9a0b0003943763f3fcf05d444300de5d3b3671d7b2cc921838e877efd16af918dbfc48e0cb656639f0602baf21fce1294dc2b2d21720108530d00cd04462ff393902862b8847f66d9a4f97f3563e15219004d966093137addafdd166fad4468d6aa938eab28b4042d4010bbbda7ed0e47d7377aef96e9690a33ca637a06793cccecfd1e0b9a0e24961a4fe57295f0e672f16ef849491cf8af60516958224f8f3eb26ab12a81417ca60559ef070c2bb48dd0bc87c2624", 0xd2}, {&(0x7f0000001c40)="5050c2304674df3ab122d30a5a1fdb8db35654900ee6feb1ad2ec92277dd12c62334ce772605c123fdb86ccc8ac1628c6c3c1640a4200738d37f07e1872d238cc33737efc4243a717367bab554a94b67c80bd0488ddf85c157ca225e9ffe8f46d56e345c94382282648061cbbd3a07aad4a080a53a5a73a9cb2cdb0fe55d9530c8e477fba04a45cf9f82d17050b273c6f6b98f8b4a22cda065a9f771cbb4aa0b74f80437a97f1d7d6f03fb97b0c6626dd0f83552d39e558b5a8de532c33735fe9df96957bd9b5c7897485c61bd33b47dd0a99a973699142d573840cb097277e679cd4b0947cd1c1a64df", 0xea}], 0x3, &(0x7f0000001e80)=[@init={0x18, 0x84, 0x0, {0x7, 0xb6d, 0x7, 0x1}}, @init={0x18, 0x84, 0x0, {0x3f, 0x4, 0x5, 0xfffffffffffffffb}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0x3, 0x20, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x68, 0x4000}, {&(0x7f0000001f00)=@in6={0xa, 0x4e21, 0x485a206f, @rand_addr="f73c97fd0e23e69d8bb1df566dec55e1", 0x7}, 0x1c, &(0x7f0000005080)=[{&(0x7f0000001f40)="cb28c2e783969145660c010146f5e09d4315977763564a4846f1ce145da94bdf78ebb8d625c1971fe05dba84bdd8a1693e2ed4beb19b68b93b041607bb54ef47b5c82ac8ff4ae4bfc9a04bec7952d33a584a99fd28962a4c1b6638e7e81e2b6a607d7242648489a0eefd9670d316b383c088c1770dc67e6c24891e695d21f4cae9a73e41bbc653011f0032eeb8fb7ad28ada63996fcb0a97ad9f749147fc03c436c3362530905687ff4c9be1e28aa44e35d296b6846247ffcbdebafdbdb4e87780f23a8de61d36ea960f4df533411841d9751cee99f0ccdf3079477fa6c0276b256b6c927aebbd3b4098c9c392218cf294ea2308206b7d34874b7efcc0d01567ad29bd69340f8aaf948ffb5f90ac6fc15255e92474f0d3a8850b2d09391974e87fcb43bb03278d81380b160885d0110595cd94033dedcc68686d3d3f4615a3c3c7de2d640586099c15cf3c388920d4501272033273d3eb656504fabe95447fae4a3ea72f2df07ba147bbb07eb788a1fcdab12fe5095a3e192c381f641039c0aaf48b3c6c8281be82a3ce093ce6cc24ef62996da0ae8bbf8953f39e8879138960054e1298980dc574ee6b3ad10adf446025f4f7eaa2003af01e36e6af0e3ac2e5193f450d9dfd30920812abd61821935d7e14d3030f814361d6f75ea0371b1968643010e6ed75c3ec83dc43cf0cbcfd7c0cbaf8c042ca4aa34254ac8496009ebea6010de151c80cfbe01ed91df5b3bc75d3b019d6898923750596d816ccbfddd0c6758e855363af8a33bcd4e1682918bbf0005bde287b36ded61c638671a45ba009c25f4b2a1ee509ff667b6126e4a054a31e4b19bae6a37293b43decefdfa59f79d55a86c904185272660640b375e2c3c4e1b50b857739c19315d00d2702681ae7928755a6a17a1e77e6bddd3db2a2fed9c94aed07ea3afa86bad5c490d514dab78d626ceb934b88299fdf18db4c4ee1aa9f4b3a2fc259e0da275222ef3549a5de98365b6f2ca128eeb5a6bac6c2bd836ddab652d41b6a541c277b08f70cec7d05bc558ec96383636208e5169bb2eea342c7ca80b1f80c718bf86e8acc1080343f42e0285099514af0dd368e0f3b4ed3903cb8924398c7d8da9a1b96d1dd2a3c670e3d00f4bf73ba84538c0c57e401b745e26327751f43e0037b3c7ba28f953e275d93d6c9e6b67776a0e0f5a8fe96ef8a2dca7fb6a7526d547e623b323b4c4d7d61878029449637028e14ce995ea1f8f562f9ce769cad9d5d9f6f3f59285e618e079cb93213f972cca91e55de3807fde77c96c5437309e38cb42603f2e0766adc062d4f74108750c9c3f25fe46526264dbabfd640d6f9b08d235d745d5afb982052ce782baa64a19c8ba509ab903224560e7d40b6ae45cd610d19b7f3876cb20eaa4639d3939d0e23256462d51bfc4f16725c041a89ecd65600915e2a2412f3f15560628e776cfadcc6c978691071a628362d83298a8a7081d68d44c9d2206713d54a558f732bd0ea857133b8653ba8503a124d82372149b1e2f3c327714c66e856c9519c390cc6bc464a49379f0ca1f8201dd5a11489f9cc232577f646bc3df1970e1c48c3a3338c2e9b57efeeb11ffe973710094cba9bcedaa4e08e772e676d83e74c322626e05a3181d76972e34f62eae6c43469f1cf8e2f2f90f939d811bf46c7c0e3287d094908154de7923519892820e73618831a0507b0e13e8a059ffba74188db58286b17936311ea3f1dc07ad65d54ef656bf7b76c98cd0c13aa19b6de6324e131cdbcb31eeb57699685467b58984e240e8d24c8f9eaf538e9f6b4dc79df48976611157635186cab7906bd933d8f8f25e75747222fe8b8adb3b64f3e5f929dafcab278252790540687558e42c9271f70fac847f8668e6940a5e24065a6c9dcb0059a835296f98e7616148f2db3d77b4aa9aa97be2bd11759b8d34be4d9496e6ff25e79d702b134b3451a4c79a92952b4109b7dcea7c46d35192b182e3c982ccf7d073eee5ae6fcc4902f744ad1ab5d6c7506295b96ac2367feb00bacf5c1afaaebe068706f25d88e8f29633e8ac67e683696d288ac43478833e0b37b10a94a2ccc5085a919d54940df82fa02f575b82588f6850a87d3bd3949a1acc8168f9068e9d737a0d5c17705141091964da4a697eb145971da22de38e000624da9a80d5fab5f56e8bb58ce5a5f10436f9c4f1f1e90169f38d4aa76c7a711260f62b5bb3a8989f4d2c8389449dfd70c5dbc9f484bf59714863fdf84db733964398902fbb20e09ec6d5cc963853cf4f9b3c2aae3659cdcf183e3f524b3880a06e48e1665f2b7a4865d87a33b28ca5ffb82115c72f8f962df5065477b07d3ac2d22c4ffb9c6e0e086033fdb7dd271c27c5341891a63f0c6b821e21e0e6d11f618ca13224896783cc370a6e0e4c373a0a92bcacb62c434e4ac8b95e61c1e4acd1bfb4da60e420b6a2200230433363953de4bb321b397e6681e604df964c16f47f07de942a8df4b6851b78b5f3c2f1d980397aedbc3f95ab96567d066bbb1de25d0d85d0d88cf15f45e61862709716ef98a8b6e91de25e2c6645e989d97595ffe0ceab0252a7847fc2e329ce595b5e5678bfc6db7a520a58040616b9545a7f4f98eebc0e0817a18b14a327196491a61bab5bdd1d7270a3f32d1e55751014d7bf0d172930a424977b252269c4fa19db9459d44741d3b4d4afec6b5464050eede199e5a15ae0b3cab718807e0b94d025c62eff74ae46fb48f27d9ed91a81b22b5b228221c1d3a1ffe74184e1b70942482a024cba28f6df14010faef41bd399d96bf848275383a5522aebcaf3dca9961399746c5259f5b1ede8938cac591394c6152821ae3dff1309e255779464abef4f0e492c22947ae1de574c4e864afc73be02945f9585e86afdac229d48ca9f44bdb41645b9fdc75bf65e77c0aa5ceaf3d5121759a34b8bdaa75686f7e34e2de77dc59010160684ab26fcc06b605591fde57912fa28cfd1f8ef7dd211622e39a59b8868fdb8f67786c8e7222245550cf291bc4075e65de36d26a961b8d3d26ac615dbe5f6dc2b329d36016eb26d0131648aee055fff92f57c4d63ed08eeeda8930c6eb775afa5efa00d3bff7c8e66495c13bc19b78fa46967ebd7b9435b6f52d5816ae65eacd0083d6fceff8fc443f231d2f8885b2e107812495c76e82927ce504fc924295dfe73133b802fe21f6b9d16d0e66ba0bc4de663bff648c78a64364ab0fdda5c3a4fe43e2f65647399855b7cfeb08afa6e471dd2759a9e46bc848723adb89550fc5ba22bb93864ebfbba9c73f18f73cb102ad1e812988e8a00ed804e991306d28bce74fa41394c8bd7798a34dbfcdd7eb440847951bc084921542883d765b28de7e4ff779485d44f27cde94797e885eede918368d60ecd3a94b5fc13d23a54f76ef43041999cff4b42ad57f0b606aa81093ec2b70cf8f49870c65c9fbaf3adcc2b69f50fd45179f3b2433827d2954d6373b7bd813b21ef2695e307ff67bf07e6c502150d5b18f60ec87b843a849e821f9f50f4afa894e16944be5dcdd63ccccfad01d54cb225c7db5c2e36bc41e9aed5744ea23dca54009dfda44bb2ed0fd5d04ef3493f563d8521e20c265195d38ffc2e1de1e42560fa562aa2c7a39700fd4513552621e385498262901e509fa5f0cca48ff0f45694f368c89540a01d75fbc61515dccfc0b6253ae314825653b134b5108ad17eeca6b0e0f07368d9431518f0132f3252d0ae0a9e842dc7d6866bb54803c05fed13c7131d19b712970bae3e3fdc95fd79c75ddf77977fb9c125e9840832fadee7981094d2897084c5c65616b0979dd9f9b3cd6454fe12b43208ddfdd69c0d52e47da672ec21ebe8d3a03b930669eb3e76685d54347b92d599aba834fe44b87f4bb6ccc1c9e123319a166a955e4ac1ee3ab117474e7a8622d8bbdb8ccc62a27e12b0af3eb6c904c1431af95f5e7b53febf69c9d08f0447005f7ef6b75574b86b35171f80e08144e1a7cc8c322ccc364b51a324e0ce9a1ce4aa9c2f5c1b658b676f7e6a6d62ba20f06e29b3cf5ebb17933c74767712c455bc21867916a8140b799cb6198daf9f195f33542e1d6ef4f4b8f0e4411a5a665bf05789de1f77472101a7fd7ef4b7130b41758f2bbca193b5fc092588a30ed7a63b04167f794e6abe8e000245d7d06527ce52d43ccc1fc6b7e52020e4ac7c5c13b550b293d4cb011c173bb5bc1695b916a68ba7bb6be5cb8b74f76a51f59aaa0b3380bc262a6197ed5414853597f8ea77a6a7c400afa3f274fa08d8a60814774923f790b0fb9e9d1d78eb23b5afb804d715eddc59a7b83667a252742aa2f0fa012ca3d8586cd30638d529e148f066720c36781e86ed8c6799c5c64e1d1e495c157f76464eabc18dc0d5f3e6848e357ce7dabad768fef91d3ad829953645c990f0ed3247c88933ad6d456d90850464b7101899215c5965ab5d4adfda3b3b6fabc56ae516d42a3b8ce6d8ee61ee9734fd2dff8758872322cc6d42e53d37015757316bd11b7ff8613194ba42ae28e17ba42856488a02359e64477e5eb63780bae4f77e120418e1dc9aa836c1c6d1c59cffb4fcf875db83e7ea337ef7d9b04a9ab370ed3cf75d037fa61b7888be8d7f1f51cca24f2efa66070785671b6254bd2f68a438dc915808d29ec16c92197d889184fc0eea4db771833c67072cb8980a9dcac9091ebbda3033b5995c2ff8e706c4ece2d4ccef7b5ec6ce44bf4d87357d7c095795e21053753234d6d57c831fd70f6c9dbf85e0dbace6836bfb970b2dd2f8bbafc08686543561ab9b5d98c8c3ed1ece5233f82b971704979c1cbf27610408abc76f879fe8b1de1e168251ef5b2bcca49d6d27714900f661c8388c0342ad3151d1c89ba6b4a288be33ccc15faaa9cb88479f8584eadea378c4d12eb9153bb5c15049dcc190ba4999ddd4247833d71fd4442ad2402177e6c153a91b12d12c2be8e01c86d68542db08ebeb6c76de776da5f4f67c58b40ea725a224ae01618c46b59cd0b8bea838c0b5859579614a25124736f71d095d67cf8a83f18d86c5e9d4b53a5cc18e227272af43a2cce8cf2db3a47144b0da27bffbcf2a80b671fe81b0d0206390f309dcf6b4125934831f2e67e3b00f69e2c00777b73edfae229b245e5880854036dc6a39f3fc572f4caae5e7cfc18dace03e0c6bc94dedc1c36bc4e71feb061c40986a2d4d7cc60e0827d78614e23f8e0e8d652967d3dcd06f0d9487d22403a3661d0a8ec747cc2f0081882a292c8caff4a5bdbfc3965d520795643abc6579d75e1e1e7c00ce3261a3cd89f2c5e9e97b392af665a6e4adbe6fb3a382d53f3941a67a5d04ddaa420b09ba161959e877750df9b81f385bd118a38825ce9f01c601fc4115304bdfe4c2c6f2dd306f0be55abaf4369d1833e44ba0e2051a09c5490b25fb2a0267b155b86f4c52e989a222d29d120a5ca61e4b8c8d3369d13491ae4c0ddd97661737b33f43e10dd38d726f828b6910e47c1b2dbb99303e971c2c9ca0b1eb92964913c0f92bab3ca94a577ad307b86fa6a0fb290fc75748b0a0d8d049771061b1f5156de6a8da30a1c9e4b7e587af5f2861fcba4d438593e0edaac45fe183bfa9f04d506fe0461d011581a9e48f02f38dfac2eec75ce38a33c9f9b312f43a07595b112f1625f4a4229ce05da57e7522b6182d7d59c2b7d625ba35618953fb09147c39369d099b7058104266aa8ab760cedd1626455db6eb67fb22742e29a0726642f51d20b34d43be063e975afccaf48e051d0eade802a8ae80b8e8a6fb754dd", 0x1000}, {&(0x7f0000002f40)="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", 0x1000}, {&(0x7f0000003f40)="1b962e8dbb9528e4d3ab5dc87ab2640d9ba14e5d821344f6b53c3d4d97cfe2f0ce5689eb52692f288a602ef0cda90a1b4cd18d8761f8c0da6b4d0abb1b5cf05b9cbaed23ae0eab3e32596c409a611664b6f7", 0x52}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="972bd452e392407c5fa385687761b20ee2ec12b361b72bd78263564a3f4d831f0ed5f3fa0cbc5208053fa4385459220a52faad29bd3abbe154c099170fc64dbff1d2b665de1f287f11f07af8d6433b0af5bc96f5e4447e16512b436e9488dd7b848c3b64eb17b8a09a3974f4f09433c601d11b7e4c0a42e82af232a2e34a852de8e702c986217c064a6a71bc48ca6ca76d104a0c13237b468ec16a56", 0x9c}], 0x5, &(0x7f0000005100)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}], 0x40, 