ogram 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:06 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:06 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1083.982843] binder: 3147:3153 BC_FREE_BUFFER u0000000020003000 no match ** 10 printk messages dropped ** [ 1084.076185] binder: 3161:3169 transaction failed 29189/-3, size 72-24 line 3137 20:30:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1084.131000] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1084.147874] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.187974] binder_alloc: 3179: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 1084.194990] binder: 3181:3184 transaction failed 29189/-3, size 72-24 line 3137 [ 1084.195089] binder: 3181:3184 BC_FREE_BUFFER u0000000000000000 no match 20:30:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:06 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:06 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1084.195210] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.197797] binder_alloc: 3182: binder_alloc_buf, no vma [ 1084.197837] binder: 3182:3188 transaction failed 29189/-3, size 72-24 line 3137 [ 1084.199520] binder: 3182:3188 BC_FREE_BUFFER u0000000020003000 no match [ 1084.242870] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.259021] binder_alloc: 3193: binder_alloc_buf, no vma 20:30:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:06 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1084.259061] binder: 3193:3198 transaction failed 29189/-3, size 72-24 line 3137 [ 1084.259198] binder: undelivered TRANSACTION_ERROR: 29189 20:30:06 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1084.284655] binder: 3192:3203 transaction failed 29189/-3, size 72-24 line 3137 ** 10 printk messages dropped ** [ 1084.408200] binder: 3217:3221 transaction failed 29189/-3, size 72-24 line 3137 ** 2 printk messages dropped ** [ 1084.409339] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1084.410905] binder_alloc: 3216: binder_alloc_buf, no vma [ 1084.410943] binder: 3216:3219 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1084.419152] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1084.498566] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1084.512945] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1084.548273] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1084.578949] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1084.603193] binder_alloc: 3244: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1084.603843] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.616242] binder_alloc: 3249: binder_alloc_buf, no vma 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1084.628235] binder: undelivered TRANSACTION_ERROR: 29189 ** 9 printk messages dropped ** [ 1084.687809] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1084.696412] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.722834] binder_alloc: 3266: binder_alloc_buf, no vma ** 8 printk messages dropped ** [ 1084.812787] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.841100] binder_alloc: 3283: binder_alloc_buf, no vma 20:30:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1084.842657] binder_alloc: 3281: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1084.843214] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.843994] binder: 3283:3285 BC_FREE_BUFFER u0000000020003000 no match [ 1084.847655] binder_alloc: 3280: binder_alloc_buf, no vma [ 1084.847691] binder: 3280:3284 transaction failed 29189/-3, size 72-24 line 3137 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1084.847782] binder: 3280:3284 BC_FREE_BUFFER u0000000000000000 no match ** 8 printk messages dropped ** [ 1084.924969] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1084.980617] binder: 3302:3304 BC_FREE_BUFFER u0000000000000000 no match ** 1 printk messages dropped ** [ 1085.043258] binder_alloc: 3309: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1085.069816] binder: 3315:3317 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.070337] binder: 3315:3317 BC_FREE_BUFFER u0000000000000000 no match 20:30:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1085.070567] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.113723] binder_alloc: 3316: binder_alloc_buf, no vma [ 1085.113761] binder: 3316:3318 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.114595] binder: 3316:3318 BC_FREE_BUFFER u0000000020003000 no match [ 1085.135268] binder: undelivered TRANSACTION_ERROR: 29189 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1085.196751] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.202913] binder_alloc: 3331: binder_alloc_buf, no vma [ 1085.202954] binder: 3331:3335 transaction failed 29189/-3, size 72-24 line 3137 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1085.203061] binder: 3331:3335 BC_FREE_BUFFER u0000000000000000 no match [ 1085.203191] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1085.293695] binder: 3344:3351 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.293838] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.300363] binder_alloc: 3348: binder_alloc_buf, no vma [ 1085.300428] binder: 3348:3354 transaction failed 29189/-3, size 72-24 line 3137 20:30:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:07 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:07 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1085.301042] binder: 3348:3354 BC_FREE_BUFFER u0000000000000000 no match ** 2 printk messages dropped ** [ 1085.336774] binder_alloc: 3356: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1085.337437] binder: 3356:3361 BC_FREE_BUFFER u0000000000000000 no match 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 1085.408683] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.414512] binder_alloc: 3373: binder_alloc_buf, no vma ** 12 printk messages dropped ** [ 1085.539445] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1085.548391] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.553227] binder_alloc: 3394: binder_alloc_buf, no vma 20:30:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1085.553270] binder: 3394:3398 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.568141] binder: 3394:3398 BC_FREE_BUFFER u0000000020003000 no match [ 1085.589483] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.599934] binder_alloc: 3405: binder_alloc_buf, no vma [ 1085.599975] binder: 3405:3412 transaction failed 29189/-3, size 72-24 line 3137 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1085.600085] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.616097] binder_alloc: 3404: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1085.616514] binder: undelivered TRANSACTION_ERROR: 29189 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1085.662453] binder: 3416:3419 BC_FREE_BUFFER u0000000020003000 no match 20:30:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 6 printk messages dropped ** [ 1085.695088] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.743207] binder_alloc: 3428: binder_alloc_buf, no vma [ 1085.743245] binder: 3428:3433 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1085.743772] binder_alloc: 3429: binder_alloc_buf, no vma [ 1085.743812] binder: 3429:3434 transaction failed 29189/-3, size 72-24 line 3137 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1085.745259] binder: 3429:3434 BC_FREE_BUFFER u0000000020003000 no match ** 4 printk messages dropped ** [ 1085.776761] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.824682] binder_alloc: 3438: binder_alloc_buf, no vma 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1085.824724] binder: 3438:3446 transaction failed 29189/-3, size 72-24 line 3137 ** 5 printk messages dropped ** [ 1085.841616] binder: 3445:3449 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1085.931893] binder_alloc: 3457: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1085.934215] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.953552] binder_alloc: 3459: binder_alloc_buf, no vma 20:30:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1085.953595] binder: 3459:3464 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.953731] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.955747] binder_alloc: 3462: binder_alloc_buf, no vma [ 1085.955785] binder: 3462:3465 transaction failed 29189/-3, size 72-24 line 3137 [ 1085.955875] binder: 3462:3465 BC_FREE_BUFFER u0000000000000000 no match 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1085.964364] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.964480] binder_alloc: 3463: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1085.986584] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.022307] binder_alloc: 3471: binder_alloc_buf, no vma 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1086.022347] binder: 3471:3476 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.022440] binder: 3471:3476 BC_FREE_BUFFER u0000000000000000 no match [ 1086.025256] binder_alloc: 3470: binder_alloc_buf, no vma 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1086.025293] binder: 3470:3477 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1086.085888] binder_alloc: 3484: binder_alloc_buf, no vma [ 1086.085928] binder: 3484:3485 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.086022] binder: 3484:3485 BC_FREE_BUFFER u0000000000000000 no match [ 1086.086149] binder: undelivered TRANSACTION_ERROR: 29189 20:30:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1086.150749] binder: 3489:3490 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1086.155881] binder: undelivered TRANSACTION_ERROR: 29189 ** 1 printk messages dropped ** [ 1086.173010] binder: 3492:3494 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.173148] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.188489] binder_alloc: 3496: binder_alloc_buf, no vma [ 1086.189266] binder: 3496:3500 transaction failed 29189/-3, size 72-24 line 3137 20:30:08 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1086.189622] binder: 3496:3500 BC_FREE_BUFFER u0000000000000000 no match [ 1086.189919] binder: undelivered TRANSACTION_ERROR: 29189 20:30:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:08 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:08 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1086.265763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.266226] binder_alloc: 3507: binder_alloc_buf, no vma [ 1086.266266] binder: 3507:3509 transaction failed 29189/-3, size 72-24 line 3137 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 1 printk messages dropped ** [ 1086.266994] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1086.285083] binder: 3515:3517 BC_FREE_BUFFER u0000000020003000 no match ** 3 printk messages dropped ** [ 1086.353924] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.377402] binder_alloc: 3528: binder_alloc_buf, no vma [ 1086.377442] binder: 3528:3531 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.377537] binder: 3528:3531 BC_FREE_BUFFER u0000000000000000 no match [ 1086.377677] binder: undelivered TRANSACTION_ERROR: 29189 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1086.387156] binder_alloc: 3530: binder_alloc_buf, no vma [ 1086.387195] binder: 3530:3535 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.388802] binder: 3530:3535 BC_FREE_BUFFER u0000000020003000 no match 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1086.389738] binder_alloc: 3527: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1086.458558] binder: 3542:3544 BC_FREE_BUFFER u0000000000000000 no match 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1086.577856] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.606840] binder_alloc: 3561: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1086.611046] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.611473] binder_alloc: 3563: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1086.611636] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.615901] binder: undelivered TRANSACTION_ERROR: 29189 20:30:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1086.656628] binder_alloc: 3571: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1086.656909] binder: 3570:3573 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1086.696660] binder: undelivered TRANSACTION_ERROR: 29189 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1086.703050] binder: undelivered TRANSACTION_ERROR: 29189 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1086.796287] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1086.815305] binder: undelivered TRANSACTION_ERROR: 29189 [ 1086.817056] binder_alloc: 3591: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1086.817526] binder: 3591:3599 BC_FREE_BUFFER u0000000020003000 no match 20:30:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1086.865569] binder_alloc: 3603: binder_alloc_buf, no vma [ 1086.865612] binder: 3603:3606 transaction failed 29189/-3, size 72-24 line 3137 [ 1086.865771] binder: undelivered TRANSACTION_ERROR: 29189 ** 1 printk messages dropped ** [ 1086.887639] binder: 3607:3608 transaction failed 29189/-3, size 72-24 line 3137 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 1 printk messages dropped ** [ 1086.887866] binder: 3607:3608 BC_FREE_BUFFER u0000000000000000 no match ** 8 printk messages dropped ** [ 1087.007261] binder_alloc: 3625: binder_alloc_buf, no vma 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1087.007301] binder: 3625:3626 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1087.007435] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.035943] binder_alloc: 3629: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 1087.041581] binder: 3628:3635 BC_FREE_BUFFER u0000000000000000 no match 20:30:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1087.068994] binder: 3637:3641 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.069125] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.113637] binder_alloc: 3644: binder_alloc_buf, no vma [ 1087.113677] binder: 3644:3647 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.114143] binder: 3644:3647 BC_FREE_BUFFER u0000000020003000 no match 20:30:09 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1087.117763] binder: undelivered TRANSACTION_ERROR: 29189 ** 7 printk messages dropped ** [ 1087.245362] binder_alloc: 3658: binder_alloc_buf, no vma 20:30:09 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:09 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1087.245401] binder: 3658:3659 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 ** 10 printk messages dropped ** [ 1087.280530] binder: undelivered TRANSACTION_ERROR: 29189 20:30:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1087.351805] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1087.381317] binder: 3680:3683 BC_FREE_BUFFER u0000000000000000 no match 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1087.427159] binder: undelivered TRANSACTION_ERROR: 29189 ** 9 printk messages dropped ** [ 1087.491055] binder: undelivered TRANSACTION_ERROR: 29189 20:30:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1087.496469] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.568364] binder_alloc: 3708: binder_alloc_buf, no vma [ 1087.568406] binder: 3708:3713 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.568562] binder: undelivered TRANSACTION_ERROR: 29189 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1087.611625] binder_alloc: 3711: binder_alloc_buf, no vma 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 10 printk messages dropped ** [ 1087.716602] binder_alloc: 3728: binder_alloc_buf, no vma ** 10 printk messages dropped ** [ 1087.777451] binder_alloc: 3740: binder_alloc_buf, no vma [ 1087.777492] binder: 3740:3742 transaction failed 29189/-3, size 72-24 line 3137 20:30:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1087.777958] binder: 3740:3742 BC_FREE_BUFFER u0000000020003000 no match 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1087.795487] binder_alloc: 3745: binder_alloc_buf, no vma ** 11 printk messages dropped ** [ 1087.911214] binder: 3760:3762 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1087.976504] binder_alloc: 3771: binder_alloc_buf, no vma [ 1087.976543] binder: 3771:3775 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.978702] binder_alloc: 3774: binder_alloc_buf, no vma [ 1087.978740] binder: 3774:3776 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.978829] binder: 3774:3776 BC_FREE_BUFFER u0000000000000000 no match [ 1087.980563] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.980641] binder: undelivered TRANSACTION_ERROR: 29189 20:30:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1087.995321] binder_alloc: 3778: binder_alloc_buf, no vma [ 1087.995353] binder: 3778:3785 transaction failed 29189/-3, size 72-24 line 3137 [ 1087.995765] binder: 3778:3785 BC_FREE_BUFFER u0000000020003000 no match [ 1088.015833] binder: undelivered TRANSACTION_ERROR: 29189 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1088.016882] binder_alloc: 3786: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1088.017153] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.043895] binder_alloc: 3788: binder_alloc_buf, no vma [ 1088.043934] binder: 3788:3789 transaction failed 29189/-3, size 72-24 line 3137 20:30:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1088.044216] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.084764] binder_alloc: 3794: binder_alloc_buf, no vma [ 1088.084806] binder: 3794:3795 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1088.085090] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.115654] binder_alloc: 3797: binder_alloc_buf, no vma 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1088.115768] binder: 3797:3803 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.117215] binder: 3797:3803 BC_FREE_BUFFER u0000000020003000 no match 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1088.120372] binder_alloc: 3798: binder_alloc_buf, no vma [ 1088.120419] binder: 3798:3799 transaction failed 29189/-3, size 72-24 line 3137 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1088.120514] binder: 3798:3799 BC_FREE_BUFFER u0000000000000000 no match ** 1 printk messages dropped ** [ 1088.145258] binder_alloc: 3801: binder_alloc_buf, no vma 20:30:10 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:10 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 10 printk messages dropped ** [ 1088.206508] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1088.211765] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1088.246538] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.294165] binder_alloc: 3826: binder_alloc_buf, no vma 20:30:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1088.294204] binder: 3826:3827 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1088.299354] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.318733] binder_alloc: 3829: binder_alloc_buf, no vma [ 1088.318775] binder: 3829:3830 transaction failed 29189/-3, size 72-24 line 3137 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 13 printk messages dropped ** [ 1088.406507] binder_alloc: 3846: binder_alloc_buf, no vma 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1088.447157] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.469347] binder_alloc: 3856: binder_alloc_buf, no vma [ 1088.469394] binder: 3856:3857 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.472907] binder: 3856:3857 BC_FREE_BUFFER u0000000020003000 no match [ 1088.477115] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.526861] binder_alloc: 3862: binder_alloc_buf, no vma [ 1088.526906] binder: 3862:3863 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1088.530519] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.557809] binder_alloc: 3865: binder_alloc_buf, no vma [ 1088.557849] binder: 3865:3866 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.558090] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.562199] binder_alloc: 3868: binder_alloc_buf, no vma [ 1088.562240] binder: 3868:3873 transaction failed 29189/-3, size 72-24 line 3137 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1088.562710] binder: 3868:3873 BC_FREE_BUFFER u0000000020003000 no match [ 1088.580033] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.605907] binder_alloc: 3867: binder_alloc_buf, no vma [ 1088.605947] binder: 3867:3872 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.606074] binder: 3867:3872 BC_FREE_BUFFER u0000000000000000 no match 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1088.606208] binder: undelivered TRANSACTION_ERROR: 29189 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1088.610483] binder_alloc: 3877: binder_alloc_buf, no vma [ 1088.610520] binder: 3877:3882 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1088.637197] binder: 3879:3886 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.637422] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1088.658529] binder: 3885:3887 BC_FREE_BUFFER u0000000000000000 no match 20:30:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1088.658716] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.722045] binder_alloc: 3893: binder_alloc_buf, no vma [ 1088.722085] binder: 3893:3894 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1088.724381] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1088.746032] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1088.760485] binder: 3896:3903 BC_FREE_BUFFER u0000000000000000 no match 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1088.762428] binder_alloc: 3900: binder_alloc_buf, no vma [ 1088.762468] binder: 3900:3904 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.763555] binder: 3900:3904 BC_FREE_BUFFER u0000000020003000 no match [ 1088.764170] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.790912] binder: undelivered TRANSACTION_ERROR: 29189 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1088.824036] binder_alloc: 3913: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1088.828999] binder_alloc: 3917: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1088.829250] binder: undelivered TRANSACTION_ERROR: 29189 [ 1088.833284] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1088.916489] binder: undelivered TRANSACTION_ERROR: 29189 20:30:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:11 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:11 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1088.938711] binder_alloc: 3930: binder_alloc_buf, no vma [ 1088.938752] binder: 3930:3935 transaction failed 29189/-3, size 72-24 line 3137 [ 1088.939212] binder: 3930:3935 BC_FREE_BUFFER u0000000020003000 no match 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1088.943833] binder: 3929:3938 BC_FREE_BUFFER u0000000000000000 no match ** 4 printk messages dropped ** [ 1088.984644] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.020474] binder_alloc: 3942: binder_alloc_buf, no vma 20:30:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1089.020516] binder: 3942:3947 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.020955] binder: 3942:3947 BC_FREE_BUFFER u0000000020003000 no match 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 10 printk messages dropped ** [ 1089.191979] binder: undelivered TRANSACTION_ERROR: 29189 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 9 printk messages dropped ** [ 1089.221796] binder: 3964:3967 BC_FREE_BUFFER u0000000000000000 no match [ 1089.226955] binder: undelivered TRANSACTION_ERROR: 29189 ** 5 printk messages dropped ** [ 1089.287426] binder: 