0x4000000}, {&(0x7f0000005140)=@in6={0xa, 0x4e23, 0x6, @mcast2, 0x200}, 0x1c, &(0x7f00000053c0)=[{&(0x7f0000005180)="828b04dd5da020c2b819478e71f60ad82cb1f86bb891e5ae09a24ddf8aafc9e284b94167", 0x24}, {&(0x7f00000051c0)="a1da46a923b4b7fbd591c1d01086af79d7426b4626d18f7a9d84ea72ef02bd67dfb52fe722e5ea70b62394922ec76bd561cd46a5351a4df21acf78e269482b4ca07b4c9f56a21a551a7780e133feadce4aa2a2e4439d188fd94973e48fe8ba01dd4619cce8028a45d01ea9b6a6cfb8c9e56acd6fa6b9cd8515a40e757f26d6f183f848f7519584468b1c3e04b6f363611d6b901d030c75d19f96a0471fb8662d236524c56cee2e09d74d0b22f285f43e753459d7fd2fb4276eb3d06b7fa601f180990740abebed8a0f30574f5c", 0xcd}, {&(0x7f00000052c0)="e5003b2083616f843a24cba111528fe3da1bc77e510d224859b85e3e88f438286a78935af98ec443c13f77273bd6fa6f7bf5d5b2a37c7b9d6a9b345ef7e89147d5ee258e3290dfeba515a00a381cfcc0949f35ae60b152997a2403ef688435008955961078cd920eeb6b7318499cde1d840a877e7b", 0x75}, {&(0x7f0000005340)="1662fde4f96e84cd2bed36b443ec0f1dd0778ab4dc3fa095584fb142bb88b9e50b2d5947dc2b80e5d5302aab0d65612eca38950b69b4b2a4dc99cc849a7d3b30db60e45bf89e35ace57e0505495a9ac4eac4719826c0455e0e4728cad8e461366ab7a66794dfa938e3884344eeeb001f83d0234f5dfd7b", 0x77}], 0x4, &(0x7f0000005480)=[@sndinfo={0x20, 0x84, 0x2, {0x6b8, 0xc, 0x8, 0x0, r5}}, @init={0x18, 0x84, 0x0, {0x101, 0x40, 0x3, 0x200}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x70, 0x4000000}, {&(0x7f0000005500)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000005b00)=[{&(0x7f0000005540)="ff931bc848d7b544f4e287549f4a616b2cfc771b0629e04d08a5f7b9a39d24816ed86b3b9d63dfd1da818d26275866092a03e6fcd0a36413533c26a872965a68fae8e4af92479b3a8bb977d8c395d8134b02576af69f484a9a925f9a0417", 0x5e}, {&(0x7f00000055c0)="d618515ecbc3d2d48a1372233e029ee770560054424da423ebd528311e5ba863afb43c6aa6a497d48f9000b12b6b67f1743b7fde9b35504fe0867ffc552c467931d03d2d86ca1e16c7601ba2dabf57239996847953c67f20ecad8675dbd7b37d9212433e08d6dfe684ca9721815152d73d2bf8572427cd8d6c5edb09690ed72a612fdbc538f2ae9e6ed87dcc4f88e58b678b397e847f74fa789884e753c3e51a856c020c016c7faa861f2f9d20132ecd83ce3f94eae808d3d7bca31b1d9c6f8d74562f7944b2d58531106f4cfe96b346b19aaab3c49fb6cc4afd82fbdafbe384c86e81312f9a4da59b1115ce01c9eb47e58dfa4f9c80b7", 0xf7}, {&(0x7f00000056c0)="170d72f68966e47d7c6de508cd7f9b1bb531158f1a2406c283c5771460b0f20f1ef9a2b93ca25f87b8fd383cbc29f117c35ee56148b781802cc61f82e4386ae7dfb2f3e7f321d77f68d9267860d0", 0x4e}, {&(0x7f0000005740)="a9a86291a8a7fb09d338ef7fd1baa3fae727753d935375f669d54b65b4ccd12b8b7a24314d417cd6b4d62e9725449211bfeb5a36b40ea7e39ebfb80677c550e61f4d57fad749e5fffe1495f0294f4444966aa49d666bd26981d7cd7a9e88a57d0a064c0f6c41846f22f8848e2bd617837de3827fba2f3aab48aa11284349bc60450319f5c71a2f6c30a1eee138cfa487fb03d4d7d0cc5fb2a981bd27ceb72a0f9af606f640567d2191057eab86d4fd11a59b5fc87e63", 0xb6}, {&(0x7f0000005800)="05e07499bfa0ed626fdd2386ddff83a54d3211727754bf525696fdf38f415fe6a449efe13e19377660abe440885c575c624c8ff8509a8959b94e5b309c301274615a0e9eaf42ab758a0732f678417608217012f330cfbacef63a5a67c0f95ad5970ac40ae52cc638eac55dade954c939b7796f508af40349e72388e1027de77c596d0326b545443d2b534baaef8e867ed30f08e7fe444d3b4b94d02ba8861285c933abb78a6ae71f55c2c736fdef4bbc4756ee674c0e1a58e1b9c9a17e85c277f9d76a12f56e3805ce365abce62892cf6f77", 0xd2}, {&(0x7f0000005900)="25c6c953db4356f6f6f4a423508d50104c71d684e95f3f5b05de3728f5b8a0663c12635ddc217bac588922fd842832a5039a31b8c92d4b4ca342bfbb0eb34b5662bb0bffdf6b98dd0d79c75723b84282e7a0bde909ddaf8d39f523855a1539dfc0141172442facaf0a8d86f7aff12a0965688a22a49641bd9780aef419915aecc6501d6b146d1773f4ae5b10eef0ad0fe601cf5d115e602943bed1eaf7bbb71903", 0xa1}, {&(0x7f00000059c0)="2668bd35a252017573a361674d53e9ab2fda0a612f4407fe3da56d0e95f737241e75222a5867acf734df3d9cb5eef69edc3c7826b25a4b754904665a84520e9492551babf4582008ad0bba387799957d13070b1e543999a691fcafa5072d245f04eb6864c9c6518876ef64e5874514214db28c3cf5f5093a137adc9555e2dc7b2150ca11c586b505a3934045e34618af6c4862ff1c7b81a78cb0ff4929807eb438845d86f8ebecd0e351fd08b7a8bf25f4a686c7493d1bb6395b88e70ae3a492c1d9a90f40e376e1ad28cd64ee5b0b1868858529d09b9305a235c5271a0a03eaeb22f9ef9369868f68b251fada29c0fb8f", 0xf1}, {&(0x7f0000005ac0)="f69afc8e22616801ce3857665b04eea2882a631bdad9", 0x16}], 0x8, &(0x7f0000005ec0)=[@sndrcv={0x30, 0x84, 0x1, {0x1f, 0x8c, 0x20a, 0x8000, 0x0, 0xbb, 0x200, 0x1000, r6}}, @init={0x18, 0x84, 0x0, {0x7f, 0xffff, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @local}}, @sndrcv={0x30, 0x84, 0x1, {0x80000000, 0x5, 0x3, 0x4, 0x4, 0xfff, 0x7f, 0x556, r7}}, @authinfo={0x18, 0x84, 0x6, {0xfffffffffffffffa}}, @sndrcv={0x30, 0x84, 0x1, {0xf770, 0x0, 0x8, 0x1ff, 0x6, 0x3, 0x20, 0xa6b, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x400, 0x8000, 0x9, 0x7b6, r9}}], 0x100}, {&(0x7f0000005fc0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000006040)=[{&(0x7f0000006000)="5e9740ce40cdfba29729616de56b9f0d6d9af107404c2589988b08caf35f0442137c8a7c17ad4357e8f4ba3bd9852d1b215b3a", 0x33}], 0x1, 0x0, 0x0, 0x4000}], 0x7, 0x1) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000006240)='/dev/dsp\x00', 0x900, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x3) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000006280)={0x8, 0x1, 0x2, 0x7ff, 0x6, 0x7fff, 0x80, 0x5, 0x7, 0x962c}) sendmsg$unix(r0, &(0x7f0000006900)={&(0x7f00000062c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006840)=[{&(0x7f0000006340)="5550c8ace7973b19989904588f646866b5d4c738b17742b200724562a245c1d30532f7857f7d0e8b93d876b9042e648e3cfa7dfbf76b956d4cc10bc1bd68409e84ca2ec902e076c5a8ee30d5568a105d74100a4cc9dd7470dcab03c781536f5fc08cdb327994e7b54af550da52257c595ab1e3dd20955ef02b", 0x79}, {&(0x7f00000063c0)="4746d45ffb0b33cf79702316027aad5d801969acc02fe40e33ecb463e4be08b62ef0f41f39027a6e437ee6cbe130407c923ef88d93c3a809d60e2f010f3fe9669c36eed3a0e12c776d7d04ae70bae028f1b079627b33f684a6e2cd8dadc46d9ba03399f40ff0befad62fe2839381d8648d4158107367e268aab0f716b8b6e7a4a5cf9ad510e3709d084a187b28aa7608f0f9cdd7b33982a55eda3053476d75ce1adc28357dec43636b049cd7f5b57bf918886d60392caa50153d702ed3f8bcc65c9051c5d2488ca493a31b539e6079c5a61f550ce107e1297016d6da04d863", 0xdf}, {&(0x7f00000064c0)="54c12bbd2e1808ec74336443731fc859c9060c2f14be4475065fc3012c46e87a0672e8b21f240f730747021dc81799d1f4379caa811591f013a653dbdf9060a686193fd1851ddd41bc8410fb8551a34f596b0d07dbaeccdbbeb40caf2be214bb9f6673fe63b57771ff37425c6573fe273fb9c7ffe56f8ae90780c61efe3710e66ab53c006012a6021cd3e36f091a3747c0ed948649f346417fb4d667df53cd71e2a25d69ee75da6fd96cfbd8d6a95bda2c23b4ccf56bd3acc8c87b023cea5880fbf2074f1cd0fe9275551b758b7a185bdd23", 0xd2}, {&(0x7f00000065c0)="aaea8928a4bd36723c558e938aa6261b6ce6c1b29ca9a345aaf9a4ae35ffc0635fb0a232783a9cd920db9799aa5da9b3c8c0ac2f6e740930f3eea1380a95f3f5df904a9e75a5a9a61565892ccf3903b4933c53019a3839bb30754d08436d66ae168fa4e153080edf867fda6f7902ca7383f607b5bc9584b0361b7003fa2a491d4ffb51b1993013c306a412af1af8e83a5542b39008a95d8a7d079115fa1756dc834ad6622b936c3cac", 0xa9}, {&(0x7f0000006680)="3ac5face5edfae0009fa737c7e517a932be5210f93ff5a650192ec25370b2b66faf00ff58d712c0d61e416e47191c6ff76650572c5830970e8ace53e72df4aaecc04e14462e8d85a39835b2b2e9ad2e37625fed3c3b3cb20221a89102cadb14fec1446ec80d9cd0cbc25969bff7dad9e06f1898fc51dded76a539147ea79947abf19705d6ca9", 0x86}, {&(0x7f0000006740)="23b1a4c919a96e4ce3e04f11a3f1ff76dbe9d74bcf16d7b6f6d95660e32c21942a21a2be9dd3ea66fce453cad1ac81d492f4ff18c1c613db8bf90b41baaaf77fb382d485a6d4e75080e3f3e49acce2ba94f80fe90970322fb758", 0x5a}, {&(0x7f00000067c0)="6f8515dda3338b5f6d19bb490da77fcb4812530ad5a372f80e04feac377aecf7511d64485b83d57dae0b22e44610604ff25454e4da04dc24d793d3", 0x3b}, {&(0x7f0000006800)="ecd5bbdf76fd183dc98764977402ccbdc16830e01a100ff9f82d312c7275c8bae9368341b24411593d991f0475ccea51cf4cef59205781933c150587207786", 0x3f}], 0x8, &(0x7f00000068c0)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x28, 0x1, 0x1, [r2, r10, r1, r10, r0]}], 0x40, 0xc000}, 0x40000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000006940)={0x3, [0x0, 0x0, 0x0]}) open$dir(&(0x7f0000006980)='./file0\x00', 0x105003, 0x3) removexattr(&(0x7f00000069c0)='./file0\x00', &(0x7f0000006a00)=@random={'user.', '/dev/dsp\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000006c80)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000006d80)=0xe8) sendmmsg(r10, &(0x7f0000007200)=[{{&(0x7f0000006a40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x2, 0x3, 0x3, {0xa, 0x4e22, 0xb71, @local, 0x3f}}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006ac0)="b999158c3d53bffea1e3d2cce24a8dc60618c0005171645b4e0a90d8a5267327e203b0ed270ded58ca066804aeead995111f4d28d2be1d1ab93a3e87550f8ac01fe2dc377f905c3c21ff75f9398a779a8d018a422b44c8524c04bf98aed51e81be12112059c9709b48307d4cf95494d4ffe5b6a8306c41861a0fd52bd131f0b75aae74", 0x83}], 0x1, &(0x7f0000006bc0)=[{0x10, 0x11f, 0x1f}, {0x88, 0x11f, 0x80, "72bc10d070c30873ab14f5888e36cf2d8bc17470c36418c53b60a4fc9310a1f6994ea695215d0ff7c8f675669cdba5ea374f1a1bdd6e1963ee9cbcbec2198d362f1583f95b0284014746e3c155bc588c8c622449454ea5904116409b11bb1463f870a1790e1c1e926e0f4d6241566dfff2393713"}], 0x98}, 0x9}, {{&(0x7f0000006dc0)=@xdp={0x2c, 0x4, r11, 0x2a}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006e40)="177f40f5aac49d32b3bd4c7f50f6f3c89d04bbec48874d43601b0d850f8e40d87b433e4356ddfdf730a2563bc11c423d0f81fb9723d2a0dd2e98b024bc4a7b2dd78073efcbb4a1ce4a2e81e2130b4e6a5bb02a53dc40eacc76f300a4ad5be24c7cbacbdc05b557240912be353af0ea3fa6619fbcb36194039588c4a33b574e024784ea8834b8c9cd83", 0x89}], 0x1, &(0x7f0000006f40)=[{0xf0, 0x102, 0xc8, "ecfb5fcf0e3cf5e6a72f18851165643631c6f76188bf4565bb235e297374159aa4a67fbe9fd1f4022962d596ea67ecaa2d7ea38bb8684fc3a11025bbf928ef713aacab5a8e87cb907e51884e55f6d97f174dde869a38dbe678ccc32b80f5d8ba75e54bf6cac856dc37dc9c95cd2f0da08309cee60a5c0a487b374f71b1cf8fef5cb56c57610b8d49b2c63ee88eb82ad2da0a6734cd8661ffa433c94dce1cfb03701e13a60729e9293096da87639cd2bc7a723fb8fe4c8f08984891bbb27620c42b8f69105d19929baba77db09f4d15cb626603f48be6d99fab9ec8"}, {0x68, 0x113, 0xab, "93ba5bdaef921c09acb628d7956e7b4b6bc48f896294bfb306e9ba85def6b9e2e7d0ce76978c28b473f7d5f472dbfe7e13aae689d59af8b6455cefb263124efc3202768b932132e620298f2d35b58ecd5cb6769926"}, {0x48, 0x117, 0x39, "3283caf0f1e5e6a049870079bf1aaa9a2ef767b8e4763cd610f714d167f1697127c6af813d1f9e363b084f5655b9008122eb3b5e7024e0"}, {0x58, 0x6, 0x2cd4, "3e9e3cbef7c3c461fdc780c68fb178e3589f1167e82f13a1623f6a14d0d203577554abb8cc9c7d9e66911a11d33e5aad5b169f62f25a487ea4191f1788866576135377"}, {0x80, 0x114, 0x101, "f8279a592b7d7488041927b11befdc0c166873aabb19fc03e5ec98d1c9dcd587b5efaa8ae4c087b92bc5c6999b10fd51607455d534e906c00ac531512b7ea0eb68699e3f6dc8f416895a616027a155b19fad0e69650171994c3fe771a9d72b50d5947a23bf18f1d8f0"}, {0x20, 0x11b, 0x9, "4a4a00163b5bcbdde0467057c3f55f66"}], 0x298}, 0x7}], 0x2, 0x20040810) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000007280)={r3, @in6={{0xa, 0x4e21, 0x8000, @rand_addr="8c10af3f947fb4784ae719854b8ff17c", 0x9}}, 0x10001, 0x100, 0x3ff}, &(0x7f0000007340)=0x98) ioctl$TIOCGSOFTCAR(r10, 0x5419, &(0x7f0000007380)) openat$dsp(0xffffffffffffff9c, &(0x7f00000073c0)='/dev/dsp\x00', 0x8000, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000007400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000007440)='TRUE', 0x4, 0x1) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0xffff, 0x100) pipe2(&(0x7f0000007480), 0x84000) [ 332.394381] binder: BINDER_SET_CONTEXT_MGR already set [ 332.399818] binder: 11829:11830 ioctl 40046207 0 returned -16 21:31:22 executing program 3: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002d00)={'vcan0\x00', 0x0}) getresuid(&(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)=0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002e00)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e22, 0x4c8d, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x7f, r1, r2}, {0x7da, 0xffffffff, 0x4, 0x5, 0x5, 0x200, 0x3}, {0x7ff800, 0x4, 0x9, 0x1}, 0x9, 0x6e6bb2, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d3, 0x33}, 0xa, @in=@broadcast, 0x3506, 0x4, 0x0, 0x0, 0x0, 0x76b}}, 0xe8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x1, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000080)={0x18, 0x1, 0x0, {0xbb}}, 0x18) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x9, 0x0, [], {0x0, @bt={0x6, 0x6, 0x1, 0x1, 0x4, 0x209, 0x80000000, 0xffffffff, 0x0, 0x40, 0x20, 0x5, 0x9, 0x400, 0x9, 0x2}}}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x80109c00) 21:31:22 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) [ 332.488714] binder: 11829:11830 unknown command 25344 [ 332.494134] binder: 11829:11830 ioctl c0306201 200001c0 returned -22 [ 332.524504] binder: 11830 RLIMIT_NICE not set 21:31:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000140)) 21:31:22 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd, "6160520ebcab615670171e305f4522b0d2cae32de2031dbe8bde243bbf3da078", 0x31363553}) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000100)) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6f1, 0x38415261, 0x3, @discrete={0x9, 0x3}}) [ 332.729570] binder: BINDER_SET_CONTEXT_MGR already set [ 332.735362] binder: 11850:11851 ioctl 40046207 0 returned -16 21:31:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 332.833532] binder: release 11842:11843 transaction 213 out, still active [ 332.840669] binder: undelivered TRANSACTION_COMPLETE [ 332.883910] binder: undelivered TRANSACTION_ERROR: 29201 [ 332.889617] binder: send failed reply for transaction 213, target dead 21:31:23 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) [ 333.049596] binder: 11861:11863 ioctl c0306201 0 returned -14 [ 333.067560] binder_transaction: 4 callbacks suppressed [ 333.067583] binder: 11861:11863 got reply transaction with no transaction stack [ 333.080647] binder_transaction: 5 callbacks suppressed [ 333.080685] binder: 11861:11863 transaction failed 29201/-71, size 16-0 line 2801 21:31:23 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000, 0x400082) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 333.102687] binder: BINDER_SET_CONTEXT_MGR already set [ 333.108138] binder: 11864:11865 ioctl 40046207 0 returned -16 21:31:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:23 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0585604, &(0x7f0000000080)) 21:31:23 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) 21:31:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 333.317463] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.344563] binder: release 11861:11863 transaction 216 out, still active [ 333.351684] binder: undelivered TRANSACTION_COMPLETE [ 333.373687] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.379323] binder: send failed reply for transaction 216, target dead [ 333.482073] binder: 11874 RLIMIT_NICE not set [ 333.523075] binder: BINDER_SET_CONTEXT_MGR already set [ 333.528540] binder: 11877:11879 ioctl 40046207 0 returned -16 [ 333.558337] binder: BINDER_SET_CONTEXT_MGR already set [ 333.563896] binder: 11880:11881 ioctl 40046207 0 returned -16 [ 333.578582] binder: 11880:11881 unknown command 4219648 [ 333.584224] binder: 11880:11881 ioctl c0306201 200001c0 returned -22 [ 333.591645] binder: 11881 RLIMIT_NICE not set [ 333.596649] binder: 11877:11879 ioctl c0306201 0 returned -14 [ 333.608079] binder: 11877:11879 got reply transaction with no transaction stack [ 333.615917] binder: 11877:11879 transaction failed 29201/-71, size 16-0 line 2801 [ 333.638133] binder: 11880:11882 got reply transaction with no transaction stack [ 333.645884] binder: 11880:11882 transaction failed 29201/-71, size 16-0 line 2801 [ 333.705647] binder: release 11877:11879 transaction 219 out, still active [ 333.712755] binder: undelivered TRANSACTION_COMPLETE [ 333.717961] binder: send failed reply for transaction 219, target dead [ 333.777308] IPVS: ftp: loaded support on port[0] = 21 [ 333.786096] binder: undelivered TRANSACTION_ERROR: 29201 [ 333.923496] chnl_net:caif_netlink_parms(): no params data found [ 333.975113] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.981601] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.989605] device bridge_slave_0 entered promiscuous mode [ 333.997733] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.004328] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.012254] device bridge_slave_1 entered promiscuous mode [ 334.039028] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 334.049572] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 334.073039] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 334.081090] team0: Port device team_slave_0 added [ 334.087390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 334.096012] team0: Port device team_slave_1 added [ 334.101940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 334.109828] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 334.176405] device hsr_slave_0 entered promiscuous mode [ 334.222640] device hsr_slave_1 entered promiscuous mode [ 334.272769] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 334.280222] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 334.304025] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.310537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.317765] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.324358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.355324] binder: undelivered TRANSACTION_ERROR: 29201 [ 334.414812] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 334.420939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.431517] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 334.443477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.451582] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.459251] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.467585] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 334.483208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 334.489299] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.505915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.514128] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.520539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.546194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.555971] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.562555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.576871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.586091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.601051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.626447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.634992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.648526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 334.655692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.678443] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 334.695212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.779761] mmap: syz-executor.5 (11891) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 21:31:24 executing program 5: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) lsetxattr(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) prlimit64(0x0, 0xb, &(0x7f00000005c0)={0x7}, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) epoll_create1(0x80003) recvmmsg(r0, 0x0, 0x0, 0x21, &(0x7f0000001a00)={0x77359400}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) setxattr$security_evm(&(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) 21:31:24 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x800, 0xfffffffffffffffd) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x109401) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000140)={@multicast1}, &(0x7f0000000180)=0xc) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x101ff, 0x0, 0x64f6c95ccb2ef104, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) recvfrom$rxrpc(r2, &(0x7f00000000c0), 0x0, 0x141, &(0x7f0000000100)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 21:31:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132461) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x24, 0x0, 0x2d8) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r0, 0x4, 0x42883) 21:31:24 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) 21:31:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 334.946996] binder: 11896:11898 unknown command 4219648 [ 334.952680] binder: 11896:11898 ioctl c0306201 200001c0 returned -22 [ 334.963725] binder: BINDER_SET_CONTEXT_MGR already set [ 334.969060] binder: 11893:11899 ioctl 40046207 0 returned -16 [ 334.979363] binder: 11898 RLIMIT_NICE not set [ 334.996678] binder: BINDER_SET_CONTEXT_MGR already set [ 335.003150] binder: 11895:11902 ioctl 40046207 0 returned -16 [ 335.026118] binder: 11896:11906 got reply transaction with no transaction stack [ 335.033824] binder: 11896:11906 transaction failed 29201/-71, size 16-0 line 2801 [ 335.048449] binder: 11893:11899 ioctl c0306201 0 returned -14 [ 335.067252] binder: 11909 RLIMIT_NICE not set [ 335.070240] binder: 11893:11899 got reply transaction with no transaction stack [ 335.079458] binder: 11893:11899 transaction failed 29201/-71, size 16-0 line 2801 [ 335.091465] binder: 11898 RLIMIT_NICE not set 21:31:25 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:25 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x300, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000900)={0x5, {{0x2, 0x4e22, @rand_addr=0x4}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078", 0xfffffffffffffffc}) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000000c0)) 21:31:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 335.203110] binder: release 11896:11898 transaction 224 in, still active [ 335.210146] binder: send failed reply for transaction 224 to 11893:11905 [ 335.217346] binder: undelivered TRANSACTION_ERROR: 29201 21:31:25 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) 21:31:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) r2 = dup(r0) write$FUSE_OPEN(r2, &(0x7f0000000140)={0x20}, 0x20) [ 335.380626] binder: 11920:11921 unknown command 4219648 [ 335.386365] binder: 11920:11921 ioctl c0306201 200001c0 returned -22 [ 335.411642] binder: undelivered TRANSACTION_COMPLETE [ 335.417135] binder: undelivered TRANSACTION_ERROR: 29189 21:31:25 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x8042) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x4, 0x3, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000140)={0x4, "db401a77b1c13daf4e8927cef2dad413ec270efefa7e89bc9b1f68c3d846dcce", 0x5, 0x20, 0x0, 0x7ff, 0x10, 0x4, 0x5, 0x200}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000080)={0xffc000000000000, "014c5a43ed7820992213be4de44ac185e5985b2f6d79d0fcb32db3852c8e95d9", 0x1, 0x1}) 21:31:25 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 335.540406] binder: BINDER_SET_CONTEXT_MGR already set [ 335.545916] binder: 11924:11926 ioctl 40046207 0 returned -16 [ 335.567735] binder: 11921 RLIMIT_NICE not set [ 335.578492] binder: BINDER_SET_CONTEXT_MGR already set [ 335.584002] binder: 11928:11931 ioctl 40046207 0 returned -16 [ 335.616074] binder: 11920:11933 got reply transaction with no transaction stack [ 335.623829] binder: 11920:11933 transaction failed 29201/-71, size 16-0 line 2801 [ 335.716002] binder: 11928:11935 got reply transaction with no transaction stack [ 335.723781] binder: 11928:11935 transaction failed 29201/-71, size 16-0 line 2801 21:31:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a840007000000ebff0fdf333f220005001a00051000000006c614208aaf8b553400da0000000000000000000000000000e0ff00000000"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x98a, 0x0) 21:31:25 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) 21:31:25 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:26 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0xcb7, 0x8, 0x2, "fd8d3c6186b572f35f2dc540d104faba33f583be6975b7a48a6ec94c79845f7f", 0x64737664}) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 335.904380] binder: release 11920:11921 transaction 228 in, still active [ 335.912036] binder: send failed reply for transaction 228 to 11928:11935 [ 336.058515] binder_set_nice: 2 callbacks suppressed [ 336.058539] binder: 11952 RLIMIT_NICE not set [ 336.129942] binder: BINDER_SET_CONTEXT_MGR already set [ 336.135496] binder: 11953:11957 ioctl 40046207 0 returned -16 21:31:26 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='fuse\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001500), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x1}}, 0x50) [ 336.174252] binder: 11953:11957 got reply transaction with no transaction stack [ 336.181911] binder: 11953:11957 transaction failed 29201/-71, size 16-0 line 2801 21:31:26 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x401, 0x5, 0x2, 0x0, 0xc0000000000000, 0x5, 0x3, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x3}}, 0x1f, 0x345c49f3, 0x8001, 0xffffffffffff26aa, 0xe28}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x2, 0x800, 0x5, 0x6, 0x2}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x5f8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1ff, 0x400, 0x3}, 0x10) 21:31:26 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 336.229061] binder: release 11953:11957 transaction 231 out, still active [ 336.236210] binder: undelivered TRANSACTION_COMPLETE [ 336.434665] binder: send failed reply for transaction 231, target dead 21:31:26 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) 21:31:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 336.518654] binder: undelivered TRANSACTION_COMPLETE 21:31:26 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000200)) 21:31:26 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2001, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x9, 0x80000001, [], &(0x7f00000000c0)={0x9b0b7f, 0xc2, [], @value=0x1}}) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2001fe) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x5, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078", 0x1000000000000}) [ 336.642423] binder: 11975 RLIMIT_NICE not set [ 336.736912] binder: BINDER_SET_CONTEXT_MGR already set [ 336.742640] binder: 11978:11982 ioctl 40046207 0 returned -16 [ 336.768913] binder: BINDER_SET_CONTEXT_MGR already set [ 336.774451] binder: 11980:11983 ioctl 40046207 0 returned -16 [ 336.806565] binder: 11978:11982 got reply transaction with no transaction stack [ 336.814278] binder: 11978:11982 transaction failed 29201/-71, size 16-0 line 2801 21:31:26 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 336.865796] binder: release 11978:11988 transaction 234 out, still active [ 336.873550] binder: undelivered TRANSACTION_COMPLETE [ 336.884986] binder: 11980:11993 got reply transaction with no transaction stack [ 336.894083] binder: 11980:11993 transaction failed 29201/-71, size 16-0 line 2801 21:31:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x401, 0x0, 0x1000, 0x8d2e, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xa18, 0x30}, &(0x7f0000000180)=0xc) sync_file_range(r0, 0xddea, 0x1, 0x4) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:27 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) 21:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 336.994140] binder_release_work: 5 callbacks suppressed [ 336.994159] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.005398] binder: send failed reply for transaction 234, target dead [ 337.012363] binder: send failed reply for transaction 235 to 11980:11983 21:31:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='bdev\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3a) ftruncate(r1, 0x0) [ 337.127511] binder: release 12000:12001 transaction 239 out, still active [ 337.135636] binder: undelivered TRANSACTION_COMPLETE 21:31:27 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 337.205667] binder: BINDER_SET_CONTEXT_MGR already set [ 337.211134] binder: 12005:12007 ioctl 40046207 0 returned -16 [ 337.269380] binder: 12008 RLIMIT_NICE not set 21:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 337.297944] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.303615] binder: send failed reply for transaction 239, target dead [ 337.400646] ptrace attach of "/root/syz-executor.5"[12012] was attempted by "/root/syz-executor.5"[12013] [ 337.459266] binder: 12018:12019 ioctl c0306201 0 returned -14 [ 337.487587] binder: release 12018:12019 transaction 242 out, still active [ 337.494754] binder: undelivered TRANSACTION_COMPLETE [ 337.576615] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.582301] binder: send failed reply for transaction 242, target dead 21:31:27 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) 21:31:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:27 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x482000, 0x0) r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x81, 0x40000) dup3(r0, r1, 0x80000) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:27 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x103, 0x100) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = memfd_create(&(0x7f0000000140)='proc}GPLeth0^wlan0#:\x00', 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400001000) tkill(r3, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) 21:31:27 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 337.644541] binder: undelivered TRANSACTION_COMPLETE [ 337.649780] binder: undelivered TRANSACTION_ERROR: 29189 [ 337.728670] binder: undelivered TRANSACTION_ERROR: 29201 [ 337.741977] ptrace attach of "/root/syz-executor.5"[12028] was attempted by "/root/syz-executor.5"[12035] [ 337.764929] binder: BINDER_SET_CONTEXT_MGR already set [ 337.770334] binder: 12033:12036 ioctl 40046207 0 returned -16 [ 337.778266] binder: 12029:12030 ioctl c0306201 0 returned -14 21:31:27 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x40000141042, 0x0) creat(0x0, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) [ 337.807358] binder: BINDER_SET_CONTEXT_MGR already set [ 337.813054] binder: 12039:12042 ioctl 40046207 0 returned -16 [ 337.864908] binder: release 12029:12030 transaction 245 out, still active [ 337.872110] binder: undelivered TRANSACTION_COMPLETE [ 337.880781] binder: 12051 RLIMIT_NICE not set 21:31:28 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x20000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:28 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) 21:31:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 338.097964] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.103691] binder: send failed reply for transaction 245, target dead [ 338.110422] binder: send failed reply for transaction 246 to 12039:12042 21:31:28 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000003f00000000f0"]) 21:31:28 executing program 3: syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000080)=0x2e2) [ 