3976:3982 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1089.317225] binder: undelivered TRANSACTION_ERROR: 29189 20:30:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1089.357374] binder_alloc: 3988: binder_alloc_buf, no vma [ 1089.357415] binder: 3988:3990 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.357511] binder: 3988:3990 BC_FREE_BUFFER u0000000000000000 no match [ 1089.357714] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.362304] binder_alloc: 3989: binder_alloc_buf, no vma 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1089.362352] binder: 3989:3991 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1089.430294] binder: 4000:4002 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.430404] binder: 4000:4002 BC_FREE_BUFFER u0000000000000000 no match 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1089.431139] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.434931] binder_alloc: 4001: binder_alloc_buf, no vma [ 1089.434970] binder: 4001:4005 transaction failed 29189/-3, size 72-24 line 3137 20:30:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1089.493502] binder: 4011:4017 BC_FREE_BUFFER u0000000000000000 no match [ 1089.497187] binder: undelivered TRANSACTION_ERROR: 29189 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 1089.636098] binder_alloc: 4031: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1089.677352] binder_alloc: 4036: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 1089.725394] binder_alloc: 4046: binder_alloc_buf, no vma 20:30:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1089.741003] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.775191] binder_alloc: 4056: binder_alloc_buf, no vma [ 1089.775231] binder: 4056:4060 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.775417] binder: 4056:4060 BC_FREE_BUFFER u0000000000000000 no match [ 1089.775552] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.784032] binder_alloc: 4054: binder_alloc_buf, no vma 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1089.784073] binder: 4054:4058 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.784223] binder: undelivered TRANSACTION_ERROR: 29189 ** 5 printk messages dropped ** [ 1089.864244] binder: 4067:4071 BC_FREE_BUFFER u0000000000000000 no match 20:30:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:12 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1089.864379] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.864774] binder_alloc: 4070: binder_alloc_buf, no vma 20:30:12 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1089.864813] binder: 4070:4075 transaction failed 29189/-3, size 72-24 line 3137 ** 7 printk messages dropped ** [ 1089.946951] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.950763] binder_alloc: 4081: binder_alloc_buf, no vma [ 1089.950809] binder: 4081:4088 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.951259] binder: 4081:4088 BC_FREE_BUFFER u0000000020003000 no match [ 1089.963809] binder: undelivered TRANSACTION_ERROR: 29189 [ 1089.976590] binder_alloc: 4085: binder_alloc_buf, no vma 20:30:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1089.976631] binder: 4085:4092 transaction failed 29189/-3, size 72-24 line 3137 [ 1089.976748] binder: 4085:4092 BC_FREE_BUFFER u0000000000000000 no match [ 1089.980658] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.053862] binder_alloc: 4099: binder_alloc_buf, no vma [ 1090.053902] binder: 4099:4100 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1090.082611] binder: 4103:4108 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.082617] binder: 4101:4106 transaction failed 29189/-3, size 72-24 line 3137 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1090.104064] binder_alloc: 4102: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1090.149139] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.176556] binder_alloc: 4120: binder_alloc_buf, no vma 20:30:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1090.176598] binder: 4120:4124 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1090.176934] binder: 4119:4125 transaction failed 29189/-3, size 72-24 line 3137 ** 2 printk messages dropped ** [ 1090.209224] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.213867] binder_alloc: 4127: binder_alloc_buf, no vma 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1090.265240] binder_alloc: 4131: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1090.293063] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1090.313751] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1090.334576] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.380100] binder_alloc: 4154: binder_alloc_buf, no vma [ 1090.380142] binder: 4154:4158 transaction failed 29189/-3, size 72-24 line 3137 20:30:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1090.380253] binder: 4154:4158 BC_FREE_BUFFER u0000000000000000 no match [ 1090.380407] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.386074] binder_alloc: 4152: binder_alloc_buf, no vma [ 1090.386114] binder: 4152:4159 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.387455] binder: 4152:4159 BC_FREE_BUFFER u0000000020003000 no match [ 1090.398067] binder_alloc: 4157: binder_alloc_buf, no vma 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1090.398109] binder: 4157:4160 transaction failed 29189/-3, size 72-24 line 3137 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 5 printk messages dropped ** [ 1090.476804] binder_alloc: 4167: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1090.489131] binder_alloc: 4170: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1090.504208] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1090.557028] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.572396] binder_alloc: 4178: binder_alloc_buf, no vma [ 1090.572436] binder: 4178:4189 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.572702] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.572937] binder_alloc: 4183: binder_alloc_buf, no vma [ 1090.572977] binder: 4183:4188 transaction failed 29189/-3, size 72-24 line 3137 20:30:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1090.574209] binder: 4183:4188 BC_FREE_BUFFER u0000000020003000 no match [ 1090.588648] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1090.616505] binder: undelivered TRANSACTION_ERROR: 29189 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1090.661363] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.679515] binder_alloc: 4200: binder_alloc_buf, no vma [ 1090.679555] binder: 4200:4202 transaction failed 29189/-3, size 72-24 line 3137 ** 7 printk messages dropped ** [ 1090.718547] binder: 4199:4204 BC_FREE_BUFFER u0000000020003000 no match [ 1090.722258] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.743971] binder_alloc: 4209: binder_alloc_buf, no vma [ 1090.744012] binder: 4209:4216 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.744157] binder: undelivered TRANSACTION_ERROR: 29189 20:30:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1090.752885] binder_alloc: 4212: binder_alloc_buf, no vma [ 1090.752927] binder: 4212:4217 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.753398] binder: 4212:4217 BC_FREE_BUFFER u0000000020003000 no match [ 1090.781543] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.791933] binder_alloc: 4218: binder_alloc_buf, no vma 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:13 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1090.835381] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.839575] binder_alloc: 4224: binder_alloc_buf, no vma [ 1090.839614] binder: 4224:4225 transaction failed 29189/-3, size 72-24 line 3137 20:30:13 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1090.849375] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1090.874399] binder: undelivered TRANSACTION_ERROR: 29189 20:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1090.915764] binder_alloc: 4241: binder_alloc_buf, no vma [ 1090.915802] binder: 4241:4242 transaction failed 29189/-3, size 72-24 line 3137 [ 1090.915897] binder: 4241:4242 BC_FREE_BUFFER u0000000000000000 no match 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1090.951535] binder_alloc: 4243: binder_alloc_buf, no vma [ 1090.951574] binder: 4243:4246 transaction failed 29189/-3, size 72-24 line 3137 ** 8 printk messages dropped ** [ 1091.016902] binder: undelivered TRANSACTION_ERROR: 29189 [ 1091.056127] binder_alloc: 4259: binder_alloc_buf, no vma 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1091.056168] binder: 4259:4262 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 ** 8 printk messages dropped ** [ 1091.095952] binder: 4267:4269 transaction failed 29189/-3, size 72-24 line 3137 [ 1091.096042] binder: 4267:4269 BC_FREE_BUFFER u0000000000000000 no match 20:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 1 printk messages dropped ** [ 1091.318385] binder: undelivered TRANSACTION_ERROR: 29189 ** 8 printk messages dropped ** [ 1091.535288] binder: 4291:4293 transaction failed 29189/-3, size 72-24 line 3137 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1091.574949] binder: undelivered TRANSACTION_ERROR: 29189 ** 8 printk messages dropped ** [ 1091.630159] binder: 4302:4306 transaction failed 29189/-3, size 72-24 line 3137 20:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 1091.651699] binder: 4313:4316 BC_FREE_BUFFER u0000000000000000 no match [ 1091.656180] binder: undelivered TRANSACTION_ERROR: 29189 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1091.708685] binder: 4319:4322 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1091.795703] binder_alloc: 4329: binder_alloc_buf, no vma 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1091.795888] binder: undelivered TRANSACTION_ERROR: 29189 [ 1091.819954] binder_alloc: 4335: binder_alloc_buf, no vma 20:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1091.849590] binder_alloc: 4331: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 1091.866172] binder_alloc: 4343: binder_alloc_buf, no vma 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 12 printk messages dropped ** [ 1091.954483] binder: undelivered TRANSACTION_ERROR: 29189 ** 4 printk messages dropped ** [ 1092.039843] binder: 4364:4366 transaction failed 29189/-3, size 72-24 line 3137 ** 7 printk messages dropped ** [ 1092.053651] binder: 4365:4373 BC_FREE_BUFFER u0000000020003000 no match 20:30:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:14 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1092.085941] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.122201] binder_alloc: 4380: binder_alloc_buf, no vma [ 1092.122243] binder: 4380:4387 transaction failed 29189/-3, size 72-24 line 3137 [ 1092.122393] binder_alloc: 4376: binder_alloc_buf, no vma [ 1092.122430] binder: 4376:4384 transaction failed 29189/-3, size 72-24 line 3137 20:30:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:14 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1092.122568] binder: 4376:4384 BC_FREE_BUFFER u0000000000000000 no match [ 1092.123137] binder: 4380:4387 BC_FREE_BUFFER u0000000020003000 no match [ 1092.125062] binder_alloc: 4383: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1092.131844] binder: undelivered TRANSACTION_ERROR: 29189 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 4 printk messages dropped ** [ 1092.179672] binder: 4389:4391 BC_FREE_BUFFER u0000000000000000 no match ** 8 printk messages dropped ** [ 1092.234658] binder_alloc: 4396: binder_alloc_buf, no vma [ 1092.234704] binder: 4396:4404 transaction failed 29189/-3, size 72-24 line 3137 [ 1092.234811] binder: undelivered TRANSACTION_ERROR: 29189 20:30:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1092.235167] binder_alloc: 4397: binder_alloc_buf, no vma [ 1092.235204] binder: 4397:4401 transaction failed 29189/-3, size 72-24 line 3137 [ 1092.236614] binder: 4397:4401 BC_FREE_BUFFER u0000000020003000 no match [ 1092.260881] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.312699] binder_alloc: 4411: binder_alloc_buf, no vma 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1092.312738] binder: 4411:4418 transaction failed 29189/-3, size 72-24 line 3137 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1092.314529] binder: undelivered TRANSACTION_ERROR: 29189 ** 8 printk messages dropped ** [ 1092.440004] binder_alloc: 4428: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1092.465846] binder: undelivered TRANSACTION_ERROR: 29189 20:30:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1092.470052] binder_alloc: 4434: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1092.470187] binder: 4434:4437 BC_FREE_BUFFER u0000000000000000 no match [ 1092.475906] binder: undelivered TRANSACTION_ERROR: 29189 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1092.514647] binder: 4435:4438 transaction failed 29189/-3, size 72-24 line 3137 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 10 printk messages dropped ** [ 1092.621527] binder: 4453:4457 BC_FREE_BUFFER u0000000000000000 no match ** 6 printk messages dropped ** [ 1092.717245] binder: 4470:4471 BC_FREE_BUFFER u0000000000000000 no match 20:30:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1092.717416] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.722397] binder_alloc: 4466: binder_alloc_buf, no vma [ 1092.722439] binder: 4466:4468 transaction failed 29189/-3, size 72-24 line 3137 [ 1092.722898] binder: 4466:4468 BC_FREE_BUFFER u0000000020003000 no match [ 1092.727988] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.780804] binder: 4469:4473 transaction failed 29189/-22, size 72-24 line 3014 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1092.780946] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.799076] binder_alloc: 4478: binder_alloc_buf, no vma [ 1092.799117] binder: 4478:4485 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1092.805972] binder: 4476:4484 BC_FREE_BUFFER u0000000020003000 no match [ 1092.828082] binder: undelivered TRANSACTION_ERROR: 29189 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1092.852621] binder_alloc: 4488: binder_alloc_buf, no vma [ 1092.852661] binder: 4488:4489 transaction failed 29189/-3, size 72-24 line 3137 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1092.852825] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1092.951973] binder: 4501:4505 transaction failed 29189/-3, size 72-24 line 3137 20:30:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1092.952070] binder: 4502:4506 BC_FREE_BUFFER u0000000020003000 no match ** 1 printk messages dropped ** [ 1092.953618] binder: undelivered TRANSACTION_ERROR: 29189 [ 1092.955701] binder_alloc: 4504: binder_alloc_buf, no vma 20:30:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:15 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:15 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 8 printk messages dropped ** [ 1093.040166] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.040668] binder_alloc: 4513: binder_alloc_buf, no vma [ 1093.040706] binder: 4513:4522 transaction failed 29189/-3, size 72-24 line 3137 [ 1093.041239] binder: 4513:4522 BC_FREE_BUFFER u0000000000000000 no match 20:30:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:15 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1093.041356] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.044643] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.117506] binder_alloc: 4528: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1093.120055] binder_alloc: 4527: binder_alloc_buf, no vma [ 1093.120096] binder: 4527:4532 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1093.130897] binder: 4531:4533 transaction failed 29189/-3, size 72-24 line 3137 [ 1093.130989] binder: 4531:4533 BC_FREE_BUFFER u0000000000000000 no match ** 1 printk messages dropped ** [ 1093.134237] binder: undelivered TRANSACTION_ERROR: 29189 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1093.214470] binder_alloc: 4543: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1093.214663] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1093.241695] binder: 4548:4553 BC_FREE_BUFFER u0000000000000000 no match ** 2 printk messages dropped ** [ 1093.242016] binder: 4546:4549 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1093.242208] binder: undelivered TRANSACTION_ERROR: 29189 ** 7 printk messages dropped ** [ 1093.313852] binder_alloc: 4564: binder_alloc_buf, no vma [ 1093.313893] binder: 4564:4565 transaction failed 29189/-3, size 72-24 line 3137 ** 5 printk messages dropped ** [ 1093.359836] binder: undelivered TRANSACTION_ERROR: 29189 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1093.362936] binder_alloc: 4570: binder_alloc_buf, no vma [ 1093.362973] binder: 4570:4571 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1093.419088] binder_alloc: 4575: binder_alloc_buf, no vma 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 5 printk messages dropped ** [ 1093.450796] binder_alloc: 4578: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1093.452823] binder: 4580:4585 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 6 printk messages dropped ** [ 1093.552333] binder: 4593:4601 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1093.553440] binder: 4590:4600 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1093.676284] binder: 4608:4609 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1093.709530] binder: 4613:4620 transaction failed 29189/-3, size 72-24 line 3137 [ 1093.709651] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.710659] binder_alloc: 4616: binder_alloc_buf, no vma [ 1093.710698] binder: 4616:4618 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1093.780458] binder_alloc: 4624: binder_alloc_buf, no vma [ 1093.780505] binder: 4624:4627 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1093.801806] binder: 4625:4630 transaction failed 29189/-3, size 72-24 line 3137 ** 10 printk messages dropped ** [ 1093.877963] binder: 4641:4642 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1093.878134] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.957515] binder_alloc: 4646: binder_alloc_buf, no vma 20:30:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1093.957655] binder: 4646:4654 transaction failed 29189/-3, size 72-24 line 3137 [ 1093.958580] binder: 4646:4654 BC_FREE_BUFFER u0000000000000000 no match [ 1093.958840] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.965489] binder_alloc: 4650: binder_alloc_buf, no vma [ 1093.965528] binder: 4650:4652 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 6 printk messages dropped ** [ 1094.032884] binder: 4661:4663 transaction failed 29189/-3, size 72-24 line 3137 ** 10 printk messages dropped ** [ 1094.135500] binder: 4677:4678 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1094.135645] binder: undelivered TRANSACTION_ERROR: 29189 20:30:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:16 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 1 printk messages dropped ** [ 1094.163634] binder: 4683:4685 transaction failed 29189/-3, size 72-24 line 3137 20:30:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:16 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1094.233918] binder: 4692:4695 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.236459] binder: 4692:4695 BC_FREE_BUFFER u0000000000000000 no match [ 1094.237146] binder: undelivered TRANSACTION_ERROR: 29189 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1094.249285] binder_alloc: 4700: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1094.292832] binder: 4703:4704 transaction failed 29189/-3, size 72-24 line 3137 ** 5 printk messages dropped ** [ 1094.361543] binder: 4712:4717 transaction failed 29189/-3, size 72-24 line 3137 20:30:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1094.361641] binder: 4712:4717 BC_FREE_BUFFER u0000000000000000 no match [ 1094.363864] binder: undelivered TRANSACTION_ERROR: 29189 ** 1 printk messages dropped ** [ 1094.388094] binder: 4715:4721 transaction failed 29189/-3, size 72-24 line 3137 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1094.391790] binder: 4720:4726 transaction failed 29189/-3, size 72-24 line 3137 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1094.479065] binder_alloc: 4732: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1094.542256] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1094.571528] binder: 4745:4752 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.571674] binder: undelivered TRANSACTION_ERROR: 29189 20:30:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1094.586256] binder: 4749:4750 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.586346] binder: 4749:4750 BC_FREE_BUFFER u0000000000000000 no match ** 4 printk messages dropped ** [ 1094.659995] binder: 4764:4766 BC_FREE_BUFFER u0000000020003000 no match 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1094.673756] binder_alloc: 4767: binder_alloc_buf, no vma ** 9 printk messages dropped ** [ 1094.752722] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.753837] binder_alloc: 4779: binder_alloc_buf, no vma [ 1094.753949] binder: 4779:4782 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.754823] binder: 4779:4782 BC_FREE_BUFFER u0000000020003000 no match [ 1094.759329] binder_alloc: 4776: binder_alloc_buf, no vma [ 1094.759369] binder: 4776:4783 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.759620] binder: 4776:4783 BC_FREE_BUFFER u0000000000000000 no match [ 1094.759746] binder: undelivered TRANSACTION_ERROR: 29189 20:30:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1094.766655] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.812763] binder_alloc: 4787: binder_alloc_buf, no vma [ 1094.812799] binder: 4787:4789 transaction failed 29189/-3, size 72-24 line 3137 [ 1094.813744] binder: 4787:4789 BC_FREE_BUFFER u0000000000000000 no match 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 4 printk messages dropped ** [ 1094.851424] binder_alloc: 4795: binder_alloc_buf, no vma [ 1094.851468] binder: 4795:4798 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1094.865056] binder: undelivered TRANSACTION_ERROR: 29189 20:30:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1094.941578] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.964763] binder_alloc: 4813: binder_alloc_buf, no vma [ 1094.964803] binder: 4813:4816 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1094.966685] binder_alloc: 4811: binder_alloc_buf, no vma 20:30:17 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1094.966723] binder: 4811:4814 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1094.967102] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.980163] binder: undelivered TRANSACTION_ERROR: 29189 20:30:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:17 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1095.001267] binder: undelivered TRANSACTION_ERROR: 29189 ** 10 printk messages dropped ** [ 1095.086700] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.128604] binder_alloc: 4839: binder_alloc_buf, no vma 20:30:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1095.128643] binder: 4839:4840 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1095.128785] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1095.197880] binder_alloc: 4846: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1095.238421] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1095.279495] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1095.350832] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.389689] binder_alloc: 4879: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1095.391624] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1095.402561] binder_alloc: 4877: binder_alloc_buf, no vma [ 1095.402602] binder: 4877:4883 transaction failed 29189/-3, size 72-24 line 3137 ** 2 printk messages dropped ** [ 1095.403383] binder: 4876:4884 BC_FREE_BUFFER u0000000000000000 no match 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1095.464917] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.479517] binder_alloc: 4889: binder_alloc_buf, no vma 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1095.527408] binder: 4904:4905 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 ** 4 printk messages dropped ** [ 1095.550580] binder_alloc: 4908: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 1095.566712] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.615032] binder_alloc: 4912: binder_alloc_buf, no vma 20:30:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1095.634113] binder_alloc: 4920: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1095.639562] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.647190] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1095.698013] binder_alloc: 4927: binder_alloc_buf, no vma 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1095.715510] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 9 printk messages dropped ** [ 1095.791998] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.796756] binder_alloc: 4943: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1095.804573] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 1095.879288] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.897751] binder_alloc: 4958: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1095.976709] binder_alloc: 4972: binder_alloc_buf, no vma [ 1095.976751] binder: 4972:4973 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 1096.051847] binder: 4974:4983 transaction failed 29189/-22, size 72-24 line 3014 [ 1096.052022] binder: undelivered TRANSACTION_ERROR: 29189 [ 1096.070350] binder_alloc: 4987: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1096.070542] binder: undelivered TRANSACTION_ERROR: 29189 20:30:18 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:18 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1096.118061] binder_alloc: 4996: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1096.119151] binder: 4996:5004 BC_FREE_BUFFER u0000000000000000 no match 20:30:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 6 printk messages dropped ** [ 1096.205868] binder: 5008:5009 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 ** 8 printk messages dropped ** [ 1096.269634] binder_alloc: 5017: binder_alloc_buf, no vma 20:30:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1096.269675] binder: 5017:5020 transaction failed 29189/-3, size 72-24 line 3137 [ 1096.271122] binder: 5017:5020 BC_FREE_BUFFER u0000000000000000 no match ** 2 printk messages dropped ** [ 1096.288789] binder: 5024:5026 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1096.345052] binder_alloc: 5033: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1096.371812] binder_alloc: 5031: binder_alloc_buf, no vma [ 1096.371912] binder: 5031:5038 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1096.421143] binder: undelivered TRANSACTION_ERROR: 29189 ** 4 printk messages dropped ** [ 1096.443355] binder_alloc: 5046: binder_alloc_buf, no vma [ 1096.443395] binder: 5046:5048 transaction failed 29189/-3, size 72-24 line 3137 [ 1096.443877] binder: 5046:5048 BC_FREE_BUFFER u0000000020003000 no match ** 1 printk messages dropped ** [ 1096.462372] binder_alloc: 5045: binder_alloc_buf, no vma 20:30:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1096.462415] binder: 5045:5050 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1096.511326] binder: 5056:5059 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 10 printk messages dropped ** [ 1096.598694] binder: 5068:5071 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 9 printk messages dropped ** [ 1096.674804] binder: 5078:5080 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 10 printk messages dropped ** [ 1096.738180] binder: 5091:5094 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1096.769763] binder: 5096:5102 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1096.770256] binder: 5096:5102 BC_FREE_BUFFER u0000000020003000 no match ** 8 printk messages dropped ** [ 1096.882154] binder: 5111:5117 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1096.889494] binder: 5112:5113 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1096.916658] binder: 5114:5118 BC_FREE_BUFFER u0000000020003000 no match [ 1096.927180] binder: undelivered TRANSACTION_ERROR: 29189 [ 1096.942766] binder_alloc: 5126: binder_alloc_buf, no vma [ 1096.942811] binder: 5126:5129 transaction failed 29189/-3, size 72-24 line 3137 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1096.948617] binder: 5124:5131 BC_FREE_BUFFER u0000000000000000 no match [ 1096.948786] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1096.990619] binder: 5127:5132 BC_FREE_BUFFER u0000000020003000 no match ** 3 printk messages dropped ** [ 1097.010399] binder: undelivered TRANSACTION_ERROR: 29189 ** 5 printk messages dropped ** [ 1097.113502] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.115912] binder_alloc: 5146: binder_alloc_buf, no vma 20:30:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1097.115952] binder: 5146:5153 transaction failed 29189/-3, size 72-24 line 3137 [ 1097.117034] binder: 5146:5153 BC_FREE_BUFFER u0000000000000000 no match [ 1097.117192] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.122930] binder_alloc: 5148: binder_alloc_buf, no vma 20:30:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:19 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1097.122977] binder: 5148:5154 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1097.180558] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.216199] binder_alloc: 5156: binder_alloc_buf, no vma 20:30:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:19 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 1 printk messages dropped ** [ 1097.216337] binder: 5156:5165 BC_FREE_BUFFER u0000000000000000 no match 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1097.276313] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1097.304803] binder: 5178:5182 BC_FREE_BUFFER u0000000020003000 no match [ 1097.307619] binder_alloc: 5177: binder_alloc_buf, no vma 20:30:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1097.308121] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.308611] binder_alloc: 5176: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1097.308863] binder: undelivered TRANSACTION_ERROR: 29189 ** 7 printk messages dropped ** [ 1097.403874] binder_alloc: 5190: binder_alloc_buf, no vma 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1097.403914] binder: 5190:5195 transaction failed 29189/-3, size 72-24 line 3137 [ 1097.404009] binder: 5190:5195 BC_FREE_BUFFER u0000000000000000 no match [ 1097.406277] binder: undelivered TRANSACTION_ERROR: 29189 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1097.447973] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1097.494388] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1097.546770] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.552390] binder_alloc: 5216: binder_alloc_buf, no vma 20:30:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1097.580159] binder_alloc: 5214: binder_alloc_buf, no vma [ 1097.580203] binder: 5214:5223 transaction failed 29189/-3, size 72-24 line 3137 [ 1097.580301] binder: 5214:5223 BC_FREE_BUFFER u0000000000000000 no match [ 1097.591446] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.599175] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.647946] binder_alloc: 5225: binder_alloc_buf, no vma 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1097.647986] binder: 5225:5228 transaction failed 29189/-3, size 72-24 line 3137 ** 7 printk messages dropped ** [ 1097.685650] binder: 5234:5239 BC_FREE_BUFFER u0000000020003000 no match [ 1097.701188] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.735378] binder_alloc: 5242: binder_alloc_buf, no vma [ 1097.735417] binder: 5242:5245 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1097.735557] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1097.764470] binder: undelivered TRANSACTION_ERROR: 29189 20:30:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1097.811725] binder: 5250:5255 BC_FREE_BUFFER u0000000020003000 no match [ 1097.817163] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1097.834909] binder: undelivered TRANSACTION_ERROR: 29189 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1097.850913] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1097.918329] binder: undelivered TRANSACTION_ERROR: 29189 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1097.954589] binder_alloc: 5275: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1097.980712] binder: 5282:5285 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1097.983648] binder: undelivered TRANSACTION_ERROR: 29189 [ 1097.998824] binder_alloc: 5279: binder_alloc_buf, no vma [ 1097.998868] binder: 5279:5288 transaction failed 29189/-3, size 72-24 line 3137 20:30:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1098.000248] binder: 5279:5288 BC_FREE_BUFFER u0000000020003000 no match [ 1098.017005] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1098.065653] binder: 5293:5299 BC_FREE_BUFFER u0000000020003000 no match 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1098.066841] binder_alloc: 5297: binder_alloc_buf, no vma [ 1098.066881] binder: 5297:5301 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.067021] binder: undelivered TRANSACTION_ERROR: 29189 ** 7 printk messages dropped ** [ 1098.144162] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1098.165675] binder: 5315:5318 BC_FREE_BUFFER u0000000000000000 no match [ 1098.165801] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.168048] binder_alloc: 5311: binder_alloc_buf, no vma [ 1098.168087] binder: 5311:5317 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.169261] binder: 5311:5317 BC_FREE_BUFFER u0000000020003000 no match [ 1098.187989] binder_alloc: 5310: binder_alloc_buf, no vma [ 1098.188031] binder: 5310:5320 transaction failed 29189/-3, size 72-24 line 3137 20:30:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:20 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:20 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:20 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1098.188272] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.199150] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.203658] binder_alloc: 5322: binder_alloc_buf, no vma 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1098.244656] binder_alloc: 5324: binder_alloc_buf, no vma ** 7 printk messages dropped ** [ 1098.282414] binder: 5330:5337 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1098.357278] binder_alloc: 5345: binder_alloc_buf, no vma [ 1098.357317] binder: 5345:5348 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.357413] binder: 5345:5348 BC_FREE_BUFFER u0000000000000000 no match [ 1098.357543] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.361120] binder_alloc: 5346: binder_alloc_buf, no vma 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1098.361165] binder: 5346:5350 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 9 printk messages dropped ** [ 1098.460496] binder: 5356:5363 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 9 printk messages dropped ** [ 1098.587040] binder_alloc: 5378: binder_alloc_buf, no vma [ 1098.587082] binder: 5378:5380 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.587242] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.617986] binder_alloc: 5388: binder_alloc_buf, no vma [ 1098.618025] binder: 5388:5389 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.618170] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.625428] binder_alloc: 5377: binder_alloc_buf, no vma [ 1098.625467] binder: 5377:5385 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1098.650919] binder_alloc: 5383: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1098.651608] binder: 5383:5387 BC_FREE_BUFFER u0000000020003000 no match [ 1098.679458] binder: undelivered TRANSACTION_ERROR: 29189 [ 1098.690693] binder_alloc: 5397: binder_alloc_buf, no vma [ 1098.690734] binder: 5397:5399 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.690829] binder: 5397:5399 BC_FREE_BUFFER u0000000000000000 no match [ 1098.695987] binder: undelivered TRANSACTION_ERROR: 29189 20:30:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1098.720145] binder_alloc: 5400: binder_alloc_buf, no vma [ 1098.720190] binder: 5400:5403 transaction failed 29189/-3, size 72-24 line 3137 ** 5 printk messages dropped ** [ 1098.782558] binder: 5409:5413 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 11 printk messages dropped ** [ 1098.838288] binder: 5419:5426 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1098.896472] binder: 5421:5429 BC_FREE_BUFFER u0000000020003000 no match [ 1098.904954] binder: undelivered TRANSACTION_ERROR: 29189 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1098.913466] binder_alloc: 5433: binder_alloc_buf, no vma [ 1098.913506] binder: 5433:5434 transaction failed 29189/-3, size 72-24 line 3137 [ 1098.914980] binder_alloc: 5432: binder_alloc_buf, no vma [ 1098.915020] binder: 5432:5435 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 7 printk messages dropped ** [ 1098.992859] binder: 5442:5448 transaction failed 29189/-3, size 72-24 line 3137 20:30:21 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:21 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1099.004459] binder: 5444:5447 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1099.058512] binder: 5454:5458 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1099.075112] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.094705] binder_alloc: 5460: binder_alloc_buf, no vma [ 1099.094748] binder: 5460:5464 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.102827] binder: 5460:5464 BC_FREE_BUFFER u0000000020003000 no match [ 1099.114052] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.145745] binder_alloc: 5467: binder_alloc_buf, no vma [ 1099.145787] binder: 5467:5469 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.145890] binder: 5467:5469 BC_FREE_BUFFER u0000000000000000 no match [ 1099.146209] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.208256] binder_alloc: 5474: binder_alloc_buf, no vma [ 1099.208296] binder: 5474:5475 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1099.208443] binder: undelivered TRANSACTION_ERROR: 29189 20:30:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1099.229704] binder_alloc: 5477: binder_alloc_buf, no vma [ 1099.229746] binder: 5477:5481 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.230538] binder: 5477:5481 BC_FREE_BUFFER u0000000020003000 no match [ 1099.233785] binder_alloc: 5476: binder_alloc_buf, no vma [ 1099.233826] binder: 5476:5483 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.233971] binder: undelivered TRANSACTION_ERROR: 29189 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1099.237679] binder_alloc: 5480: binder_alloc_buf, no vma [ 1099.237716] binder: 5480:5485 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.237805] binder: 5480:5485 BC_FREE_BUFFER u0000000000000000 no match [ 1099.238092] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.243926] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.303910] binder_alloc: 5487: binder_alloc_buf, no vma 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1099.303950] binder: 5487:5497 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1099.307255] binder: 5491:5496 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.309063] binder: 5491:5496 BC_FREE_BUFFER u0000000020003000 no match [ 1099.309366] binder_alloc: 5493: binder_alloc_buf, no vma [ 1099.309405] binder: 5493:5499 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 6 printk messages dropped ** [ 1099.387702] binder_alloc: 5503: binder_alloc_buf, no vma 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1099.424328] binder: 5508:5512 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 9 printk messages dropped ** [ 1099.459624] binder_alloc: 5519: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1099.465175] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.485718] binder_alloc: 5523: binder_alloc_buf, no vma [ 1099.485759] binder: 5523:5525 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1099.505065] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1099.571273] binder: undelivered TRANSACTION_ERROR: 29189 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1099.604568] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1099.633184] binder: 5541:5547 BC_FREE_BUFFER u0000000020003000 no match ** 10 printk messages dropped ** [ 1099.714590] binder: 5557:5561 BC_FREE_BUFFER u0000000000000000 no match [ 1099.714719] binder: undelivered TRANSACTION_ERROR: 29189 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 1099.727746] binder_alloc: 5555: binder_alloc_buf, no vma [ 1099.727787] binder: 5555:5559 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.728088] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.735217] binder_alloc: 5556: binder_alloc_buf, no vma [ 1099.735258] binder: 5556:5565 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 1099.820780] binder: 5572:5573 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1099.820921] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.853721] binder_alloc: 5576: binder_alloc_buf, no vma [ 1099.853928] binder: 5576:5582 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.854081] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.855363] binder_alloc: 5577: binder_alloc_buf, no vma [ 1099.855402] binder: 5577:5580 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.855718] binder: 5577:5580 BC_FREE_BUFFER u0000000000000000 no match [ 1099.855836] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.859376] binder_alloc: 5578: binder_alloc_buf, no vma [ 1099.859415] binder: 5578:5581 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:22 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:22 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1099.860142] binder: 5578:5581 BC_FREE_BUFFER u0000000020003000 no match [ 1099.876547] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.906205] binder_alloc: 5588: binder_alloc_buf, no vma [ 1099.906245] binder: 5588:5591 transaction failed 29189/-3, size 72-24 line 3137 20:30:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1099.906350] binder: 5588:5591 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1099.928263] binder: 5584:5590 BC_FREE_BUFFER u0000000020003000 no match [ 1099.948396] binder: undelivered TRANSACTION_ERROR: 29189 20:30:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1099.971936] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.974296] binder_alloc: 5599: binder_alloc_buf, no vma [ 1099.974335] binder: 5599:5600 transaction failed 29189/-3, size 72-24 line 3137 [ 1099.974430] binder: 5599:5600 BC_FREE_BUFFER u0000000000000000 no match 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1100.035303] binder_alloc: 5604: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1100.061924] binder: undelivered TRANSACTION_ERROR: 29189 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1100.066791] binder: 5609:5616 BC_FREE_BUFFER u0000000020003000 no match ** 6 printk messages dropped ** [ 1100.179508] binder: 5628:5631 BC_FREE_BUFFER u0000000020003000 no match [ 1100.181060] binder_alloc: 5627: binder_alloc_buf, no vma 20:30:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1100.181472] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.218010] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.231447] binder_alloc: 5635: binder_alloc_buf, no vma [ 1100.231487] binder: 5635:5636 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.239170] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.267778] binder_alloc: 5622: binder_alloc_buf, no vma 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1100.267817] binder: 5622:5624 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1100.269375] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.289766] binder_alloc: 5643: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 1100.300167] binder: 5643:5644 BC_FREE_BUFFER u0000000000000000 no match [ 1100.300341] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.309780] binder_alloc: 5647: binder_alloc_buf, no vma 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1100.310121] binder: 5647:5651 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.311644] binder: 5647:5651 BC_FREE_BUFFER u0000000020003000 no match [ 1100.318397] binder_alloc: 5648: binder_alloc_buf, no vma [ 1100.318436] binder: 5648:5652 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.318587] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.327832] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.373515] binder_alloc: 5658: binder_alloc_buf, no vma [ 1100.373557] binder: 5658:5663 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.373792] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.377558] binder_alloc: 5659: binder_alloc_buf, no vma [ 1100.377598] binder: 5659:5662 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.377714] binder: 5659:5662 BC_FREE_BUFFER u0000000000000000 no match [ 1100.377848] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.379369] binder_alloc: 5660: binder_alloc_buf, no vma [ 1100.379409] binder: 5660:5664 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.381599] binder: 5660:5664 BC_FREE_BUFFER u0000000020003000 no match [ 1100.404049] binder_alloc: 5666: binder_alloc_buf, no vma [ 1100.404092] binder: 5666:5667 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1100.404402] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.404430] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.423763] binder_alloc: 5669: binder_alloc_buf, no vma [ 1100.423804] binder: 5669:5670 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.424124] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.518911] binder_alloc: 5677: binder_alloc_buf, no vma [ 1100.518950] binder: 5677:5683 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.523435] binder: 5677:5683 BC_FREE_BUFFER u0000000020003000 no match [ 1100.525252] binder_alloc: 5678: binder_alloc_buf, no vma [ 1100.525293] binder: 5678:5685 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.526306] binder: 5678:5685 BC_FREE_BUFFER u0000000000000000 no match [ 1100.526605] binder: undelivered TRANSACTION_ERROR: 29189 20:30:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1100.540227] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.553306] binder_alloc: 5679: binder_alloc_buf, no vma [ 1100.553347] binder: 5679:5687 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.553789] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.596535] binder_alloc: 5689: binder_alloc_buf, no vma [ 1100.596575] binder: 5689:5698 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.597036] binder: 5689:5698 BC_FREE_BUFFER u0000000020003000 no match 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1100.605227] binder_alloc: 5691: binder_alloc_buf, no vma [ 1100.605265] binder: 5691:5701 transaction failed 29189/-3, size 72-24 line 