338.326291] binder: 12072 RLIMIT_NICE not set [ 338.357412] binder: BINDER_SET_CONTEXT_MGR already set [ 338.362974] binder: 12069:12073 ioctl 40046207 0 returned -16 [ 338.401379] binder: 12069:12073 ioctl c0306201 0 returned -14 [ 338.444629] binder_transaction: 4 callbacks suppressed [ 338.444651] binder: 12069:12073 got reply transaction with no transaction stack [ 338.457662] binder_transaction: 4 callbacks suppressed [ 338.457698] binder: 12069:12073 transaction failed 29201/-71, size 16-0 line 2801 [ 338.510889] binder: send failed reply for transaction 250 to 12069:12073 [ 338.535118] binder: undelivered TRANSACTION_COMPLETE [ 338.540378] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.648825] binder: undelivered TRANSACTION_ERROR: 29201 21:31:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:28 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:28 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) 21:31:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:28 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x503) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x9, 0x9, 0x2, "5dc3cef8c27b95ab2b51c285e507d150c1c137a52dcefd6a63a8c33e21350efa", 0x3031334d}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0xfff, 0xa, 0x4, 0x0, {}, {0x5, 0x3, 0x8, 0x1f, 0x5, 0x4, "1f602672"}, 0x88, 0x7, @offset=0x8, 0x4}) [ 338.705536] binder: undelivered TRANSACTION_COMPLETE [ 338.710791] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.722984] binder: undelivered TRANSACTION_ERROR: 29201 21:31:28 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 338.810380] binder: 12086 RLIMIT_NICE not set [ 338.857937] binder: BINDER_SET_CONTEXT_MGR already set [ 338.863512] binder: 12089:12095 ioctl 40046207 0 returned -16 [ 338.886038] binder: BINDER_SET_CONTEXT_MGR already set [ 338.891592] binder: 12091:12097 ioctl 40046207 0 returned -16 [ 338.910113] binder: 12089:12095 got reply transaction with no transaction stack [ 338.918264] binder: 12089:12095 transaction failed 29201/-71, size 16-0 line 2801 21:31:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 338.994364] binder: release 12089:12098 transaction 253 out, still active [ 339.001390] binder: undelivered TRANSACTION_COMPLETE [ 339.029074] binder: 12091:12101 got reply transaction with no transaction stack [ 339.036798] binder: 12091:12101 transaction failed 29201/-71, size 16-0 line 2801 21:31:29 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) 21:31:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 339.050886] binder: send failed reply for transaction 253, target dead [ 339.058021] binder: send failed reply for transaction 255 to 12091:12101 21:31:29 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x100000405, 0x200000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2000000000, 0x4, 0x2, "616052eabcab615670171e305f4522b0d2caa32de2031dbe6cde243bbf3da078", 0x7b775d5d}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0xbb, 0x200, [], &(0x7f0000000040)=0x4}) [ 339.187196] binder: 12108 RLIMIT_NICE not set [ 339.228439] binder: BINDER_SET_CONTEXT_MGR already set [ 339.234100] binder: 12109:12111 ioctl 40046207 0 returned -16 21:31:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 339.343093] binder: 12109:12113 got reply transaction with no transaction stack [ 339.350671] binder: 12109:12113 transaction failed 29201/-71, size 16-0 line 2801 [ 339.355749] binder: undelivered TRANSACTION_COMPLETE 21:31:29 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) [ 339.406968] binder: send failed reply for transaction 258 to 12109:12111 21:31:29 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 339.543328] binder: BINDER_SET_CONTEXT_MGR already set [ 339.548876] binder: 12121:12123 ioctl 40046207 0 returned -16 [ 339.555069] binder: 12125 RLIMIT_NICE not set 21:31:29 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000280)={{0x2, @name="b89f2bed03a7dc9627f4baa20f63a4fd806f6249a55d07d976b020f28f33ac00"}, 0x8, 0x3, 0x8478}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) userfaultfd(0x80800) fsync(r0) r1 = dup3(r0, r0, 0x80002) openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0xb0000) r2 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='/dev/video#\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r2, 0x3, 0xffffffffffffff5b}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d72617720686173683d736861332d3531322d67656e6572696300000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000035d1372ff1886f06ae7afd0844ebe55728f93f40fc252aaf918002eacf45fdb13591db66cab88ad2eb76d208929ac43f8b4bc3facaa70c629936d55cc58fee18c62ae7be"], &(0x7f0000000280), &(0x7f00000002c0)=""/189) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f00000000c0)) [ 339.610418] binder: 12121:12127 got reply transaction with no transaction stack [ 339.618706] binder: 12121:12127 transaction failed 29201/-71, size 16-0 line 2801 21:31:29 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:29 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) [ 339.770518] binder: send failed reply for transaction 261 to 12121:12127 21:31:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 339.828524] binder: undelivered TRANSACTION_COMPLETE 21:31:30 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:30 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) tkill(r1, 0x22) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xc, @pix_mp={0x5, 0x6, 0xb5315241, 0x2, 0x8, [{0x9, 0x4}, {0xffffffff, 0x1}, {0xe3, 0x3}, {0x1, 0x4}, {0x9, 0x81}, {0x2ae8, 0xb412}, {0xdcb, 0x100}, {0x3, 0x2}], 0x4, 0xfffffffffffff444, 0x7, 0x1}}) [ 339.966546] binder: 12140 RLIMIT_NICE not set [ 339.986582] binder: BINDER_SET_CONTEXT_MGR already set [ 339.992333] binder: 12141:12142 ioctl 40046207 0 returned -16 [ 340.108206] binder: 12141:12145 got reply transaction with no transaction stack [ 340.115910] binder: 12141:12145 transaction failed 29201/-71, size 16-0 line 2801 21:31:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:30 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:30 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) [ 340.242589] binder: send failed reply for transaction 264 to 12141:12145 21:31:30 executing program 3: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) write$vhci(r0, &(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, "3125cb6f6a6573949e41c9be59c99405aae6f0da4f11e7e28b6c545cf47ae7cd"}, 0x21) [ 340.411111] binder: BINDER_SET_CONTEXT_MGR already set [ 340.417307] binder: 12158:12162 ioctl 40046207 0 returned -16 [ 340.428331] binder: 12155:12163 got reply transaction with no transaction stack [ 340.436030] binder: 12155:12163 transaction failed 29201/-71, size 16-0 line 2801 [ 340.460133] binder: 12165 RLIMIT_NICE not set 21:31:30 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) 21:31:30 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:30 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x7c, "9788bda85ed92a18c9f547350ab8c3456e7e52d6fc51fc7d337b69073d2157650740d805d32bb18a68dd24cf848030bef03d4ae7e8e09e31298c7a25a705137b0ec87d5325ea25871e3392757b5d028bcde65a34a73f7eb2d2d26aae47c58705e2832f4d97d3832a3b6b2251b6b31c08ad6b04a282a9d8773d9479fb"}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x3ff}, &(0x7f0000000200)=0x8) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x40000000000000, 0x40000000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 340.677767] binder: BINDER_SET_CONTEXT_MGR already set [ 340.683301] binder: 12171:12172 ioctl 40046207 0 returned -16 21:31:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:31 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x5, 0x4, [0x3, 0x62, 0x8001, 0x659]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x7}, &(0x7f0000000200)=0x90) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 341.045138] binder: BINDER_SET_CONTEXT_MGR already set [ 341.050677] binder: 12184:12185 ioctl 40046207 0 returned -16 [ 341.113773] binder: 12184:12185 got reply transaction with no transaction stack [ 341.121535] binder: 12184:12185 transaction failed 29201/-71, size 16-0 line 2801 [ 341.134399] binder: release 12155:12159 transaction 267 out, still active 21:31:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:31 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000001380)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="6a1400616b1db32bd26413ad1d625fea2ca357311e3437711efc4f217190f969b617b6c8575af4496eb81404e9695babc46878a2a23289f9bf91d3265bd2eb9b665e94bcf96c7b715ce48a0683c9e152ffde8b417a5f62d8df6e1e84315250769470fc7cbb6d5f2a9da46fc0f5e2cb1c", 0x70, 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='encrypted\x00', &(0x7f0000001280)=@chain={'key_or_keyring:', r2, ':chain\x00'}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/zero\x00', 0x408000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000001300)={{0x0, 0x6281}, {0x2, 0xcf8}, 0x3, 0x4, 0x350}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001bc0)={0x9, 0x40, 0x2, 0x800, 0xffffffffffffff9c}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 341.225098] binder: send failed reply for transaction 267, target dead [ 341.232033] binder: send failed reply for transaction 269 to 12184:12190 21:31:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 341.492850] binder: 12199:12205 got reply transaction with no transaction stack [ 341.500507] binder: 12199:12205 transaction failed 29201/-71, size 16-0 line 2801 21:31:31 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x46, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d"}) 21:31:31 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 341.563553] binder: BINDER_SET_CONTEXT_MGR already set [ 341.569028] binder: 12208:12210 ioctl 40046207 0 returned -16 21:31:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x20000000022, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031d3e6cde243bbf3da078"}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4040, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0xfff, 0x5, 0x4, 0x800, {r1, r2/1000+30000}, {0x2, 0x2, 0x7b, 0x5, 0x8, 0x7fffffff, "3b73ad33"}, 0x5, 0x0, @fd=r3, 0x4}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x24000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x5c, 