3137 [ 1100.605794] binder: 5691:5701 BC_FREE_BUFFER u0000000000000000 no match [ 1100.612229] binder: undelivered TRANSACTION_ERROR: 29189 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1100.614394] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.632094] binder_alloc: 5694: binder_alloc_buf, no vma [ 1100.632127] binder: 5694:5702 transaction failed 29189/-3, size 72-24 line 3137 20:30:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:23 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:23 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1100.632436] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.676576] binder_alloc: 5706: binder_alloc_buf, no vma [ 1100.676615] binder: 5706:5707 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1100.679313] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.715963] binder_alloc: 5709: binder_alloc_buf, no vma 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1100.716611] binder: 5709:5715 BC_FREE_BUFFER u0000000000000000 no match [ 1100.717353] binder: undelivered TRANSACTION_ERROR: 29189 ** 9 printk messages dropped ** [ 1100.773799] binder: 5723:5725 BC_FREE_BUFFER u0000000000000000 no match 20:30:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1100.798713] binder: 5726:5729 BC_FREE_BUFFER u0000000020003000 no match [ 1100.817040] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.841030] binder_alloc: 5732: binder_alloc_buf, no vma [ 1100.841072] binder: 5732:5733 transaction failed 29189/-3, size 72-24 line 3137 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1100.841233] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.907122] binder_alloc: 5739: binder_alloc_buf, no vma ** 4 printk messages dropped ** [ 1100.934841] binder: 5743:5745 BC_FREE_BUFFER u0000000020003000 no match 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1100.939994] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.996833] binder: 5742:5748 transaction failed 29189/-22, size 72-24 line 3014 ** 6 printk messages dropped ** [ 1101.035088] binder: 5757:5762 BC_FREE_BUFFER u0000000020003000 no match ** 2 printk messages dropped ** [ 1101.035826] binder: 5763:5765 BC_FREE_BUFFER u0000000000000000 no match [ 1101.036125] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.069323] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.105525] binder_alloc: 5770: binder_alloc_buf, no vma [ 1101.105564] binder: 5770:5772 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.105654] binder: 5770:5772 BC_FREE_BUFFER u0000000000000000 no match 20:30:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1101.108012] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.139097] binder_alloc: 5774: binder_alloc_buf, no vma [ 1101.139136] binder: 5774:5775 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 12 printk messages dropped ** [ 1101.276635] binder_alloc: 5794: binder_alloc_buf, no vma [ 1101.276674] binder: 5794:5796 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.277115] binder: 5794:5796 BC_FREE_BUFFER u0000000020003000 no match 20:30:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1101.290775] binder: 5798:5800 transaction failed 29189/-3, size 72-24 line 3137 ** 2 printk messages dropped ** [ 1101.297486] binder: 5799:5801 transaction failed 29189/-3, size 72-24 line 3137 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 1101.434129] binder: 5814:5817 BC_FREE_BUFFER u0000000000000000 no match ** 4 printk messages dropped ** [ 1101.445809] binder_alloc: 5815: binder_alloc_buf, no vma [ 1101.445852] binder: 5815:5820 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.448967] binder: 5815:5820 BC_FREE_BUFFER u0000000020003000 no match 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1101.477750] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1101.499113] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1101.557940] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.578410] binder_alloc: 5836: binder_alloc_buf, no vma 20:30:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1101.578450] binder: 5836:5843 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.578609] binder: 5836:5843 BC_FREE_BUFFER u0000000000000000 no match [ 1101.578768] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.578920] binder_alloc: 5838: binder_alloc_buf, no vma [ 1101.579050] binder: 5838:5844 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.579202] binder: undelivered TRANSACTION_ERROR: 29189 20:30:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:24 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:24 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1101.615250] binder_alloc: 5842: binder_alloc_buf, no vma ** 5 printk messages dropped ** [ 1101.675350] binder: undelivered TRANSACTION_ERROR: 29189 20:30:24 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1101.699216] binder_alloc: 5855: binder_alloc_buf, no vma [ 1101.699256] binder: 5855:5858 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.699350] binder: 5855:5858 BC_FREE_BUFFER u0000000000000000 no match 20:30:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1101.723608] binder: undelivered TRANSACTION_ERROR: 29189 [ 1101.761860] binder_alloc: 5868: binder_alloc_buf, no vma [ 1101.761902] binder: 5868:5871 transaction failed 29189/-3, size 72-24 line 3137 [ 1101.762480] binder: 5868:5871 BC_FREE_BUFFER u0000000000000000 no match [ 1101.762683] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1101.787264] binder_alloc: 5870: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1101.802420] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1101.850635] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1101.863870] binder: undelivered TRANSACTION_ERROR: 29189 ** 5 printk messages dropped ** [ 1101.936796] binder: 5891:5893 BC_FREE_BUFFER u0000000020003000 no match 20:30:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1101.947124] binder: 5894:5897 BC_FREE_BUFFER u0000000000000000 no match [ 1101.952158] binder_alloc: 5895: binder_alloc_buf, no vma [ 1101.952198] binder: 5895:5898 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1101.955794] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1102.016383] binder: 5904:5908 BC_FREE_BUFFER u0000000020003000 no match 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 7 printk messages dropped ** [ 1102.040481] binder: undelivered TRANSACTION_ERROR: 29189 ** 9 printk messages dropped ** [ 1102.157298] binder: 5924:5926 BC_FREE_BUFFER u0000000000000000 no match 20:30:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1102.157432] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.163411] binder_alloc: 5925: binder_alloc_buf, no vma [ 1102.163451] binder: 5925:5933 transaction failed 29189/-3, size 72-24 line 3137 [ 1102.163593] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.175427] binder_alloc: 5928: binder_alloc_buf, no vma 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1102.175468] binder: 5928:5931 transaction failed 29189/-3, size 72-24 line 3137 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 8 printk messages dropped ** [ 1102.244720] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.252720] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1102.258646] binder_alloc: 5945: binder_alloc_buf, no vma ** 8 printk messages dropped ** [ 1102.329297] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.349764] binder_alloc: 5958: binder_alloc_buf, no vma 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1102.350547] binder: 5958:5960 BC_FREE_BUFFER u0000000000000000 no match [ 1102.354200] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.378754] binder_alloc: 5964: binder_alloc_buf, no vma [ 1102.378793] binder: 5964:5966 transaction failed 29189/-3, size 72-24 line 3137 [ 1102.380080] binder: 5964:5966 BC_FREE_BUFFER u0000000020003000 no match [ 1102.383684] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1102.415678] binder_alloc: 5962: binder_alloc_buf, no vma ** 8 printk messages dropped ** [ 1102.434118] binder: undelivered TRANSACTION_ERROR: 29189 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1102.478953] binder: undelivered TRANSACTION_ERROR: 29189 ** 12 printk messages dropped ** [ 1102.571818] binder: 5991:5998 BC_FREE_BUFFER u0000000000000000 no match ** 3 printk messages dropped ** [ 1102.600765] binder: 5999:6003 BC_FREE_BUFFER u0000000020003000 no match [ 1102.605625] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.642130] binder_alloc: 6009: binder_alloc_buf, no vma 20:30:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:25 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:25 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1102.642172] binder: 6009:6013 transaction failed 29189/-3, size 72-24 line 3137 [ 1102.642310] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.648882] binder_alloc: 6006: binder_alloc_buf, no vma [ 1102.648919] binder: 6006:6014 transaction failed 29189/-3, size 72-24 line 3137 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 1102.722955] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.751668] binder_alloc: 6025: binder_alloc_buf, no vma 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1102.751710] binder: 6025:6028 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1102.788558] binder_alloc: 6030: binder_alloc_buf, no vma 20:30:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1102.788600] binder: 6030:6034 transaction failed 29189/-3, size 72-24 line 3137 [ 1102.796319] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.828939] binder_alloc: 6039: binder_alloc_buf, no vma [ 1102.828979] binder: 6039:6042 transaction failed 29189/-3, size 72-24 line 3137 [ 1102.829076] binder: 6039:6042 BC_FREE_BUFFER u0000000000000000 no match 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1102.829215] binder: undelivered TRANSACTION_ERROR: 29189 ** 1 printk messages dropped ** [ 1102.854667] binder: 6047:6049 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1102.953856] binder: 6055:6056 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 6 printk messages dropped ** [ 1102.990186] binder: 6063:6065 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1103.003468] binder: undelivered TRANSACTION_ERROR: 29189 20:30:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 3 printk messages dropped ** [ 1103.086701] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1103.118861] binder_alloc: 6078: binder_alloc_buf, no vma 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1103.219655] binder_alloc: 6094: binder_alloc_buf, no vma [ 1103.219693] binder: 6094:6097 transaction failed 29189/-3, size 72-24 line 3137 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1103.219850] binder: undelivered TRANSACTION_ERROR: 29189 ** 8 printk messages dropped ** [ 1103.319243] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.335326] binder_alloc: 6107: binder_alloc_buf, no vma [ 1103.335369] binder: 6107:6112 transaction failed 29189/-3, size 72-24 line 3137 [ 1103.338632] binder: 6107:6112 BC_FREE_BUFFER u0000000020003000 no match 20:30:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1103.344493] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.386587] binder_alloc: 6119: binder_alloc_buf, no vma [ 1103.386629] binder: 6119:6120 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1103.425860] binder: 6126:6131 transaction failed 29189/-3, size 72-24 line 3137 20:30:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 13 printk messages dropped ** [ 1103.520111] binder: undelivered TRANSACTION_ERROR: 29189 [ 1103.605275] binder: undelivered TRANSACTION_ERROR: 29189 ** 2 printk messages dropped ** [ 1103.807002] binder: undelivered TRANSACTION_ERROR: 29189 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:26 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1103.857992] binder_alloc: 6159: binder_alloc_buf, no vma 20:30:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:26 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1103.873083] binder: undelivered TRANSACTION_ERROR: 29189 ** 9 printk messages dropped ** [ 1103.926027] binder: 6178:6179 transaction failed 29189/-3, size 72-24 line 3137 20:30:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1103.973505] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1104.032490] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.045333] binder_alloc: 6191: binder_alloc_buf, no vma [ 1104.045372] binder: 6191:6194 transaction failed 29189/-3, size 72-24 line 3137 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 1104.130079] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.158180] binder_alloc: 6206: binder_alloc_buf, no vma 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1104.158230] binder: 6206:6211 transaction failed 29189/-3, size 72-24 line 3137 ** 8 printk messages dropped ** [ 1104.185634] binder: 6217:6218 BC_FREE_BUFFER u0000000020003000 no match [ 1104.203612] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.206429] binder_alloc: 6210: binder_alloc_buf, no vma [ 1104.206469] binder: 6210:6215 transaction failed 29189/-3, size 72-24 line 3137 20:30:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1104.207848] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.284883] binder_alloc: 6223: binder_alloc_buf, no vma [ 1104.284924] binder: 6223:6229 transaction failed 29189/-3, size 72-24 line 3137 [ 1104.288576] binder: 6223:6229 BC_FREE_BUFFER u0000000020003000 no match [ 1104.290699] binder_alloc: 6230: binder_alloc_buf, no vma [ 1104.290739] binder: 6230:6232 transaction failed 29189/-3, size 72-24 line 3137 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 1104.319635] binder: 6226:6233 BC_FREE_BUFFER u0000000000000000 no match [ 1104.319995] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.379089] binder_alloc: 6239: binder_alloc_buf, no vma [ 1104.379129] binder: 6239:6240 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1104.379274] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.407875] binder_alloc: 6241: binder_alloc_buf, no vma [ 1104.407916] binder: 6241:6244 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1104.409428] binder_alloc: 6245: binder_alloc_buf, no vma [ 1104.409469] binder: 6245:6249 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1104.410779] binder: undelivered TRANSACTION_ERROR: 29189 20:30:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 1104.420525] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.474306] binder_alloc: 6257: binder_alloc_buf, no vma [ 1104.474346] binder: 6257:6258 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1104.488171] binder_alloc: 6260: binder_alloc_buf, no vma 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 9 printk messages dropped ** [ 1104.564087] binder: 6268:6275 BC_FREE_BUFFER u0000000020003000 no match [ 1104.573396] binder_alloc: 6272: binder_alloc_buf, no vma 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1104.573438] binder: 6272:6278 transaction failed 29189/-3, size 72-24 line 3137 ** 8 printk messages dropped ** [ 1104.638259] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.699956] binder_alloc: 6291: binder_alloc_buf, no vma 20:30:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1104.700761] binder: 6291:6295 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1104.763742] binder: undelivered TRANSACTION_ERROR: 29189 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 1104.800476] binder: 6307:6309 transaction failed 29189/-3, size 72-24 line 3137 ** 3 printk messages dropped ** [ 1104.822498] binder: 6311:6313 transaction failed 29189/-3, size 72-24 line 3137 ** 6 printk messages dropped ** [ 1104.898158] binder: 6321:6325 BC_FREE_BUFFER u0000000020003000 no match ** 3 printk messages dropped ** [ 1104.910896] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.961873] binder_alloc: 6324: binder_alloc_buf, no vma 20:30:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1104.961915] binder: 6324:6337 transaction failed 29189/-3, size 72-24 line 3137 [ 1104.962009] binder: 6324:6337 BC_FREE_BUFFER u0000000000000000 no match [ 1104.962128] binder: undelivered TRANSACTION_ERROR: 29189 [ 1104.966278] binder_alloc: 6334: binder_alloc_buf, no vma [ 1104.966320] binder: 6334:6336 transaction failed 29189/-3, size 72-24 line 3137 [ 1104.969267] binder: undelivered TRANSACTION_ERROR: 29189 20:30:27 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:27 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1104.991602] binder_alloc: 6338: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1105.014629] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 2 printk messages dropped ** [ 1105.028103] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000eb1a638ec20692582e37bd7d2a2c22ec548959e356e24b985f28497248345a3aed7178e9cbf298488aa2048b51d7acad308f2b61caec9d8baabd12a4ae822d1e773fca9193dba71035e3f25ef1ba98eb231abbe0340430509c469db59f1229af89a3ad19134d45d2f7dfb153b0c5e62d178566422d202ff520ff9c2ee812c63424541da6e2725b6d45aa55900ace55b0cb0ddfd414779a1e1f6a9b88551863ae37a1e9f022e19a091e9bb07ea9000b328844a21f4838096603e3a28c56e133fbeefb9623763c9a5d059625e307fa1eaee74e169b440f596499baad0ed010479a9abd50c8a9948ffce80ea4"], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 6 printk messages dropped ** [ 1105.135026] binder_alloc: 6357: binder_alloc_buf, no vma [ 1105.135070] binder: 6357:6359 transaction failed 29189/-3, size 72-24 line 3137 [ 1105.135521] binder: 6357:6359 BC_FREE_BUFFER u0000000020003000 no match [ 1105.141762] binder_alloc: 6361: binder_alloc_buf, no vma 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) [ 1105.141802] binder: 6361:6365 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 10 printk messages dropped ** [ 1105.250263] binder: 6375:6380 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 9 printk messages dropped ** [ 1105.369668] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.370790] binder_alloc: 6393: binder_alloc_buf, no vma [ 1105.370823] binder: 6393:6397 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1105.375442] binder_alloc: 6395: binder_alloc_buf, no vma [ 1105.375482] binder: 6395:6400 transaction failed 29189/-3, size 72-24 line 3137 ** 9 printk messages dropped ** [ 1105.468612] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1105.484465] binder_alloc: 6414: binder_alloc_buf, no vma [ 1105.484505] binder: 6414:6415 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 1105.570241] binder: 6425:6427 BC_FREE_BUFFER u0000000020003000 no match 20:30:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1105.579995] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.604493] binder_alloc: 6430: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1105.607971] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 3 printk messages dropped ** [ 1105.623286] binder_alloc: 6433: binder_alloc_buf, no vma [ 1105.623327] binder: 6433:6437 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1105.677723] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1105.681634] binder_alloc: 6440: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 1105.681914] binder: undelivered TRANSACTION_ERROR: 29189 ** 6 printk messages dropped ** [ 1105.783748] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1105.805840] binder: 6459:6462 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 1105.812725] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.815615] binder_alloc: 6461: binder_alloc_buf, no vma [ 1105.815659] binder: 6461:6464 transaction failed 29189/-3, size 72-24 line 3137 ** 1 printk messages dropped ** [ 1105.830224] binder: undelivered TRANSACTION_ERROR: 29189 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 10 printk messages dropped ** [ 1105.921005] binder_alloc: 6479: binder_alloc_buf, no vma [ 1105.921055] binder: 6479:6482 transaction failed 29189/-3, size 72-24 line 3137 [ 1105.921532] binder: 6479:6482 BC_FREE_BUFFER u0000000020003000 no match ** 1 printk messages dropped ** [ 1105.986108] binder_alloc: 6486: binder_alloc_buf, no vma 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) ** 1 printk messages dropped ** [ 1105.986288] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1106.011246] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.012535] binder_alloc: 6490: binder_alloc_buf, no vma [ 1106.012582] binder: 6490:6496 transaction failed 29189/-3, size 72-24 line 3137 20:30:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:28 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:28 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 1106.029653] binder_alloc: 6493: binder_alloc_buf, no vma [ 1106.029692] binder: 6493:6498 transaction failed 29189/-3, size 72-24 line 3137 [ 1106.031114] binder: 6493:6498 BC_FREE_BUFFER u0000000020003000 no match ** 1 printk messages dropped ** [ 1106.088519] binder_alloc: 6500: binder_alloc_buf, no vma 20:30:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:29 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:29 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) ** 2 printk messages dropped ** [ 1106.094998] binder_alloc: 6504: binder_alloc_buf, no vma ** 6 printk messages dropped ** [ 1106.122959] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.189364] binder_alloc: 6516: binder_alloc_buf, no vma [ 1106.189404] binder: 6516:6519 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) [ 1106.189554] binder: undelivered TRANSACTION_ERROR: 29189 ** 3 printk messages dropped ** [ 1106.217858] binder: 6523:6526 transaction failed 29189/-3, size 72-24 line 3137 ** 7 printk messages dropped ** [ 1106.269475] binder_alloc: 6533: binder_alloc_buf, no vma [ 1106.269516] binder: 6533:6537 transaction failed 29189/-3, size 72-24 line 3137 [ 1106.271767] binder: 6533:6537 BC_FREE_BUFFER u0000000020003000 no match [ 1106.283668] binder_alloc: 6535: binder_alloc_buf, no vma 20:30:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:30:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 20:30:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 20:30:29 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:29 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 1106.283710] binder: 6535:6538 transaction failed 29189/-3, size 72-24 line 3137 [ 1106.285589] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.288242] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.318766] binder_alloc: 6540: binder_alloc_buf, no vma 20:30:29 executing program 2: socket(0x18, 0x0, 0x4) connect(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) 20:30:29 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) 20:30:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) [ 1106.318806] binder: 6540:6542 transaction failed 29189/-3, size 72-24 line 3137 ** 5 printk messages dropped ** [ 1106.342688] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.392736] binder_alloc: 6549: binder_alloc_buf, no vma [ 1106.392778] binder: 6549:6550 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 20:30:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire, @free_buffer], 0x0, 0x0, 0x0}) 20:30:29 executing program 5: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000140)=0x1, 0xffffffffffffffc3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000003c0)) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) setgroups(0x63, &(0x7f0000000580)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x400080000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x0) [ 1106.392934] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.415093] binder_alloc: 6554: binder_alloc_buf, no vma [ 1106.415132] binder: 6554:6558 transaction failed 29189/-3, size 72-24 line 3137 ** 4 printk messages dropped ** [ 1106.420262] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.423252] binder_alloc: 6553: binder_alloc_buf, no vma [ 1106.423294] binder: 6553:6556 transaction failed 29189/-3, size 72-24 line 3137 [ 1106.424301] binder: 6553:6556 BC_FREE_BUFFER u0000000020003000 no match [ 1106.435465] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.486081] binder_alloc: 6562: binder_alloc_buf, no vma ** 180 printk messages dropped ** [ 1107.908040] binder: 6788:6794 BC_FREE_BUFFER u0000000020003000 no match [ 1107.916013] binder: undelivered TRANSACTION_ERROR: 29189 [ 1107.917853] binder_alloc: 6789: binder_alloc_buf, no vma [ 1107.917893] binder: 6789:6791 transaction failed 29189/-3, size 72-24 line 3137 [ 1107.917984] binder: 6789:6791 BC_FREE_BUFFER u0000000000000000 no match [ 1107.940203] binder: undelivered TRANSACTION_ERROR: 29189 [ 1107.993415] binder_alloc: 6802: binder_alloc_buf, no vma [ 1107.993455] binder: 6802:6804 transaction failed 29189/-3, size 72-24 line 3137 [ 1107.994801] binder: 6802:6804 BC_FREE_BUFFER u0000000020003000 no match [ 1108.011038] binder_alloc: 6807: binder_alloc_buf, no vma [ 1108.011082] binder: 6807:6808 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.011228] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.011773] binder_alloc: 6806: binder_alloc_buf, no vma [ 1108.012765] binder: 6806:6809 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.012883] binder: 6806:6809 BC_FREE_BUFFER u0000000000000000 no match [ 1108.013119] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.029375] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.108532] binder_alloc: 6820: binder_alloc_buf, no vma [ 1108.108572] binder: 6820:6821 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1108.108714] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.138791] binder_alloc: 6823: binder_alloc_buf, no vma [ 1108.141196] binder_alloc: 6824: binder_alloc_buf, no vma [ 1108.141238] binder: 6824:6827 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.141612] binder: 6824:6827 BC_FREE_BUFFER u0000000000000000 no match [ 1108.141919] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.143227] binder: 6823:6830 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.143892] binder_alloc: 6822: binder_alloc_buf, no vma [ 1108.143933] binder: 6822:6831 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.144079] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.178552] binder: 6823:6830 BC_FREE_BUFFER u0000000020003000 no match [ 1108.216139] binder_alloc: 6835: binder_alloc_buf, no vma [ 1108.216181] binder: 6835:6837 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.216294] binder: 6835:6837 BC_FREE_BUFFER u0000000000000000 no match [ 1108.220273] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.223241] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.257357] binder_alloc: 6843: binder_alloc_buf, no vma [ 1108.257407] binder: 6843:6845 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.257852] binder: 6843:6845 BC_FREE_BUFFER u0000000020003000 no match [ 1108.273380] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.295842] binder_alloc: 6846: binder_alloc_buf, no vma [ 1108.295911] binder: 6846:6848 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.296297] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.342746] binder_alloc: 6854: binder_alloc_buf, no vma [ 1108.342785] binder: 6854:6855 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1108.342943] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.367744] binder_alloc: 6857: binder_alloc_buf, no vma [ 1108.367784] binder: 6857:6860 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.367913] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.371534] binder_alloc: 6859: binder_alloc_buf, no vma [ 1108.371574] binder: 6859:6864 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.372612] binder: 6859:6864 BC_FREE_BUFFER u0000000020003000 no match [ 1108.391483] binder_alloc: 6861: binder_alloc_buf, no vma [ 1108.391523] binder: 6861:6863 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.391616] binder: 6861:6863 BC_FREE_BUFFER u0000000000000000 no match [ 1108.395297] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.431727] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.451954] binder_alloc: 6871: binder_alloc_buf, no vma [ 1108.451994] binder: 6871:6876 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.452639] binder: 6871:6876 BC_FREE_BUFFER u0000000000000000 no match [ 1108.452921] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.455038] binder_alloc: 6874: binder_alloc_buf, no vma [ 1108.455077] binder: 6874:6877 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.455326] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.508866] binder_alloc: 6881: binder_alloc_buf, no vma [ 1108.508907] binder: 6881:6882 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.509002] binder: 6881:6882 BC_FREE_BUFFER u0000000000000000 no match [ 1108.509127] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.510097] binder_alloc: 6873: binder_alloc_buf, no vma [ 1108.510136] binder: 6873:6880 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.516845] binder: 6873:6880 BC_FREE_BUFFER u0000000020003000 no match [ 1108.530564] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.568503] binder_alloc: 6889: binder_alloc_buf, no vma [ 1108.568545] binder: 6889:6890 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1108.568689] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.599537] binder_alloc: 6895: binder_alloc_buf, no vma [ 1108.599576] binder: 6895:6900 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.599856] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.605172] binder_alloc: 6894: binder_alloc_buf, no vma [ 1108.605213] binder: 6894:6897 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.605665] binder: 6894:6897 BC_FREE_BUFFER u0000000020003000 no match [ 1108.615383] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.618157] binder_alloc: 6893: binder_alloc_buf, no vma [ 1108.618196] binder: 6893:6896 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.618295] binder: 6893:6896 BC_FREE_BUFFER u0000000000000000 no match [ 1108.620482] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.655941] binder_alloc: 6903: binder_alloc_buf, no vma [ 1108.655982] binder: 6903:6906 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.657576] binder: 6903:6906 BC_FREE_BUFFER u0000000000000000 no match [ 1108.658417] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.671699] binder_alloc: 6908: binder_alloc_buf, no vma [ 1108.671741] binder: 6908:6909 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.672265] binder: 6908:6909 BC_FREE_BUFFER u0000000020003000 no match [ 1108.687223] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.710828] binder_alloc: 6910: binder_alloc_buf, no vma [ 1108.710869] binder: 6910:6915 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.711023] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.739399] binder_alloc: 6920: binder_alloc_buf, no vma [ 1108.739438] binder: 6920:6923 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.739529] binder: 6920:6923 BC_FREE_BUFFER u0000000000000000 no match [ 1108.739773] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.790810] binder_alloc: 6922: binder_alloc_buf, no vma [ 1108.790849] binder: 6922:6924 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.791280] binder: 6922:6924 BC_FREE_BUFFER u0000000020003000 no match [ 1108.793463] binder_alloc: 6929: binder_alloc_buf, no vma [ 1108.793504] binder: 6929:6930 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1108.793668] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.794764] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.855093] binder_alloc: 6932: binder_alloc_buf, no vma [ 1108.855131] binder: 6932:6938 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.855404] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.868868] binder_alloc: 6936: binder_alloc_buf, no vma [ 1108.868907] binder: 6936:6941 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.869378] binder: 6936:6941 BC_FREE_BUFFER u0000000020003000 no match [ 1108.886380] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.916473] binder_alloc: 6933: binder_alloc_buf, no vma [ 1108.916515] binder: 6933:6939 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.916656] binder: 6933:6939 BC_FREE_BUFFER u0000000000000000 no match [ 1108.916781] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.944825] binder_alloc: 6949: binder_alloc_buf, no vma [ 1108.944862] binder: 6949:6955 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.945006] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.950754] binder_alloc: 6947: binder_alloc_buf, no vma [ 1108.950796] binder: 6947:6954 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.951885] binder: 6947:6954 BC_FREE_BUFFER u0000000020003000 no match [ 1108.969063] binder_alloc: 6953: binder_alloc_buf, no vma [ 1108.969104] binder: 6953:6957 transaction failed 29189/-3, size 72-24 line 3137 [ 1108.969197] binder: 6953:6957 BC_FREE_BUFFER u0000000000000000 no match [ 1108.970791] binder: undelivered TRANSACTION_ERROR: 29189 [ 1108.970828] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.052484] binder_alloc: 6964: binder_alloc_buf, no vma [ 1109.052524] binder: 6964:6965 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1109.055629] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.073836] binder_alloc: 6967: binder_alloc_buf, no vma [ 1109.073877] binder: 6967:6972 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.075441] binder: 6967:6972 BC_FREE_BUFFER u0000000020003000 no match [ 1109.087356] binder_alloc: 6970: binder_alloc_buf, no vma [ 1109.087396] binder: 6970:6976 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.087484] binder: 6970:6976 BC_FREE_BUFFER u0000000000000000 no match [ 1109.094352] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.094559] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.111069] binder_alloc: 6968: binder_alloc_buf, no vma [ 1109.111110] binder: 6968:6975 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.111419] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.153764] binder_alloc: 6982: binder_alloc_buf, no vma [ 1109.153803] binder: 6982:6984 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.154335] binder: 6982:6984 BC_FREE_BUFFER u0000000020003000 no match [ 1109.157059] binder_alloc: 6987: binder_alloc_buf, no vma [ 1109.157098] binder: 6987:6989 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.157231] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.160496] binder_alloc: 6985: binder_alloc_buf, no vma [ 1109.160532] binder: 6985:6991 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.161149] binder: 6985:6991 BC_FREE_BUFFER u0000000000000000 no match [ 1109.161409] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.179719] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.245345] binder_alloc: 6997: binder_alloc_buf, no vma [ 1109.245385] binder: 6997:6998 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1109.246920] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.274348] binder_alloc: 7001: binder_alloc_buf, no vma [ 1109.274390] binder: 7001:7006 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.274715] binder: 7001:7006 BC_FREE_BUFFER u0000000000000000 no match [ 1109.274850] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.275124] binder_alloc: 7000: binder_alloc_buf, no vma [ 1109.275167] binder: 7000:7005 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.275624] binder: 7000:7005 BC_FREE_BUFFER u0000000020003000 no match [ 1109.279110] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.279469] binder_alloc: 6999: binder_alloc_buf, no vma [ 1109.279508] binder: 6999:7008 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.279625] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.324997] binder_alloc: 7011: binder_alloc_buf, no vma [ 1109.325038] binder: 7011:7014 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.326181] binder: 7011:7014 BC_FREE_BUFFER u0000000020003000 no match [ 1109.348461] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.371251] binder_alloc: 7018: binder_alloc_buf, no vma [ 1109.371306] binder: 7018:7021 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.371424] binder: 7018:7021 BC_FREE_BUFFER u0000000000000000 no match [ 1109.371553] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.387693] binder_alloc: 7020: binder_alloc_buf, no vma [ 1109.387734] binder: 7020:7024 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.390170] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.391335] binder_alloc: 7023: binder_alloc_buf, no vma [ 1109.391377] binder: 7023:7025 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.392603] binder: 7023:7025 BC_FREE_BUFFER u0000000020003000 no match [ 1109.409936] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.447110] binder_alloc: 7028: binder_alloc_buf, no vma [ 1109.447151] binder: 7028:7029 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1109.447291] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.484542] binder_alloc: 7035: binder_alloc_buf, no vma [ 1109.484583] binder: 7035:7039 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.485236] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.509539] binder_alloc: 7036: binder_alloc_buf, no vma [ 1109.509582] binder: 7036:7040 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.512349] binder: 7036:7040 BC_FREE_BUFFER u0000000020003000 no match [ 1109.515857] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.532530] binder_alloc: 7043: binder_alloc_buf, no vma [ 1109.532571] binder: 7043:7045 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.532712] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.537137] binder_alloc: 7037: binder_alloc_buf, no vma [ 1109.537178] binder: 7037:7046 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.537303] binder: 7037:7046 BC_FREE_BUFFER u0000000000000000 no match [ 1109.537433] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.579598] binder_alloc: 7049: binder_alloc_buf, no vma [ 1109.579636] binder: 7049:7055 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.581392] binder: 7049:7055 BC_FREE_BUFFER u0000000020003000 no match [ 1109.583301] binder_alloc: 7054: binder_alloc_buf, no vma [ 1109.583339] binder: 7054:7057 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.584783] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.599948] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.618947] binder_alloc: 7051: binder_alloc_buf, no vma [ 1109.618990] binder: 7051:7056 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.619107] binder: 7051:7056 BC_FREE_BUFFER u0000000000000000 no match [ 1109.619448] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.669578] binder_alloc: 7063: binder_alloc_buf, no vma [ 1109.669620] binder: 7063:7064 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1109.669775] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.696494] binder_alloc: 7070: binder_alloc_buf, no vma [ 1109.696535] binder: 7070:7073 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.705488] binder_alloc: 7068: binder_alloc_buf, no vma [ 1109.705528] binder: 7068:7071 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.705659] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.707368] binder: 7070:7073 BC_FREE_BUFFER u0000000020003000 no match [ 1109.725501] binder_alloc: 7069: binder_alloc_buf, no vma [ 1109.725542] binder: 7069:7075 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.725636] binder: 7069:7075 BC_FREE_BUFFER u0000000000000000 no match [ 1109.725857] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.744070] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.771795] binder_alloc: 7077: binder_alloc_buf, no vma [ 1109.771837] binder: 7077:7084 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.772010] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.775915] binder_alloc: 7080: binder_alloc_buf, no vma [ 1109.775955] binder: 7080:7082 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.776066] binder: 7080:7082 BC_FREE_BUFFER u0000000000000000 no match [ 1109.776213] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.782314] binder_alloc: 7081: binder_alloc_buf, no vma [ 1109.782351] binder: 7081:7089 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.782911] binder: 7081:7089 BC_FREE_BUFFER u0000000020003000 no match [ 1109.808723] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.899811] binder_alloc: 7096: binder_alloc_buf, no vma [ 1109.900736] binder: 7096:7097 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1109.900892] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.921377] binder_alloc: 7099: binder_alloc_buf, no vma [ 1109.921417] binder: 7099:7103 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.922223] binder: 7099:7103 BC_FREE_BUFFER u0000000020003000 no match [ 1109.933006] binder_alloc: 7100: binder_alloc_buf, no vma [ 1109.933049] binder: 7100:7107 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.933192] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.936848] binder_alloc: 7098: binder_alloc_buf, no vma [ 1109.936889] binder: 7098:7108 transaction failed 29189/-3, size 72-24 line 3137 [ 1109.936980] binder: 7098:7108 BC_FREE_BUFFER u0000000000000000 no match [ 1109.937292] binder: undelivered TRANSACTION_ERROR: 29189 [ 1109.938351] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.023171] binder_alloc: 7109: binder_alloc_buf, no vma [ 1110.023212] binder: 7109:7120 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.035159] binder: 7109:7120 BC_FREE_BUFFER u0000000020003000 no match [ 1110.037791] binder_alloc: 7116: binder_alloc_buf, no vma [ 1110.037834] binder: 7116:7121 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.037986] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.062800] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.062974] binder_alloc: 7122: binder_alloc_buf, no vma [ 1110.063016] binder: 7122:7124 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.063143] binder: 7122:7124 BC_FREE_BUFFER u0000000000000000 no match [ 1110.063264] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.114295] binder_alloc: 7130: binder_alloc_buf, no vma [ 1110.114335] binder: 7130:7131 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1110.114478] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.154234] binder_alloc: 7136: binder_alloc_buf, no vma [ 1110.154276] binder: 7136:7138 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.154385] binder: 7136:7138 BC_FREE_BUFFER u0000000000000000 no match [ 1110.155608] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.188460] binder_alloc: 7139: binder_alloc_buf, no vma [ 1110.188529] binder: 7139:7145 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.189057] binder: 7139:7145 BC_FREE_BUFFER u0000000020003000 no match [ 1110.199658] binder_alloc: 7134: binder_alloc_buf, no vma [ 1110.199696] binder: 7134:7147 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.199987] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.203060] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.232641] binder_alloc: 7152: binder_alloc_buf, no vma [ 1110.232681] binder: 7152:7154 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.233155] binder: 7152:7154 BC_FREE_BUFFER u0000000020003000 no match [ 1110.235293] binder_alloc: 7143: binder_alloc_buf, no vma [ 1110.235335] binder: 7143:7150 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.235433] binder: 7143:7150 BC_FREE_BUFFER u0000000000000000 no match [ 1110.235660] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.254750] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.297220] binder_alloc: 7155: binder_alloc_buf, no vma [ 1110.297265] binder: 7155:7157 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.297423] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.327772] binder_alloc: 7164: binder_alloc_buf, no vma [ 1110.327814] binder: 7164:7165 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1110.327959] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.353869] binder_alloc: 7169: binder_alloc_buf, no vma [ 1110.353904] binder: 7169:7173 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.353995] binder: 7169:7173 BC_FREE_BUFFER u0000000000000000 no match [ 1110.354267] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.357556] binder_alloc: 7167: binder_alloc_buf, no vma [ 1110.357596] binder: 7167:7168 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.358036] binder: 7167:7168 BC_FREE_BUFFER u0000000020003000 no match [ 1110.370476] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.392157] binder_alloc: 7171: binder_alloc_buf, no vma [ 1110.392197] binder: 7171:7175 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.392472] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.406532] binder_alloc: 7179: binder_alloc_buf, no vma [ 1110.406571] binder: 7179:7181 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.407034] binder: 7179:7181 BC_FREE_BUFFER u0000000020003000 no match [ 1110.432021] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.446036] binder_alloc: 7186: binder_alloc_buf, no vma [ 1110.446076] binder: 7186:7188 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.446298] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.448731] binder_alloc: 7182: binder_alloc_buf, no vma [ 1110.448771] binder: 7182:7185 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.449665] binder: 7182:7185 BC_FREE_BUFFER u0000000000000000 no match [ 1110.449806] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.502046] binder_alloc: 7191: binder_alloc_buf, no vma [ 1110.502085] binder: 7191:7194 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.502531] binder: 7191:7194 BC_FREE_BUFFER u0000000020003000 no match [ 1110.509003] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.547892] binder_alloc: 7198: binder_alloc_buf, no vma [ 1110.547932] binder: 7198:7199 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1110.548073] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.571637] binder_alloc: 7201: binder_alloc_buf, no vma [ 1110.571677] binder: 7201:7208 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.571746] binder_alloc: 7204: binder_alloc_buf, no vma [ 1110.571782] binder: 7204:7205 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.571931] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.572236] binder: 7201:7208 BC_FREE_BUFFER u0000000020003000 no match [ 1110.574927] binder_alloc: 7202: binder_alloc_buf, no vma [ 1110.574965] binder: 7202:7207 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.575062] binder: 7202:7207 BC_FREE_BUFFER u0000000000000000 no match [ 1110.575188] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.579449] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.647524] binder_alloc: 7210: binder_alloc_buf, no vma [ 1110.647564] binder: 7210:7213 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.648089] binder: 7210:7213 BC_FREE_BUFFER u0000000020003000 no match [ 1110.649147] binder_alloc: 7216: binder_alloc_buf, no vma [ 1110.649194] binder: 7216:7220 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.659389] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.674918] binder: 7216:7220 BC_FREE_BUFFER u0000000000000000 no match [ 1110.676317] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.678926] binder_alloc: 7217: binder_alloc_buf, no vma [ 1110.678969] binder: 7217:7221 