0x9, 0x3, 0x3, 0x576, 0x5, 0x1a, 0x4}}) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) [ 341.665038] binder: 12208:12210 got reply transaction with no transaction stack [ 341.672837] binder: 12208:12210 transaction failed 29201/-71, size 16-0 line 2801 21:31:31 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:31 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 341.851498] binder: BINDER_SET_CONTEXT_MGR already set [ 341.857223] binder: 12220:12221 ioctl 40046207 0 returned -16 [ 341.873132] binder: release 12208:12212 transaction 274 out, still active [ 341.963205] binder_set_nice: 1 callbacks suppressed [ 341.963285] binder: 12229 RLIMIT_NICE not set [ 342.033174] binder: BINDER_SET_CONTEXT_MGR already set [ 342.038607] binder: 12230:12233 ioctl 40046207 0 returned -16 [ 342.182618] binder: release 12199:12203 transaction 272 out, still active [ 342.189642] binder_release_work: 5 callbacks suppressed [ 342.189654] binder: undelivered TRANSACTION_COMPLETE [ 342.244703] binder_release_work: 13 callbacks suppressed [ 342.244721] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.255941] binder: release 12230:12235 transaction 276 out, still active [ 342.263088] binder: undelivered TRANSACTION_COMPLETE 21:31:32 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x40, 0x109000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f00000001c0)) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0xfffffffffffffffc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000340)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) quotactl(0x1020000000000000, &(0x7f0000000140)='./file0\x00', r4, &(0x7f00000002c0)="68b44e464fae51a76191457f53841b4ee84143a299b23f0a8c3e8c666fefe7eb39cd4c0dacb79ecd3a593d3aa5208d2dab8a324762c2de7378b0a529611760a18b5ef86eb25374642186a699d33b961ca337cf1ab67c53bf1b") 21:31:32 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:32 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) 21:31:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 342.306284] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.311917] binder: send failed reply for transaction 272, target dead [ 342.319193] binder: send failed reply for transaction 274, target dead [ 342.326013] binder: send failed reply for transaction 276, target dead [ 342.404513] binder: BINDER_SET_CONTEXT_MGR already set [ 342.409883] binder: 12246:12248 ioctl 40046207 0 returned -16 [ 342.437325] binder: BINDER_SET_CONTEXT_MGR already set [ 342.442833] binder: 12249:12252 ioctl 40046207 0 returned -16 21:31:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 342.462462] binder_alloc: 12242: binder_alloc_buf, no vma [ 342.486275] binder: 12254 RLIMIT_NICE not set [ 342.493372] binder: release 12242:12244 transaction 279 out, still active [ 342.500474] binder: undelivered TRANSACTION_COMPLETE 21:31:32 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 342.542481] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.548119] binder: send failed reply for transaction 279, target dead 21:31:32 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:32 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) 21:31:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 342.784245] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.789824] binder: send failed reply for transaction 284 to 12257:12258 [ 342.796974] binder: undelivered TRANSACTION_COMPLETE [ 342.802173] binder: undelivered TRANSACTION_ERROR: 29189 21:31:32 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 342.946080] binder: 12269 RLIMIT_NICE not set [ 343.009513] binder: BINDER_SET_CONTEXT_MGR already set [ 343.015187] binder: 12274:12275 ioctl 40046207 0 returned -16 [ 343.116506] binder: release 12274:12275 transaction 287 out, still active [ 343.123664] binder: undelivered TRANSACTION_COMPLETE [ 343.128868] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.134837] binder: send failed reply for transaction 287, target dead 21:31:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x40040) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x30}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7fff}, 0x8) 21:31:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:33 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:33 executing program 2: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x47, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d18"}) 21:31:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x48, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 343.194246] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.223423] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.277208] binder: 12284 RLIMIT_NICE not set [ 343.313273] binder: BINDER_SET_CONTEXT_MGR already set [ 343.318651] binder: 12281:12290 ioctl 40046207 0 returned -16 21:31:33 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = socket(0x5, 0x802, 0xffff) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000005e40)={@vsock={0x28, 0x0, 0xffffffff}, {&(0x7f0000005dc0)=""/8, 0x8}, &(0x7f0000005e00), 0x4}, 0xa0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40342, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x8, 0x3, 0x1}, 0x20) [ 343.372128] binder: BINDER_SET_CONTEXT_MGR already set [ 343.377568] binder: 12291:12292 ioctl 40046207 0 returned -16 [ 343.392341] binder: 12293 RLIMIT_NICE not set 21:31:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 343.433605] binder_alloc: 12283: binder_alloc_buf, no vma [ 343.437906] binder: release 12283:12284 transaction 290 out, still active [ 343.446379] binder: undelivered TRANSACTION_COMPLETE [ 343.493315] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.498970] binder: send failed reply for transaction 290, target dead [ 343.521101] binder_transaction: 6 callbacks suppressed [ 343.521123] binder: 12291:12294 got reply transaction with no transaction stack [ 343.534237] binder_transaction: 8 callbacks suppressed [ 343.534277] binder: 12291:12294 transaction failed 29201/-71, size 16-0 line 2801 21:31:33 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 21:31:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@nested={0xf, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x2c}}, 0x0) [ 343.609211] binder: 12300 RLIMIT_NICE not set [ 343.628951] binder: 12297:12300 got reply transaction with no transaction stack [ 343.636729] binder: 12297:12300 transaction failed 29201/-71, size 16-0 line 2801 21:31:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 343.797635] openvswitch: netlink: Message has 16 unknown bytes. 21:31:33 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x800) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:33 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, 0x0) getgid() 21:31:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 343.955246] binder: release 12297:12300 transaction 295 out, still active [ 343.962474] binder: undelivered TRANSACTION_COMPLETE 21:31:34 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 344.002014] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.007633] binder: send failed reply for transaction 295, target dead [ 344.130700] binder: 12325 RLIMIT_NICE not set 21:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000000c0)={0x1000000000000126, "8c5701001b307ab824b6bb323ae92aa32954885d201052598f12b10000004cbd", 0x6, 0x1000001000, 0x7, 0x6, 0x12, 0x4, 0x400, 0x100}) pwrite64(r0, &(0x7f0000000140)="677ae9d995fffc7b7b62272635523ff72ef1ebbdb6c83941da97877eeeb9e3c9d69f2c9026c2feca076f8f6cfe368e817498b894636c9084fd9714b8eef40aa513437e43af13b97f4079b06d4dd87e59fa", 0x51, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9c, 0x4, 0x101, 0x5, 0x2}) [ 344.189161] binder: 12323:12325 got reply transaction with no transaction stack [ 344.196826] binder: 12323:12325 transaction failed 29201/-71, size 16-0 line 2801 21:31:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = dup2(r1, r1) syz_execute_func(&(0x7f0000000000)="3666440f50f564ff09b6b6c30f0f441e04a4c4c27d794e00df94040000000066420ff7e3476a00c442019dcc67") sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r0) 21:31:34 executing program 4: mlock2(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 21:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 344.560163] binder: release 12323:12325 transaction 298 out, still active [ 344.567358] binder: undelivered TRANSACTION_COMPLETE 21:31:34 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x7001) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200800, 0x0) [ 344.602984] binder: send failed reply for transaction 298, target dead [ 344.655225] binder: 12345:12346 got reply transaction with no transaction stack [ 344.662889] binder: 12345:12346 transaction failed 29201/-71, size 16-0 line 2801 21:31:34 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r0, &(0x7f00000002c0), 0x1161) [ 344.707001] binder: release 12345:12346 transaction 301 out, still active [ 344.714194] binder: undelivered TRANSACTION_COMPLETE 21:31:34 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 344.848275] binder: BINDER_SET_CONTEXT_MGR already set [ 344.853804] binder: 12355:12359 ioctl 40046207 0 returned -16 [ 344.885888] binder: send failed reply for transaction 301, target dead 21:31:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 344.888072] binder: 12355:12359 transaction failed 29189/-22, size 0-0 line 2896 21:31:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000240)=@fragment={0x0, 0x0, 0x0, 0x9, 0x0, 0x13d9}, 0x8) r2 = getgid() keyctl$chown(0x4, 0x0, 0x0, r2) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) pipe(0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0xfffffffffffffffe) bind$packet(0xffffffffffffffff, &(0x7f000000ec40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="3b3d2dffb8a0"}, 0x14) socket$inet6(0xa, 0x1, 0x0) [ 344.957572] binder: 12359 RLIMIT_NICE not set 21:31:35 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x101, 0x400101) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0x0, 0x2, 0x10000, 0x3, 0x3, 0x1, 0x1f}) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 345.006364] binder: 12355:12368 got reply transaction with no transaction stack [ 345.014049] binder: 12355:12368 transaction failed 