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.688670] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.730886] binder_alloc: 7225: binder_alloc_buf, no vma [ 1110.730925] binder: 7225:7230 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.731335] binder: 7225:7230 BC_FREE_BUFFER u0000000020003000 no match [ 1110.737883] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.773567] binder_alloc: 7233: binder_alloc_buf, no vma [ 1110.773606] binder: 7233:7234 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1110.773824] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.797632] binder_alloc: 7236: binder_alloc_buf, no vma [ 1110.797675] binder: 7236:7245 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.797887] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.798420] binder_alloc: 7237: binder_alloc_buf, no vma [ 1110.798460] binder: 7237:7241 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.798554] binder: 7237:7241 BC_FREE_BUFFER u0000000000000000 no match [ 1110.798666] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.835730] binder_alloc: 7239: binder_alloc_buf, no vma [ 1110.835770] binder: 7239:7243 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.840374] binder: 7239:7243 BC_FREE_BUFFER u0000000020003000 no match [ 1110.846015] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.882214] binder_alloc: 7250: binder_alloc_buf, no vma [ 1110.882255] binder: 7250:7258 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.882387] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.890231] binder_alloc: 7253: binder_alloc_buf, no vma [ 1110.890271] binder: 7253:7260 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.892443] binder: 7253:7260 BC_FREE_BUFFER u0000000020003000 no match [ 1110.914093] binder_alloc: 7259: binder_alloc_buf, no vma [ 1110.914134] binder: 7259:7261 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.917516] binder: 7259:7261 BC_FREE_BUFFER u0000000000000000 no match [ 1110.917646] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.918660] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.936225] binder_alloc: 7265: binder_alloc_buf, no vma [ 1110.936266] binder: 7265:7267 transaction failed 29189/-3, size 72-24 line 3137 [ 1110.936407] binder: undelivered TRANSACTION_ERROR: 29189 [ 1110.994707] binder_alloc: 7268: binder_alloc_buf, no vma [ 1110.994747] binder: 7268:7272 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1110.994889] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.014610] binder_alloc: 7276: binder_alloc_buf, no vma [ 1111.014651] binder: 7276:7278 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.014745] binder: 7276:7278 BC_FREE_BUFFER u0000000000000000 no match [ 1111.014887] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.023436] binder_alloc: 7274: binder_alloc_buf, no vma [ 1111.023476] binder: 7274:7281 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.025190] binder: 7274:7281 BC_FREE_BUFFER u0000000020003000 no match [ 1111.033129] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.051325] binder_alloc: 7279: binder_alloc_buf, no vma [ 1111.051365] binder: 7279:7282 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.051679] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.053788] binder_alloc: 7283: binder_alloc_buf, no vma [ 1111.053828] binder: 7283:7285 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.053921] binder: 7283:7285 BC_FREE_BUFFER u0000000000000000 no match [ 1111.054109] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.122020] binder_alloc: 7290: binder_alloc_buf, no vma [ 1111.122064] binder: 7290:7293 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.122363] binder: 7290:7293 BC_FREE_BUFFER u0000000000000000 no match [ 1111.122605] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.129750] binder_alloc: 7292: binder_alloc_buf, no vma [ 1111.129790] binder: 7292:7299 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.132529] binder: 7292:7299 BC_FREE_BUFFER u0000000020003000 no match [ 1111.155082] binder_alloc: 7294: binder_alloc_buf, no vma [ 1111.155122] binder: 7294:7300 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.155273] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.160789] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.192029] binder_alloc: 7303: binder_alloc_buf, no vma [ 1111.192069] binder: 7303:7304 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1111.192207] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.216594] binder_alloc: 7308: binder_alloc_buf, no vma [ 1111.216634] binder: 7308:7313 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.225780] binder: 7308:7313 BC_FREE_BUFFER u0000000020003000 no match [ 1111.226189] binder_alloc: 7306: binder_alloc_buf, no vma [ 1111.239963] binder: 7306:7314 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.240774] binder: 7306:7314 BC_FREE_BUFFER u0000000000000000 no match [ 1111.240916] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.249251] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.256465] binder_alloc: 7311: binder_alloc_buf, no vma [ 1111.256506] binder: 7311:7312 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.257637] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.311766] binder_alloc: 7320: binder_alloc_buf, no vma [ 1111.311807] binder: 7320:7329 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.315673] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.318369] binder_alloc: 7322: binder_alloc_buf, no vma [ 1111.318412] binder: 7322:7327 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.319047] binder: 7322:7327 BC_FREE_BUFFER u0000000020003000 no match [ 1111.321035] binder_alloc: 7324: binder_alloc_buf, no vma [ 1111.321075] binder: 7324:7325 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.321171] binder: 7324:7325 BC_FREE_BUFFER u0000000000000000 no match [ 1111.321298] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.352193] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.392943] binder_alloc: 7336: binder_alloc_buf, no vma [ 1111.392983] binder: 7336:7337 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1111.393121] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.417941] binder_alloc: 7339: binder_alloc_buf, no vma [ 1111.417983] binder: 7339:7341 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.418116] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.423598] binder_alloc: 7343: binder_alloc_buf, no vma [ 1111.423643] binder: 7343:7347 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.423734] binder: 7343:7347 BC_FREE_BUFFER u0000000000000000 no match [ 1111.429268] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.430247] binder_alloc: 7342: binder_alloc_buf, no vma [ 1111.430287] binder: 7342:7344 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.430909] binder: 7342:7344 BC_FREE_BUFFER u0000000020003000 no match [ 1111.459923] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.486499] binder_alloc: 7349: binder_alloc_buf, no vma [ 1111.486541] binder: 7349:7354 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.487458] binder_alloc: 7353: binder_alloc_buf, no vma [ 1111.487499] binder: 7353:7356 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.487684] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.494340] binder: 7349:7354 BC_FREE_BUFFER u0000000020003000 no match [ 1111.509671] binder_alloc: 7355: binder_alloc_buf, no vma [ 1111.509713] binder: 7355:7358 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.510702] binder: 7355:7358 BC_FREE_BUFFER u0000000000000000 no match [ 1111.510851] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.533681] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.583343] binder_alloc: 7365: binder_alloc_buf, no vma [ 1111.583385] binder: 7365:7367 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.583480] binder: 7365:7367 BC_FREE_BUFFER u0000000000000000 no match [ 1111.583595] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.611756] binder_alloc: 7369: binder_alloc_buf, no vma [ 1111.611797] binder: 7369:7370 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1111.622305] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.635812] binder_alloc: 7372: binder_alloc_buf, no vma [ 1111.635852] binder: 7372:7379 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.636790] binder_alloc: 7371: binder_alloc_buf, no vma [ 1111.636826] binder: 7371:7380 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.636946] binder: 7372:7379 BC_FREE_BUFFER u0000000020003000 no match [ 1111.645943] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.654540] binder_alloc: 7376: binder_alloc_buf, no vma [ 1111.654583] binder: 7376:7378 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.654680] binder: 7376:7378 BC_FREE_BUFFER u0000000000000000 no match [ 1111.654814] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.688346] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.727616] binder_alloc: 7388: binder_alloc_buf, no vma [ 1111.727657] binder: 7388:7390 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.727834] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.735760] binder_alloc: 7393: binder_alloc_buf, no vma [ 1111.735861] binder: 7393:7397 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.736548] binder: 7393:7397 BC_FREE_BUFFER u0000000020003000 no match [ 1111.736665] binder_alloc: 7389: binder_alloc_buf, no vma [ 1111.736704] binder: 7389:7394 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.737047] binder: 7389:7394 BC_FREE_BUFFER u0000000000000000 no match [ 1111.740288] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.758849] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.782237] binder_alloc: 7399: binder_alloc_buf, no vma [ 1111.782279] binder: 7399:7400 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1111.783003] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.816852] binder_alloc: 7408: binder_alloc_buf, no vma [ 1111.816892] binder: 7408:7411 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.817007] binder: 7408:7411 BC_FREE_BUFFER u0000000000000000 no match [ 1111.817307] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.818851] binder_alloc: 7406: binder_alloc_buf, no vma [ 1111.818890] binder: 7406:7410 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.819031] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.837602] binder_alloc: 7407: binder_alloc_buf, no vma [ 1111.837642] binder: 7407:7413 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.838092] binder: 7407:7413 BC_FREE_BUFFER u0000000020003000 no match [ 1111.854503] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.881836] binder_alloc: 7415: binder_alloc_buf, no vma [ 1111.882058] binder: 7415:7416 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.882600] binder: 7415:7416 BC_FREE_BUFFER u0000000020003000 no match [ 1111.891816] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.904855] binder_alloc: 7419: binder_alloc_buf, no vma [ 1111.904896] binder: 7419:7424 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.905189] binder: 7419:7424 BC_FREE_BUFFER u0000000000000000 no match [ 1111.906609] binder_alloc: 7420: binder_alloc_buf, no vma [ 1111.906649] binder: 7420:7425 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.909735] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.909830] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.956195] binder_alloc: 7426: binder_alloc_buf, no vma [ 1111.956236] binder: 7426:7431 transaction failed 29189/-3, size 72-24 line 3137 [ 1111.956661] binder: 7426:7431 BC_FREE_BUFFER u0000000020003000 no match [ 1111.960632] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.988451] binder_alloc: 7432: binder_alloc_buf, no vma [ 1111.988493] binder: 7432:7433 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1111.988763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.027171] binder_alloc: 7439: binder_alloc_buf, no vma [ 1112.027212] binder: 7439:7442 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.027445] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.028001] binder_alloc: 7435: binder_alloc_buf, no vma [ 1112.028039] binder: 7435:7443 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.028280] binder: 7435:7443 BC_FREE_BUFFER u0000000000000000 no match [ 1112.028402] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.063988] binder_alloc: 7438: binder_alloc_buf, no vma [ 1112.064026] binder: 7438:7444 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.064480] binder: 7438:7444 BC_FREE_BUFFER u0000000020003000 no match [ 1112.069423] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.117366] binder_alloc: 7448: binder_alloc_buf, no vma [ 1112.117400] binder: 7448:7457 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.117494] binder: 7448:7457 BC_FREE_BUFFER u0000000000000000 no match [ 1112.117635] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.132049] binder_alloc: 7452: binder_alloc_buf, no vma [ 1112.132096] binder: 7452:7459 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.132242] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.133012] binder_alloc: 7455: binder_alloc_buf, no vma [ 1112.133365] binder: 7455:7458 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.134497] binder: 7455:7458 BC_FREE_BUFFER u0000000020003000 no match [ 1112.144187] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.205646] binder_alloc: 7465: binder_alloc_buf, no vma [ 1112.205689] binder: 7465:7466 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1112.211401] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.228881] binder_alloc: 7468: binder_alloc_buf, no vma [ 1112.228923] binder: 7468:7473 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.229021] binder: 7468:7473 BC_FREE_BUFFER u0000000000000000 no match [ 1112.229164] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.235243] binder_alloc: 7469: binder_alloc_buf, no vma [ 1112.235284] binder: 7469:7474 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.235433] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.260841] binder_alloc: 7472: binder_alloc_buf, no vma [ 1112.260880] binder: 7472:7476 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.270232] binder: 7472:7476 BC_FREE_BUFFER u0000000020003000 no match [ 1112.286330] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.316274] binder_alloc: 7479: binder_alloc_buf, no vma [ 1112.316315] binder: 7479:7483 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.318898] binder: 7479:7483 BC_FREE_BUFFER u0000000000000000 no match [ 1112.319123] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.321977] binder_alloc: 7487: binder_alloc_buf, no vma [ 1112.322017] binder: 7487:7491 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.322576] binder: 7487:7491 BC_FREE_BUFFER u0000000020003000 no match [ 1112.343471] binder_alloc: 7481: binder_alloc_buf, no vma [ 1112.343517] binder: 7481:7490 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.343811] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.346310] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.420110] binder_alloc: 7499: binder_alloc_buf, no vma [ 1112.420151] binder: 7499:7500 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1112.420647] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.440728] binder_alloc: 7502: binder_alloc_buf, no vma [ 1112.440766] binder: 7502:7505 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.441229] binder: 7502:7505 BC_FREE_BUFFER u0000000020003000 no match [ 1112.451437] binder_alloc: 7503: binder_alloc_buf, no vma [ 1112.451477] binder: 7503:7509 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.452672] binder_alloc: 7501: binder_alloc_buf, no vma [ 1112.452709] binder: 7501:7510 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.453004] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.453034] binder: 7501:7510 BC_FREE_BUFFER u0000000000000000 no match [ 1112.453538] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.455555] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.497481] binder_alloc: 7513: binder_alloc_buf, no vma [ 1112.497521] binder: 7513:7514 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.510518] binder: 7513:7514 BC_FREE_BUFFER u0000000020003000 no match [ 1112.516752] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.550789] binder_alloc: 7518: binder_alloc_buf, no vma [ 1112.550831] binder: 7518:7522 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.550924] binder: 7518:7522 BC_FREE_BUFFER u0000000000000000 no match [ 1112.551224] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.564671] binder_alloc: 7523: binder_alloc_buf, no vma [ 1112.564709] binder: 7523:7525 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.564857] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.597160] binder_alloc: 7526: binder_alloc_buf, no vma [ 1112.597200] binder: 7526:7528 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.597713] binder: 7526:7528 BC_FREE_BUFFER u0000000020003000 no match [ 1112.608383] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.637914] binder_alloc: 7531: binder_alloc_buf, no vma [ 1112.637954] binder: 7531:7532 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1112.642145] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.665113] binder_alloc: 7537: binder_alloc_buf, no vma [ 1112.665152] binder: 7537:7540 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.666047] binder_alloc: 7534: binder_alloc_buf, no vma [ 1112.666083] binder: 7534:7541 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.666257] binder: 7537:7540 BC_FREE_BUFFER u0000000020003000 no match [ 1112.667038] binder: 7534:7541 BC_FREE_BUFFER u0000000000000000 no match [ 1112.667955] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.670574] binder_alloc: 7536: binder_alloc_buf, no vma [ 1112.670611] binder: 7536:7539 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.670876] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.710966] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.718948] binder_alloc: 7545: binder_alloc_buf, no vma [ 1112.718988] binder: 7545:7547 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.719142] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.769663] binder_alloc: 7550: binder_alloc_buf, no vma [ 1112.769704] binder: 7550:7555 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.769972] binder: 7550:7555 BC_FREE_BUFFER u0000000000000000 no match [ 1112.770132] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.778006] binder_alloc: 7549: binder_alloc_buf, no vma [ 1112.778048] binder: 7549:7554 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.785819] binder: 7549:7554 BC_FREE_BUFFER u0000000020003000 no match [ 1112.795707] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.817382] binder_alloc: 7557: binder_alloc_buf, no vma [ 1112.817424] binder: 7557:7562 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.822821] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.852030] binder_alloc: 7564: binder_alloc_buf, no vma [ 1112.852072] binder: 7564:7565 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1112.852442] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.874582] binder_alloc: 7567: binder_alloc_buf, no vma [ 1112.874622] binder: 7567:7570 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.874728] binder: 7567:7570 BC_FREE_BUFFER u0000000000000000 no match [ 1112.874870] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.883579] binder_alloc: 7568: binder_alloc_buf, no vma [ 1112.883619] binder: 7568:7573 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.884065] binder: 7568:7573 BC_FREE_BUFFER u0000000020003000 no match [ 1112.893783] binder_alloc: 7571: binder_alloc_buf, no vma [ 1112.893826] binder: 7571:7575 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.896272] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.898075] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.964019] binder_alloc: 7584: binder_alloc_buf, no vma [ 1112.964060] binder: 7584:7587 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.964216] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.976641] binder_alloc: 7585: binder_alloc_buf, no vma [ 1112.976682] binder: 7585:7589 transaction failed 29189/-3, size 72-24 line 3137 [ 1112.976776] binder: 7585:7589 BC_FREE_BUFFER u0000000000000000 no match [ 1112.976908] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.004742] binder_alloc: 7579: binder_alloc_buf, no vma [ 1113.004779] binder: 7579:7591 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.006169] binder: 7579:7591 BC_FREE_BUFFER u0000000020003000 no match [ 1113.029057] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.059670] binder_alloc: 7598: binder_alloc_buf, no vma [ 1113.059711] binder: 7598:7599 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1113.066716] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.082538] binder_alloc: 7601: binder_alloc_buf, no vma [ 1113.082718] binder: 7601:7603 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.082998] binder: 7601:7603 BC_FREE_BUFFER u0000000000000000 no match [ 1113.084750] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.090826] binder_alloc: 7604: binder_alloc_buf, no vma [ 1113.090866] binder: 7604:7608 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.091308] binder: 7604:7608 BC_FREE_BUFFER u0000000020003000 no match [ 1113.116804] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.155105] binder: 7600:7607 transaction failed 29189/-22, size 72-24 line 3014 [ 1113.155365] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.170176] binder_alloc: 7619: binder_alloc_buf, no vma [ 1113.170217] binder: 7619:7622 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.170689] binder: 7619:7622 BC_FREE_BUFFER u0000000020003000 no match [ 1113.185173] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.185813] binder_alloc: 7617: binder_alloc_buf, no vma [ 1113.185858] binder: 7617:7621 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.185964] binder: 7617:7621 BC_FREE_BUFFER u0000000000000000 no match [ 1113.186073] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.215007] binder_alloc: 7624: binder_alloc_buf, no vma [ 1113.215048] binder: 7624:7627 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.218765] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.289433] binder_alloc: 7632: binder_alloc_buf, no vma [ 1113.289475] binder: 7632:7633 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1113.289623] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.310557] binder_alloc: 7635: binder_alloc_buf, no vma [ 1113.310597] binder: 7635:7636 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.310861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.313924] binder_alloc: 7634: binder_alloc_buf, no vma [ 1113.313962] binder: 7634:7643 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.315420] binder: 7634:7643 BC_FREE_BUFFER u0000000020003000 no match [ 1113.318299] binder_alloc: 7637: binder_alloc_buf, no vma [ 1113.318339] binder: 7637:7640 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.318474] binder: 7637:7640 BC_FREE_BUFFER u0000000000000000 no match [ 1113.318674] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.354309] binder_alloc: 7644: binder_alloc_buf, no vma [ 1113.354350] binder: 7644:7645 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.354487] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.356167] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.391171] binder_alloc: 7649: binder_alloc_buf, no vma [ 1113.391213] binder: 7649:7652 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.391369] binder: 7649:7652 BC_FREE_BUFFER u0000000000000000 no match [ 1113.391500] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.403448] binder_alloc: 7651: binder_alloc_buf, no vma [ 1113.403494] binder: 7651:7657 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.406582] binder: 7651:7657 BC_FREE_BUFFER u0000000020003000 no match [ 1113.415267] binder_alloc: 7656: binder_alloc_buf, no vma [ 1113.415307] binder: 7656:7660 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.415581] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.424310] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.476917] binder_alloc: 7663: binder_alloc_buf, no vma [ 1113.476957] binder: 7663:7664 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1113.477098] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.506964] binder_alloc: 7668: binder_alloc_buf, no vma [ 1113.507006] binder: 7668:7673 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.508730] binder: 7668:7673 BC_FREE_BUFFER u0000000000000000 no match [ 1113.508954] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.510339] binder_alloc: 7666: binder_alloc_buf, no vma [ 1113.510379] binder: 7666:7671 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.510830] binder: 7666:7671 BC_FREE_BUFFER u0000000020003000 no match [ 1113.514142] binder_alloc: 7670: binder_alloc_buf, no vma [ 1113.514181] binder: 7670:7674 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.514361] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.517409] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.579500] binder_alloc: 7677: binder_alloc_buf, no vma [ 1113.579556] binder: 7677:7684 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.581359] binder: 7677:7684 BC_FREE_BUFFER u0000000000000000 no match [ 1113.581509] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.589695] binder_alloc: 7683: binder_alloc_buf, no vma [ 1113.589736] binder: 7683:7689 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.593643] binder_alloc: 7687: binder_alloc_buf, no vma [ 1113.593686] binder: 7687:7690 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.593909] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.594092] binder: 7683:7689 BC_FREE_BUFFER u0000000020003000 no match [ 1113.611132] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.694017] binder_alloc: 7697: binder_alloc_buf, no vma [ 1113.694056] binder: 7697:7700 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.694199] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.694769] binder_alloc: 7694: binder_alloc_buf, no vma [ 1113.694805] binder: 7694:7696 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.695775] binder: 7694:7696 BC_FREE_BUFFER u0000000020003000 no match [ 1113.706173] binder_alloc: 7701: binder_alloc_buf, no vma [ 1113.706215] binder: 7701:7703 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.706316] binder: 7701:7703 BC_FREE_BUFFER u0000000000000000 no match [ 1113.710939] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.731743] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.803578] binder_alloc: 7711: binder_alloc_buf, no vma [ 1113.803619] binder: 7711:7712 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1113.803763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.838043] binder_alloc: 7716: binder_alloc_buf, no vma [ 1113.838083] binder: 7716:7717 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.838336] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.838739] binder_alloc: 7715: binder_alloc_buf, no vma [ 1113.838776] binder: 7715:7718 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.839802] binder: 7715:7718 BC_FREE_BUFFER u0000000000000000 no match [ 1113.840282] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.846500] binder_alloc: 7714: binder_alloc_buf, no vma [ 1113.846540] binder: 7714:7724 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.847225] binder: 7714:7724 BC_FREE_BUFFER u0000000020003000 no match [ 1113.891473] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.905284] binder_alloc: 7725: binder_alloc_buf, no vma [ 1113.905324] binder: 7725:7728 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.905490] binder: 7725:7728 BC_FREE_BUFFER u0000000000000000 no match [ 1113.905630] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.915788] binder_alloc: 7729: binder_alloc_buf, no vma [ 1113.915833] binder: 7729:7737 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.915987] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.933591] binder_alloc: 7733: binder_alloc_buf, no vma [ 1113.933633] binder: 7733:7738 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.935675] binder: 7733:7738 BC_FREE_BUFFER u0000000020003000 no match [ 1113.954475] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.967476] binder_alloc: 7740: binder_alloc_buf, no vma [ 1113.967517] binder: 7740:7742 transaction failed 29189/-3, size 72-24 line 3137 [ 1113.967617] binder: 7740:7742 BC_FREE_BUFFER u0000000000000000 no match [ 1113.967752] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.006682] binder_alloc: 7744: binder_alloc_buf, no vma [ 1114.006722] binder: 7744:7745 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1114.006903] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.047249] binder_alloc: 7749: binder_alloc_buf, no vma [ 1114.047291] binder: 7749:7752 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.047387] binder: 7749:7752 BC_FREE_BUFFER u0000000000000000 no match [ 1114.047524] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.060841] binder_alloc: 7750: binder_alloc_buf, no vma [ 1114.060882] binder: 7750:7754 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.061327] binder: 7750:7754 BC_FREE_BUFFER u0000000020003000 no match [ 1114.069308] binder_alloc: 7746: binder_alloc_buf, no vma [ 1114.069350] binder: 7746:7755 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.069503] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.088201] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.127616] binder_alloc: 7760: binder_alloc_buf, no vma [ 1114.127657] binder: 7760:7768 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.127760] binder: 7760:7768 BC_FREE_BUFFER u0000000000000000 no match [ 1114.127902] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.149077] binder_alloc: 7764: binder_alloc_buf, no vma [ 1114.149121] binder: 7764:7771 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.153782] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.157490] binder_alloc: 7767: binder_alloc_buf, no vma [ 1114.157530] binder: 7767:7772 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.159688] binder: 7767:7772 BC_FREE_BUFFER u0000000020003000 no match [ 1114.204967] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.213826] binder_alloc: 7778: binder_alloc_buf, no vma [ 1114.213863] binder: 7778:7779 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.217418] binder: 7778:7779 BC_FREE_BUFFER u0000000000000000 no match [ 1114.217561] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.300390] binder_alloc: 7785: binder_alloc_buf, no vma [ 1114.300429] binder: 7785:7787 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.300728] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.334545] binder_alloc: 7790: binder_alloc_buf, no vma [ 1114.334585] binder: 7790:7791 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1114.334733] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.358453] binder_alloc: 7793: binder_alloc_buf, no vma [ 1114.358492] binder: 7793:7799 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.359564] binder: 7793:7799 BC_FREE_BUFFER u0000000020003000 no match [ 1114.368561] binder_alloc: 7794: binder_alloc_buf, no vma [ 1114.368602] binder: 7794:7796 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.368708] binder: 7794:7796 BC_FREE_BUFFER u0000000000000000 no match [ 1114.368941] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.371290] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.438361] binder: 7798:7810 transaction failed 29189/-22, size 72-24 line 3014 [ 1114.440826] binder_alloc: 7807: binder_alloc_buf, no vma [ 1114.440865] binder: 7807:7811 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.440970] binder: 7807:7811 BC_FREE_BUFFER u0000000000000000 no match [ 1114.441188] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.441478] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.443666] binder_alloc: 7808: binder_alloc_buf, no vma [ 1114.443706] binder: 7808:7813 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.465718] binder: 7808:7813 BC_FREE_BUFFER u0000000020003000 no match [ 1114.478573] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.484070] binder_alloc: 7817: binder_alloc_buf, no vma [ 1114.485489] binder: 7817:7819 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.485739] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.537686] binder_alloc: 7822: binder_alloc_buf, no vma [ 1114.537725] binder: 7822:7823 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1114.537866] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.558891] binder_alloc: 7825: binder_alloc_buf, no vma [ 1114.558930] binder: 7825:7828 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.559021] binder: 7825:7828 BC_FREE_BUFFER u0000000000000000 no match [ 1114.562773] binder_alloc: 7826: binder_alloc_buf, no vma [ 1114.562814] binder: 7826:7829 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.564851] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.564953] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.573892] binder_alloc: 7827: binder_alloc_buf, no vma [ 1114.573930] binder: 7827:7834 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.575216] binder: 7827:7834 BC_FREE_BUFFER u0000000020003000 no match [ 1114.601888] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.631462] binder_alloc: 7839: binder_alloc_buf, no vma [ 1114.631502] binder: 7839:7840 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.631601] binder: 7839:7840 BC_FREE_BUFFER u0000000000000000 no match [ 1114.631766] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.649333] binder_alloc: 7838: binder_alloc_buf, no vma [ 1114.649373] binder: 7838:7844 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.649516] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.693738] binder_alloc: 7843: binder_alloc_buf, no vma [ 1114.693778] binder: 7843:7852 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.694411] binder: 7843:7852 BC_FREE_BUFFER u0000000020003000 no match [ 1114.712204] binder_alloc: 7851: binder_alloc_buf, no vma [ 1114.712242] binder: 7851:7855 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.712442] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.726604] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.757760] binder_alloc: 7856: binder_alloc_buf, no vma [ 1114.757804] binder: 7856:7858 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1114.758012] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.783474] binder_alloc: 7860: binder_alloc_buf, no vma [ 1114.783517] binder: 7860:7864 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.783811] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.784611] binder_alloc: 7863: binder_alloc_buf, no vma [ 1114.784652] binder: 7863:7867 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.784947] binder: 7863:7867 BC_FREE_BUFFER u0000000000000000 no match [ 1114.785039] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.791703] binder_alloc: 7862: binder_alloc_buf, no vma [ 1114.791742] binder: 7862:7868 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.792299] binder: 7862:7868 BC_FREE_BUFFER u0000000020003000 no match [ 1114.821531] binder_alloc: 7869: binder_alloc_buf, no vma [ 1114.821571] binder: 7869:7870 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.821833] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.845441] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.877421] binder_alloc: 7879: binder_alloc_buf, no vma [ 1114.877460] binder: 7879:7883 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.877560] binder: 7879:7883 BC_FREE_BUFFER u0000000000000000 no match [ 1114.877692] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.881903] binder_alloc: 7880: binder_alloc_buf, no vma [ 1114.881943] binder: 7880:7885 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.882681] binder_alloc: 7875: binder_alloc_buf, no vma [ 1114.882717] binder: 7875:7884 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.882859] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.883930] binder: 7880:7885 BC_FREE_BUFFER u0000000020003000 no match [ 1114.908788] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.957449] binder_alloc: 7889: binder_alloc_buf, no vma [ 1114.957488] binder: 7889:7890 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1114.957632] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.988079] binder_alloc: 7896: binder_alloc_buf, no vma [ 1114.988119] binder: 7896:7901 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.988717] binder: 7896:7901 BC_FREE_BUFFER u0000000000000000 no match [ 1114.988986] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.992936] binder_alloc: 7892: binder_alloc_buf, no vma [ 1114.992975] binder: 7892:7897 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.993341] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.995204] binder_alloc: 7894: binder_alloc_buf, no vma [ 1114.995245] binder: 7894:7898 transaction failed 29189/-3, size 72-24 line 3137 [ 1114.997681] binder: 7894:7898 BC_FREE_BUFFER u0000000020003000 no match [ 1115.005612] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.136923] binder_alloc: 7908: binder_alloc_buf, no vma [ 1115.136962] binder: 7908:7915 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.137598] binder: 7908:7915 BC_FREE_BUFFER u0000000020003000 no match [ 1115.143658] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.154754] binder_alloc: 7912: binder_alloc_buf, no vma [ 1115.154796] binder: 7912:7918 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.156352] binder: 7912:7918 BC_FREE_BUFFER u0000000000000000 no match [ 1115.156482] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.182550] binder_alloc: 7913: binder_alloc_buf, no vma [ 1115.182593] binder: 7913:7921 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.185734] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.210879] binder_alloc: 7924: binder_alloc_buf, no vma [ 1115.210919] binder: 7924:7927 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.211025] binder: 7924:7927 BC_FREE_BUFFER u0000000000000000 no match [ 1115.211159] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.216455] binder_alloc: 7920: binder_alloc_buf, no vma [ 1115.216495] binder: 7920:7926 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.217845] binder: 7920:7926 BC_FREE_BUFFER u0000000020003000 no match [ 1115.247304] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.268055] binder_alloc: 7931: binder_alloc_buf, no vma [ 1115.268338] binder: 7931:7933 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.268537] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.313210] binder_alloc: 7938: binder_alloc_buf, no vma [ 1115.313253] binder: 7938:7939 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1115.313397] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.332251] binder_alloc: 7940: binder_alloc_buf, no vma [ 1115.332292] binder: 7940:7944 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.332725] binder: 7940:7944 BC_FREE_BUFFER u0000000020003000 no match [ 1115.341100] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.341663] binder_alloc: 7941: binder_alloc_buf, no vma [ 1115.341703] binder: 7941:7942 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.341796] binder: 7941:7942 BC_FREE_BUFFER u0000000000000000 no match [ 1115.341904] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.383092] binder_alloc: 7947: binder_alloc_buf, no vma [ 1115.383131] binder: 7947:7949 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.383289] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.398800] binder_alloc: 7952: binder_alloc_buf, no vma [ 1115.398846] binder: 7952:7956 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.400123] binder: 7952:7956 BC_FREE_BUFFER u0000000000000000 no match [ 1115.400269] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.418769] binder_alloc: 7953: binder_alloc_buf, no vma [ 1115.418807] binder: 7953:7959 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.429805] binder: 7953:7959 BC_FREE_BUFFER u0000000020003000 no match [ 1115.439931] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.447677] binder_alloc: 7963: binder_alloc_buf, no vma [ 1115.447720] binder: 7963:7965 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.447901] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.486017] binder_alloc: 7964: binder_alloc_buf, no vma [ 1115.486065] binder: 7964:7968 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.486208] binder: 7964:7968 BC_FREE_BUFFER u0000000000000000 no match [ 1115.486419] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.545283] binder_alloc: 7973: binder_alloc_buf, no vma [ 1115.545322] binder: 7973:7974 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1115.545463] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.573257] binder_alloc: 7977: binder_alloc_buf, no vma [ 1115.573297] binder: 7977:7980 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.575218] binder: 7977:7980 BC_FREE_BUFFER u0000000020003000 no match [ 1115.578653] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.579552] binder_alloc: 7978: binder_alloc_buf, no vma [ 1115.579592] binder: 7978:7982 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.590506] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.641060] binder_alloc: 7989: binder_alloc_buf, no vma [ 1115.641101] binder: 7989:7995 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.641422] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.714365] binder_alloc: 7993: binder_alloc_buf, no vma [ 1115.714404] binder: 7993:8000 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.714833] binder: 7993:8000 BC_FREE_BUFFER u0000000020003000 no match [ 1115.726692] binder_alloc: 8001: binder_alloc_buf, no vma [ 1115.726733] binder: 8001:8004 transaction failed 29189/-3, size 72-24 line 3137 [ 1115.726838] binder: 8001:8004 BC_FREE_BUFFER u0000000000000000 no match [ 1115.726960] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.727703] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.089970] binder_alloc: 8009: binder_alloc_buf, no vma [ 1116.090009] binder: 8009:8010 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1116.090213] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.120325] binder_alloc: 8012: binder_alloc_buf, no vma [ 1116.120366] binder: 8012:8016 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.120571] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.126165] binder_alloc: 8017: binder_alloc_buf, no vma [ 1116.126205] binder: 8017:8021 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.127881] binder_alloc: 8011: binder_alloc_buf, no vma [ 1116.127922] binder: 8011:8020 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.128014] binder: 8011:8020 BC_FREE_BUFFER u0000000000000000 no match [ 1116.128146] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.151114] binder: 8017:8021 BC_FREE_BUFFER u0000000020003000 no match [ 1116.155863] binder_alloc: 8022: binder_alloc_buf, no vma [ 1116.155903] binder: 8022:8024 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.156035] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.174585] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.215089] binder_alloc: 8034: binder_alloc_buf, no vma [ 1116.215129] binder: 8034:8037 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.215973] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.220689] binder_alloc: 8031: binder_alloc_buf, no vma [ 1116.220727] binder: 8031:8036 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.220829] binder: 8031:8036 BC_FREE_BUFFER u0000000000000000 no match [ 1116.220949] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.225449] binder_alloc: 8033: binder_alloc_buf, no vma [ 1116.225490] binder: 8033:8038 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.227627] binder: 8033:8038 BC_FREE_BUFFER u0000000020003000 no match [ 1116.252883] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.278623] binder_alloc: 8041: binder_alloc_buf, no vma [ 1116.278666] binder: 8041:8042 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1116.278870] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.316636] binder_alloc: 8046: binder_alloc_buf, no vma [ 1116.316674] binder: 8046:8051 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.316764] binder: 8046:8051 BC_FREE_BUFFER u0000000000000000 no match [ 1116.318410] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.319767] binder_alloc: 8045: binder_alloc_buf, no vma [ 1116.319806] binder: 8045:8049 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.320009] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.322644] binder_alloc: 8047: binder_alloc_buf, no vma [ 1116.322685] binder: 8047:8050 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.324368] binder: 8047:8050 BC_FREE_BUFFER u0000000020003000 no match [ 1116.339833] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.383579] binder_alloc: 8059: binder_alloc_buf, no vma [ 1116.383619] binder: 8059:8061 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.384488] binder: 8059:8061 BC_FREE_BUFFER u0000000020003000 no match [ 1116.394823] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.410477] binder_alloc: 8056: binder_alloc_buf, no vma [ 1116.410517] binder: 8056:8057 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.410664] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.413240] binder_alloc: 8060: binder_alloc_buf, no vma [ 1116.413286] binder: 8060:8067 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.413389] binder: 8060:8067 BC_FREE_BUFFER u0000000000000000 no match [ 1116.413594] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.437583] binder_alloc: 8068: binder_alloc_buf, no vma [ 1116.437623] binder: 8068:8069 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.438770] binder: 8068:8069 BC_FREE_BUFFER u0000000020003000 no match [ 1116.456883] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.497204] binder_alloc: 8073: binder_alloc_buf, no vma [ 1116.497250] binder: 8073:8075 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1116.497392] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.525138] binder_alloc: 8076: binder_alloc_buf, no vma [ 1116.525178] binder: 8076:8083 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.525324] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.526308] binder_alloc: 8081: binder_alloc_buf, no vma [ 1116.526345] binder: 8081:8084 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.526436] binder: 8081:8084 BC_FREE_BUFFER u0000000000000000 no match [ 1116.526540] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.545873] binder_alloc: 8080: binder_alloc_buf, no vma [ 1116.545913] binder: 8080:8085 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.546374] binder: 8080:8085 BC_FREE_BUFFER u0000000020003000 no match [ 1116.550269] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.618874] binder_alloc: 8092: binder_alloc_buf, no vma [ 1116.618914] binder: 8092:8094 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.619386] binder: 8092:8094 BC_FREE_BUFFER u0000000000000000 no