29201/-71, size 16-0 line 2801 21:31:35 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOCK(r0, 0x0, 0xffffffffffffff49) [ 345.077432] binder: 12367:12371 got reply transaction with no transaction stack [ 345.085227] binder: 12367:12371 transaction failed 29201/-71, size 16-0 line 2801 21:31:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 345.157504] binder: release 12367:12371 transaction 306 out, still active [ 345.164626] binder: undelivered TRANSACTION_COMPLETE 21:31:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) [ 345.314930] binder: send failed reply for transaction 306, target dead 21:31:35 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x9, 0x4, 0x0, "616052eabcab615670171e305f4522b0031dbe6cde243bbf3da0d200", 0x7f7f7f5f}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x7fff, 0x3017, 0x1}) [ 345.543781] binder: 12388:12389 got reply transaction with no transaction stack [ 345.551446] binder: 12388:12389 transaction failed 29201/-71, size 16-0 line 2801 21:31:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:35 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:35 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @loopback}, &(0x7f0000000380)=0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000004c0)=""/220, 0xdc}, {&(0x7f00000005c0)=""/135, 0x87}, {&(0x7f0000000680)=""/150, 0x96}], 0x4}, 0x40002000) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/102, 0x66}, {&(0x7f00000018c0)=""/162, 0xa2}, {&(0x7f0000001980)=""/232, 0xe8}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/136, 0x88}, {&(0x7f0000002b40)=""/61, 0x3d}, {&(0x7f0000002b80)=""/91, 0x5b}], 0x8, &(0x7f0000002c80)=""/193, 0xc1}, 0x3b}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000002dc0)={'tunl0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000002e00)={0x11, 0x0, 0x0}, &(0x7f0000002e40)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002e80)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002ec0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0xe6eb2c68b61e758b, &(0x7f0000002f80)={@remote, 0x0}, &(0x7f0000002fc0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000003000)={0x11, 0x0, 0x0}, &(0x7f0000003040)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000003080)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003140)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003280)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000032c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003300)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000003400)={@loopback, 0x0}, &(0x7f0000003440)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003480)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000034c0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000003500)={@mcast2, 0x0}, &(0x7f0000003540)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000bb40)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f000000bc40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000bc80)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f000000bd80)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f000000bdc0)={0x11, 0x0, 0x0}, &(0x7f000000be00)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000c5c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000c580)={&(0x7f000000be40)={0x718, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x198, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xe15}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xc5f2}}, {0x8, 0x6, r4}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0xb1, 0x8, 0x80000001, 0x3f}, {0x3, 0x5, 0x2, 0x1}, {0xffff, 0x2, 0x10000, 0x3}, {0x3, 0x10000, 0x3, 0x41}, {0x0, 0x0, 0x6, 0x1ff}, {0x6, 0x80, 0x5, 0x800}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x1b0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x64b9}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r12}, {0x104, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x38}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff801}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0x16c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x90, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r22}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000800) r23 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r23, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r24 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_ifreq(r24, 0x89fb, &(0x7f00000001c0)={'bcsh0\x00', @ifru_ivalue=0x8001}) r25 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt(r25, 0xffffffffffff6556, 0xf445, &(0x7f00000000c0)="ad912285b5e3ae99c9b1cce933dcfe25adb9d86a63dc1b45d133291a4cfbfae4bdc3369cf16c93ecde5b8382c454c4cbf3080226c6b3624950c8a8f7dd0f9ff07fe21abfcca37a0e4097a2cbb3b7c811dcc7138274f5849837f7f505542b61d9ae765f27045b314a2c3c3b65d33ef9af8dedc088f67ef20b9b354320fbcf48e5d1e419771c006f1849a0297538e136589308c796ba0f8c95e05059dd3cc30b93ae22b51392f2735fa822d4ecb0a1efaa4efb4033693d05f47fb1d3469695d78ba2cd88bcd4fba84ca7e6f29d7a13e722", 0xd0) [ 345.873587] binder: 12399 RLIMIT_NICE not set 21:31:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300009, 0x29, 0x0, @ipv4={[0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 345.949742] binder: BINDER_SET_CONTEXT_MGR already set [ 345.955575] binder: 12406:12409 ioctl 40046207 0 returned -16 [ 345.967997] binder: 12398:12399 got reply transaction with no transaction stack [ 345.975720] binder: 12398:12399 transaction failed 29201/-71, size 16-0 line 2801 [ 346.021764] binder_alloc: 12398: binder_alloc_buf, no vma [ 346.027643] binder: 12406:12409 transaction failed 29189/-3, size 0-0 line 3035 [ 346.112388] binder: 12406:12417 got reply transaction with no transaction stack 21:31:36 executing program 2: creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 21:31:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x36, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:36 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:36 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x127042, 0x0) fcntl$notify(r0, 0x402, 0x5) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x80, 0x3, 0x4}}, 0x14) 21:31:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)='\n', 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 346.618481] binder: 12426:12433 got reply transaction with no transaction stack [ 346.634864] binder: BINDER_SET_CONTEXT_MGR already set [ 346.640259] binder: 12424:12436 ioctl 40046207 0 returned -16 [ 346.695202] binder: 12440 RLIMIT_NICE not set 21:31:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 346.758279] binder: send failed reply for transaction 319 to 12424:12440 21:31:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0xcf3, 0x5, 0x7470, 0x100, 0x1, 0x2, 0x4}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x1c1400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @bt={0x0, 0x7, 0x4, 0x2, 0x4, 0x5, 0x8, 0x2}}) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x7fffffff) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ptrace$getsig(0x4202, r2, 0x7, &(0x7f0000000180)) [ 346.929908] binder_thread_release: 3 callbacks suppressed [ 346.929932] binder: release 12452:12453 transaction 322 out, still active 21:31:37 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x5a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 347.040614] binder: BINDER_SET_CONTEXT_MGR already set [ 347.046143] binder: 12456:12457 ioctl 40046207 0 returned -16 21:31:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x1000000000000c, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:31:37 executing program 4: faccessat(0xffffffffffffff9c, 0x0, 0x103, 0x100) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x541d) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x2018040, &(0x7f00000003c0)=ANY=[@ANYBLOB]) socket$netlink(0x10, 0x3, 0xe) wait4(0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) [ 347.193311] binder: 12471 RLIMIT_NICE not set [ 347.204322] binder: 12468 RLIMIT_NICE not set [ 347.259626] binder: release 12465:12468 transaction 326 out, still active [ 347.266950] binder_release_work: 5 callbacks suppressed [ 347.266961] binder: undelivered TRANSACTION_COMPLETE 21:31:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20100, 0x0) recvmsg(r0, &(0x7f0000002740)={&(0x7f0000000100)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/145, 0x91}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/112, 0x70}, {&(0x7f0000002400)=""/113, 0x71}, {&(0x7f0000002480)=""/155, 0x9b}, {&(0x7f0000002540)=""/246, 0xf6}], 0x9, &(0x7f0000002700)=""/35, 0x23}, 0x40010002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002780)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002880)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000028c0)={{{@in=@local, @in=@remote, 0x4e24, 0x8, 0x4e23, 0x873, 0xa, 0xa0, 0xa0, 0x3b, r2, r3}, {0x100, 0x3, 0x8000, 0x0, 0x5, 0x3, 0x5, 0x4}, {0x80000000, 0x2, 0x8, 0x5}, 0x101, 0x0, 0x3, 0x0, 0x1, 0x3}, {{@in6=@ipv4={[], [], @remote}, 0x4d3, 0x33}, 0xa, @in6=@loopback, 0x0, 0x3, 0x3, 0x17, 0x7, 0x3f, 0x8}}, 0xe8) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101100, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x100000000) 21:31:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:37 executing program 4: mknod$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="080528bd7000fddbdf25b19d86b5080005000500000004006b56226480bf11ca0000300003000c00040000000000080007004e24000014000600fe880800000000000000000000000101080001000200ffc523000008000500"], 0x1}, 0x1, 0x0, 0x0, 0x24000040}, 0x10) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) unlink(&(0x7f00000000c0)='./file0\x00') fstat(0xffffffffffffffff, 0x0) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000004c0)={0x0, @broadcast, 0x4e23, 0x0, 'lblcr\x00'}, 0x2c) r1 = inotify_init1(0x80800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r1, 0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000005c0)={0x0, 0x0, 0x3}) ptrace$setopts(0x4206, 0x0, 0xfffffffffffffffd, 0x12) ptrace(0x4207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x8001}) r2 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='selinux\x00', 0xfffffffffffffff8) keyctl$update(0x2, r2, &(0x7f0000000500)="16b9554387772bbb02f646c003f2bb59448a6363b29a941850085e6af4daac093f7d36afc997d907e12197913a79edb5fecf571b0de23b2ae4bc10699c247c0b9aa121e969c53fe6a25b782eedbd13366ce2b613a7b27028", 0x58) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x8947, &(0x7f0000000180)={'sit0\x00', @ifru_hwaddr=@local}) [ 347.409664] binder_release_work: 15 callbacks suppressed [ 347.409682] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.456846] binder: undelivered TRANSACTION_ERROR: 29201 21:31:37 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) 21:31:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:37 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/64, 0x40}], 0x1, 0x0) [ 347.570083] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.575841] binder_send_failed_reply: 4 callbacks suppressed [ 347.575857] binder: send failed reply for transaction 326, target dead [ 347.606270] binder: 12487 RLIMIT_NICE not set [ 347.662509] IPVS: ftp: loaded support on port[0] = 21 21:31:37 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000280)={0x7, "581df15e4f525e598c7f3f2f1ca859dab0092ee77e579cf3bea8a8b188ad59ee", 0x8, 0x6, 0x6, 0x2, 0x2}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r2, 0x1ff, 0x8}, 0xc) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000000c0)={{0x2, 0x3, 0x2400, 0x0, 0x4}, 0x5, 0x6bc, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0xffff, 0x9}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000380)={@empty, @multicast1, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', r5}) [ 347.795828] binder: BINDER_SET_CONTEXT_MGR already set [ 347.801258] binder: 12495:12496 ioctl 40046207 0 returned -16 [ 347.835143] binder: release 12485:12487 transaction 330 out, still active 21:31:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x3f, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b26"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 347.842239] binder: undelivered TRANSACTION_COMPLETE [ 347.848198] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.853963] binder: send failed reply for transaction 330, target dead [ 347.876235] binder: 12504 RLIMIT_NICE not set [ 347.956763] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.995294] IPVS: ftp: loaded support on port[0] = 21 [ 348.030381] binder: 12510 RLIMIT_NICE not set 21:31:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x24, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad77"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) 21:31:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000bc0), 0x3146e6ddae11d35, 0xf0) [ 348.105015] binder: undelivered TRANSACTION_ERROR: 29201 21:31:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 21:31:38 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="c10900000000000005011fe4ac141417e0", 0x11}], 0x1}, 0x0) [ 348.255545] binder: BINDER_SET_CONTEXT_MGR already set [ 348.261025] binder: 12517:12518 ioctl 40046207 0 returned -16 [ 348.279129] binder: release 12508:12510 transaction 335 out, still active [ 348.286246] binder: undelivered TRANSACTION_COMPLETE 21:31:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x44, 0x0, &(0x7f0000000100)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7"}) mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xc6, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="016340400000000000000000000000000000000000000000007447098813d68b3c0000001000000000000000000000000000000000000000000000000000000000000000f400c2e79426d1e06888c30d9fb28b11df2473d4445ecbb34faa04f439068035b0fabc637f482be148f0d137f6ac239fe2a865db24b66eb1d5558df8b051b772412835ab3841eb7f54990dd900a711f2ff68fecc74ff3e6f040ef95acf22997930b674a0ed4088a921addfe0fdc27110b5037fcc772cf1e48931cf25fd6f69a0e5a2"], 0x0, 0x0, 0x0}) [ 348.319785] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.325724] binder: send failed reply for transaction 335, target dead [ 348.372300] ================================================================== [ 348.379741] BUG: KMSAN: uninit-value in arp_mc_map+0x6a0/0x9b0 [ 348.385736] CPU: 1 PID: 12528 Comm: syz-executor.2 Not tainted 5.0.0-rc1+ #9 [ 348.392935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.402304] Call Trace: [ 348.404936] dump_stack+0x173/0x1d0 [ 348.408603] kmsan_report+0x12e/0x2a0 [ 348.412437] __msan_warning+0x82/0xf0 [ 348.416275] arp_mc_map+0x6a0/0x9b0 21:31:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, 0x0, 0x0) [ 348.419948] arp_constructor+0x422/0xa50 [ 348.424051] ? arp_key_eq+0xd0/0xd0 [ 348.425112] binder: 12532 RLIMIT_NICE not set [ 348.427717] ___neigh_create+0xe19/0x2890 [ 348.436414] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 348.441818] __neigh_create+0xbd/0xd0 [ 348.445662] ip_finish_output2+0xa0f/0x1820 [ 348.450041] ip_finish_output+0xd2b/0xfd0 [ 348.454237] ip_output+0x53f/0x610 [ 348.457824] ? ip_mc_finish_output+0x3b0/0x3b0 [ 348.462435] ? ip_finish_output+0xfd0/0xfd0 [ 348.466875] ip_local_out+0x164/0x1d0 [ 348.470725] iptunnel_xmit+0x8a7/0xde0 [ 348.474685] ip_tunnel_xmit+0x35b9/0x3980 [ 348.479419] ipgre_xmit+0x1098/0x11c0 [ 348.483281] ? ipgre_close+0x230/0x230 [ 348.487205] dev_hard_start_xmit+0x604/0xc40 [ 348.491673] __dev_queue_xmit+0x2e48/0x3b80 [ 348.496071] dev_queue_xmit+0x4b/0x60 [ 348.499892] ? __netdev_pick_tx+0x1260/0x1260 [ 348.504416] packet_sendmsg+0x79bb/0x9760 [ 348.508614] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 348.514092] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 348.519308] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 348.524769] ___sys_sendmsg+0xdb9/0x11b0 [ 348.524967] binder: 12534 RLIMIT_NICE not set [ 348.528867] ? compat_packet_setsockopt+0x360/0x360 [ 348.528907] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 348.528937] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 348.528959] ? __fget_light+0x6e1/0x750 [ 348.529009] __se_sys_sendmsg+0x305/0x460 [ 348.557179] __x64_sys_sendmsg+0x4a/0x70 [ 348.561271] do_syscall_64+0xbc/0xf0 [ 348.565040] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 348.570246] RIP: 0033:0x457e29 [ 348.573461] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.583885] binder: release 12517:12518 transaction 340 out, still active [ 348.592370] RSP: 002b:00007f2606f25c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.592391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 348.592403] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 21:31:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0xffffffffffffffff, "616052eaffffffff70171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 348.592415] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.592436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2606f266d4 [ 348.592450] R13: 00000000004c5461 R14: 00000000004d9308 R15: 00000000ffffffff [ 348.592480] [ 348.592487] Uninit was created at: [ 348.592492] No stack [ 348.592516] ================================================================== [ 348.599456] binder: undelivered TRANSACTION_COMPLETE [ 348.607146] Disabling lock debugging due to kernel taint [ 348.607158] Kernel panic - not syncing: panic_on_warn set ... [ 348.607180] CPU: 1 PID: 12528 Comm: syz-executor.2 Tainted: G B 5.0.0-rc1+ #9 [ 348.607190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 348.607198] Call Trace: [ 348.607228] dump_stack+0x173/0x1d0 [ 348.607260] panic+0x3d1/0xb01 [ 348.607333] kmsan_report+0x293/0x2a0 [ 348.645527] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 348.648812] __msan_warning+0x82/0xf0 [ 348.648845] arp_mc_map+0x6a0/0x9b0 [ 348.648886] arp_constructor+0x422/0xa50 [ 348.648925] ? arp_key_eq+0xd0/0xd0 [ 348.648955] ___neigh_create+0xe19/0x2890 [ 348.689806] binder_transaction: 8 callbacks suppressed [ 348.689836] binder: 12533:12534 got reply transaction with no transaction stack [ 348.693010] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 348.693050] __neigh_create+0xbd/0xd0 [ 348.693086] ip_finish_output2+0xa0f/0x1820 [ 348.693150] ip_finish_output+0xd2b/0xfd0 [ 348.695737] binder_transaction: 12 callbacks suppressed [ 348.695773] binder: 12533:12534 transaction failed 29201/-71, size 16-0 line 2801 [ 348.699381] ip_output+0x53f/0x610 [ 348.743610] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.748255] ? ip_mc_finish_output+0x3b0/0x3b0 [ 348.748279] ? ip_finish_output+0xfd0/0xfd0 [ 348.748303] ip_local_out+0x164/0x1d0 [ 348.748349] iptunnel_xmit+0x8a7/0xde0 [ 348.748419] ip_tunnel_xmit+0x35b9/0x3980 [ 348.808692] ipgre_xmit+0x1098/0x11c0 [ 348.812539] ? ipgre_close+0x230/0x230 [ 348.816465] dev_hard_start_xmit+0x604/0xc40 [ 348.820927] __dev_queue_xmit+0x2e48/0x3b80 [ 348.825342] dev_queue_xmit+0x4b/0x60 [ 348.829163] ? __netdev_pick_tx+0x1260/0x1260 [ 348.833684] packet_sendmsg+0x79bb/0x9760 [ 348.837874] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 348.843367] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 348.848592] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 348.854041] ___sys_sendmsg+0xdb9/0x11b0 [ 348.858141] ? compat_packet_setsockopt+0x360/0x360 [ 348.863193] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 348.868410] ? __msan_metadata_ptr_for_load_1+0x10/0x20 21:31:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8, 0x1, 0x1, "62cb6e7806dfdf9b335c95fc3d54f66b179a2aa1c60e96eba5f0a8b065c8c614", 0x30314142}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x0, 0x4, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) [ 348.873956] ? __fget_light+0x6e1/0x750 [ 348.877984] __se_sys_sendmsg+0x305/0x460 [ 348.882187] __x64_sys_sendmsg+0x4a/0x70 [ 348.886273] do_syscall_64+0xbc/0xf0 [ 348.890015] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 348.895216] RIP: 0033:0x457e29 [ 348.898423] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 348.917353] RSP: 002b:00007f2606f25c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.925077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 348.932359] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 348.939643] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 348.946925] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2606f266d4 [ 348.954208] R13: 00000000004c5461 R14: 00000000004d9308 R15: 00000000ffffffff [ 348.962455] Kernel Offset: disabled [ 348.966087] Rebooting in 86400 seconds..