match [ 1116.623456] binder_alloc: 8093: binder_alloc_buf, no vma [ 1116.623497] binder: 8093:8095 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.625165] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.625263] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.644309] binder_alloc: 8096: binder_alloc_buf, no vma [ 1116.644351] binder: 8096:8100 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.644806] binder: 8096:8100 BC_FREE_BUFFER u0000000020003000 no match [ 1116.648238] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.737696] binder_alloc: 8107: binder_alloc_buf, no vma [ 1116.737736] binder: 8107:8110 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1116.737878] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.758546] binder_alloc: 8112: binder_alloc_buf, no vma [ 1116.758588] binder: 8112:8113 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.758684] binder: 8112:8113 BC_FREE_BUFFER u0000000000000000 no match [ 1116.758810] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.775326] binder_alloc: 8111: binder_alloc_buf, no vma [ 1116.775464] binder: 8111:8118 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.788055] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.795899] binder_alloc: 8121: binder_alloc_buf, no vma [ 1116.795938] binder: 8121:8123 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.796031] binder: 8121:8123 BC_FREE_BUFFER u0000000000000000 no match [ 1116.796153] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.797993] binder_alloc: 8116: binder_alloc_buf, no vma [ 1116.798033] binder: 8116:8120 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.798490] binder: 8116:8120 BC_FREE_BUFFER u0000000020003000 no match [ 1116.812557] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.815037] binder_alloc: 8127: binder_alloc_buf, no vma [ 1116.815077] binder: 8127:8129 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.815350] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.875112] binder_alloc: 8132: binder_alloc_buf, no vma [ 1116.875152] binder: 8132:8133 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.875589] binder: 8132:8133 BC_FREE_BUFFER u0000000020003000 no match [ 1116.891495] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.899986] binder_alloc: 8136: binder_alloc_buf, no vma [ 1116.900025] binder: 8136:8138 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.905658] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.938241] binder_alloc: 8141: binder_alloc_buf, no vma [ 1116.938284] binder: 8141:8143 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1116.938424] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.964996] binder_alloc: 8147: binder_alloc_buf, no vma [ 1116.965036] binder: 8147:8150 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.965178] binder_alloc: 8148: binder_alloc_buf, no vma [ 1116.965214] binder: 8148:8151 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.965361] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.971579] binder_alloc: 8144: binder_alloc_buf, no vma [ 1116.971618] binder: 8144:8153 transaction failed 29189/-3, size 72-24 line 3137 [ 1116.971741] binder: 8144:8153 BC_FREE_BUFFER u0000000000000000 no match [ 1116.977917] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.978273] binder: 8147:8150 BC_FREE_BUFFER u0000000020003000 no match [ 1116.983981] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.022516] binder_alloc: 8156: binder_alloc_buf, no vma [ 1117.022556] binder: 8156:8159 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.022724] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.034042] binder_alloc: 8157: binder_alloc_buf, no vma [ 1117.034082] binder: 8157:8160 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.044591] binder: 8157:8160 BC_FREE_BUFFER u0000000020003000 no match [ 1117.058484] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.080351] binder_alloc: 8163: binder_alloc_buf, no vma [ 1117.080390] binder: 8163:8167 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.080525] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.086313] binder_alloc: 8166: binder_alloc_buf, no vma [ 1117.086354] binder: 8166:8171 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.086450] binder: 8166:8171 BC_FREE_BUFFER u0000000000000000 no match [ 1117.086648] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.158197] binder_alloc: 8173: binder_alloc_buf, no vma [ 1117.158237] binder: 8173:8174 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1117.161928] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.179090] binder_alloc: 8176: binder_alloc_buf, no vma [ 1117.179129] binder: 8176:8180 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.182038] binder: 8176:8180 BC_FREE_BUFFER u0000000020003000 no match [ 1117.185550] binder_alloc: 8178: binder_alloc_buf, no vma [ 1117.185591] binder: 8178:8182 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.185806] binder: 8178:8182 BC_FREE_BUFFER u0000000000000000 no match [ 1117.185939] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.193450] binder_alloc: 8181: binder_alloc_buf, no vma [ 1117.193489] binder: 8181:8183 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.193616] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.205926] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.293433] binder_alloc: 8187: binder_alloc_buf, no vma [ 1117.293473] binder: 8187:8199 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.293886] binder: 8187:8199 BC_FREE_BUFFER u0000000000000000 no match [ 1117.296570] binder_alloc: 8190: binder_alloc_buf, no vma [ 1117.296610] binder: 8190:8200 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.298474] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.298566] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.299346] binder_alloc: 8194: binder_alloc_buf, no vma [ 1117.299386] binder: 8194:8198 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.299844] binder: 8194:8198 BC_FREE_BUFFER u0000000020003000 no match [ 1117.303825] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.362414] binder_alloc: 8206: binder_alloc_buf, no vma [ 1117.362453] binder: 8206:8207 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1117.362940] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.390265] binder_alloc: 8210: binder_alloc_buf, no vma [ 1117.390306] binder: 8210:8213 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.390413] binder: 8210:8213 BC_FREE_BUFFER u0000000000000000 no match [ 1117.390549] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.406145] binder_alloc: 8212: binder_alloc_buf, no vma [ 1117.406183] binder: 8212:8214 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.406331] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.440380] binder_alloc: 8209: binder_alloc_buf, no vma [ 1117.440420] binder: 8209:8221 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.442400] binder: 8209:8221 BC_FREE_BUFFER u0000000020003000 no match [ 1117.453792] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.486030] binder_alloc: 8224: binder_alloc_buf, no vma [ 1117.486071] binder: 8224:8227 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.486174] binder: 8224:8227 BC_FREE_BUFFER u0000000000000000 no match [ 1117.489610] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.493157] binder_alloc: 8223: binder_alloc_buf, no vma [ 1117.493207] binder: 8223:8226 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.493492] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.527778] binder_alloc: 8234: binder_alloc_buf, no vma [ 1117.527817] binder: 8234:8235 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.529516] binder: 8234:8235 BC_FREE_BUFFER u0000000020003000 no match [ 1117.533372] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.560372] binder_alloc: 8238: binder_alloc_buf, no vma [ 1117.560411] binder: 8238:8239 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1117.564795] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.583680] binder_alloc: 8241: binder_alloc_buf, no vma [ 1117.583719] binder: 8241:8244 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.583858] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.628443] binder_alloc: 8245: binder_alloc_buf, no vma [ 1117.628482] binder: 8245:8253 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.628673] binder: 8245:8253 BC_FREE_BUFFER u0000000000000000 no match [ 1117.628815] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.629237] binder_alloc: 8247: binder_alloc_buf, no vma [ 1117.629275] binder: 8247:8250 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.630964] binder: 8247:8250 BC_FREE_BUFFER u0000000020003000 no match [ 1117.644582] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.689155] binder_alloc: 8257: binder_alloc_buf, no vma [ 1117.689193] binder: 8257:8264 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.689820] binder: 8257:8264 BC_FREE_BUFFER u0000000020003000 no match [ 1117.693790] binder_alloc: 8255: binder_alloc_buf, no vma [ 1117.693830] binder: 8255:8262 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.694086] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.699098] binder_alloc: 8258: binder_alloc_buf, no vma [ 1117.699137] binder: 8258:8263 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.699275] binder: 8258:8263 BC_FREE_BUFFER u0000000000000000 no match [ 1117.699393] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.728634] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.769060] binder_alloc: 8271: binder_alloc_buf, no vma [ 1117.769100] binder: 8271:8272 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1117.769267] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.799430] binder_alloc: 8276: binder_alloc_buf, no vma [ 1117.799469] binder: 8276:8279 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.800462] binder: 8276:8279 BC_FREE_BUFFER u0000000020003000 no match [ 1117.801707] binder_alloc: 8274: binder_alloc_buf, no vma [ 1117.801745] binder: 8274:8280 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.801875] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.804842] binder_alloc: 8275: binder_alloc_buf, no vma [ 1117.804884] binder: 8275:8282 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.805405] binder: 8275:8282 BC_FREE_BUFFER u0000000000000000 no match [ 1117.805554] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.811222] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.887922] binder_alloc: 8291: binder_alloc_buf, no vma [ 1117.887963] binder: 8291:8294 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.888074] binder: 8291:8294 BC_FREE_BUFFER u0000000000000000 no match [ 1117.888230] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.891414] binder_alloc: 8284: binder_alloc_buf, no vma [ 1117.891456] binder: 8284:8298 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.891607] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.892707] binder_alloc: 8292: binder_alloc_buf, no vma [ 1117.892745] binder: 8292:8296 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.893336] binder: 8292:8296 BC_FREE_BUFFER u0000000020003000 no match [ 1117.916161] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.965889] binder_alloc: 8302: binder_alloc_buf, no vma [ 1117.965927] binder: 8302:8304 transaction failed 29189/-3, size 72-24 line 3137 [ 1117.966025] binder: 8302:8304 BC_FREE_BUFFER u0000000000000000 no match [ 1117.966181] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.008863] binder_alloc: 8306: binder_alloc_buf, no vma [ 1118.008903] binder: 8306:8307 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1118.009047] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.038410] binder_alloc: 8312: binder_alloc_buf, no vma [ 1118.038450] binder: 8312:8314 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.039616] binder: 8312:8314 BC_FREE_BUFFER u0000000020003000 no match [ 1118.040014] binder_alloc: 8309: binder_alloc_buf, no vma [ 1118.040053] binder: 8309:8316 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.040889] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.043064] binder_alloc: 8310: binder_alloc_buf, no vma [ 1118.043105] binder: 8310:8315 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.043197] binder: 8310:8315 BC_FREE_BUFFER u0000000000000000 no match [ 1118.043307] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.054324] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.085558] binder_alloc: 8321: binder_alloc_buf, no vma [ 1118.085599] binder: 8321:8322 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.085804] binder: 8321:8322 BC_FREE_BUFFER u0000000000000000 no match [ 1118.086104] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.142147] binder_alloc: 8324: binder_alloc_buf, no vma [ 1118.142188] binder: 8324:8325 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.142343] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.142409] binder_alloc: 8326: binder_alloc_buf, no vma [ 1118.142449] binder: 8326:8334 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.144144] binder: 8326:8334 BC_FREE_BUFFER u0000000020003000 no match [ 1118.147345] binder_alloc: 8333: binder_alloc_buf, no vma [ 1118.147385] binder: 8333:8337 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.147473] binder: 8333:8337 BC_FREE_BUFFER u0000000000000000 no match [ 1118.147588] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.152323] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.173671] binder_alloc: 8338: binder_alloc_buf, no vma [ 1118.173710] binder: 8338:8340 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.202105] binder: 8338:8340 BC_FREE_BUFFER u0000000020003000 no match [ 1118.207069] binder_alloc: 8339: binder_alloc_buf, no vma [ 1118.207118] binder: 8339:8341 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.207392] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.221936] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.292329] binder_alloc: 8353: binder_alloc_buf, no vma [ 1118.292368] binder: 8353:8354 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1118.292525] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.320872] binder_alloc: 8355: binder_alloc_buf, no vma [ 1118.320909] binder: 8355:8362 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.321004] binder: 8355:8362 BC_FREE_BUFFER u0000000000000000 no match [ 1118.321399] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.321693] binder_alloc: 8356: binder_alloc_buf, no vma [ 1118.321732] binder: 8356:8359 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.321849] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.327510] binder_alloc: 8357: binder_alloc_buf, no vma [ 1118.327551] binder: 8357:8360 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.327998] binder: 8357:8360 BC_FREE_BUFFER u0000000020003000 no match [ 1118.336793] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.407218] binder_alloc: 8368: binder_alloc_buf, no vma [ 1118.407260] binder: 8368:8374 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.408299] binder: 8368:8374 BC_FREE_BUFFER u0000000020003000 no match [ 1118.411612] binder_alloc: 8369: binder_alloc_buf, no vma [ 1118.411651] binder: 8369:8375 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.411790] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.430505] binder_alloc: 8372: binder_alloc_buf, no vma [ 1118.430545] binder: 8372:8378 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.430679] binder: 8372:8378 BC_FREE_BUFFER u0000000000000000 no match [ 1118.430814] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.442986] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.506450] binder_alloc: 8386: binder_alloc_buf, no vma [ 1118.506492] binder: 8386:8387 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1118.506758] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.536637] binder_alloc: 8390: binder_alloc_buf, no vma [ 1118.536679] binder: 8390:8393 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.536779] binder: 8390:8393 BC_FREE_BUFFER u0000000000000000 no match [ 1118.537081] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.544356] binder_alloc: 8389: binder_alloc_buf, no vma [ 1118.544395] binder: 8389:8396 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.551101] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.553569] binder_alloc: 8391: binder_alloc_buf, no vma [ 1118.553617] binder: 8391:8394 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.554528] binder: 8391:8394 BC_FREE_BUFFER u0000000020003000 no match [ 1118.558140] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.595436] binder_alloc: 8402: binder_alloc_buf, no vma [ 1118.595474] binder: 8402:8404 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.595566] binder: 8402:8404 BC_FREE_BUFFER u0000000000000000 no match [ 1118.595753] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.600052] binder_alloc: 8403: binder_alloc_buf, no vma [ 1118.600093] binder: 8403:8405 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.603075] binder: 8403:8405 BC_FREE_BUFFER u0000000020003000 no match [ 1118.636297] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.637546] binder_alloc: 8409: binder_alloc_buf, no vma [ 1118.637586] binder: 8409:8410 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.639644] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.675674] binder_alloc: 8415: binder_alloc_buf, no vma [ 1118.675715] binder: 8415:8417 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.675809] binder: 8415:8417 BC_FREE_BUFFER u0000000000000000 no match [ 1118.675942] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.724893] binder_alloc: 8422: binder_alloc_buf, no vma [ 1118.724934] binder: 8422:8423 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1118.725066] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.754230] binder_alloc: 8425: binder_alloc_buf, no vma [ 1118.754269] binder: 8425:8430 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.755234] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.756672] binder_alloc: 8424: binder_alloc_buf, no vma [ 1118.756713] binder: 8424:8431 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.757180] binder: 8424:8431 BC_FREE_BUFFER u0000000020003000 no match [ 1118.760854] binder_alloc: 8427: binder_alloc_buf, no vma [ 1118.760894] binder: 8427:8432 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.763151] binder: 8427:8432 BC_FREE_BUFFER u0000000000000000 no match [ 1118.763280] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.763796] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.839044] binder_alloc: 8440: binder_alloc_buf, no vma [ 1118.839090] binder: 8440:8446 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.841029] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.846501] binder_alloc: 8434: binder_alloc_buf, no vma [ 1118.846543] binder: 8434:8444 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.847155] binder: 8434:8444 BC_FREE_BUFFER u0000000020003000 no match [ 1118.850117] binder_alloc: 8442: binder_alloc_buf, no vma [ 1118.850156] binder: 8442:8447 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.850528] binder: 8442:8447 BC_FREE_BUFFER u0000000000000000 no match [ 1118.850701] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.868589] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.951941] binder_alloc: 8454: binder_alloc_buf, no vma [ 1118.951983] binder: 8454:8457 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1118.954797] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.974347] binder_alloc: 8458: binder_alloc_buf, no vma [ 1118.974386] binder: 8458:8461 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.974671] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.982072] binder_alloc: 8462: binder_alloc_buf, no vma [ 1118.982110] binder: 8462:8464 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.983005] binder: 8462:8464 BC_FREE_BUFFER u0000000020003000 no match [ 1118.998907] binder_alloc: 8460: binder_alloc_buf, no vma [ 1118.998949] binder: 8460:8467 transaction failed 29189/-3, size 72-24 line 3137 [ 1118.999053] binder: 8460:8467 BC_FREE_BUFFER u0000000000000000 no match [ 1118.999274] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.026024] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.036941] binder_alloc: 8469: binder_alloc_buf, no vma [ 1119.036982] binder: 8469:8473 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.037141] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.072313] binder_alloc: 8474: binder_alloc_buf, no vma [ 1119.072352] binder: 8474:8480 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.074975] binder: 8474:8480 BC_FREE_BUFFER u0000000020003000 no match [ 1119.075393] binder_alloc: 8475: binder_alloc_buf, no vma [ 1119.075432] binder: 8475:8481 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.075798] binder: 8475:8481 BC_FREE_BUFFER u0000000000000000 no match [ 1119.075921] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.095400] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.115531] binder_alloc: 8484: binder_alloc_buf, no vma [ 1119.115573] binder: 8484:8486 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.115704] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.139626] binder_alloc: 8488: binder_alloc_buf, no vma [ 1119.139666] binder: 8488:8489 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1119.139805] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.165952] binder_alloc: 8491: binder_alloc_buf, no vma [ 1119.165993] binder: 8491:8494 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.166077] binder: 8491:8494 BC_FREE_BUFFER u0000000000000000 no match [ 1119.166196] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.188864] binder_alloc: 8497: binder_alloc_buf, no vma [ 1119.188902] binder: 8497:8498 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.193557] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.195482] binder_alloc: 8490: binder_alloc_buf, no vma [ 1119.195521] binder: 8490:8495 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.197582] binder: 8490:8495 BC_FREE_BUFFER u0000000020003000 no match [ 1119.219453] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.221176] binder_alloc: 8502: binder_alloc_buf, no vma [ 1119.221217] binder: 8502:8503 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.221369] binder: 8502:8503 BC_FREE_BUFFER u0000000000000000 no match [ 1119.221489] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.255107] binder_alloc: 8510: binder_alloc_buf, no vma [ 1119.255148] binder: 8510:8514 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.255367] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.257814] binder_alloc: 8509: binder_alloc_buf, no vma [ 1119.257856] binder: 8509:8513 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.269733] binder: 8509:8513 BC_FREE_BUFFER u0000000020003000 no match [ 1119.272232] binder_alloc: 8512: binder_alloc_buf, no vma [ 1119.272273] binder: 8512:8516 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.273351] binder: 8512:8516 BC_FREE_BUFFER u0000000000000000 no match [ 1119.273763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.298645] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.337932] binder_alloc: 8521: binder_alloc_buf, no vma [ 1119.337975] binder: 8521:8522 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1119.340229] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.370444] binder_alloc: 8527: binder_alloc_buf, no vma [ 1119.370482] binder: 8527:8531 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.372200] binder: 8527:8531 BC_FREE_BUFFER u0000000020003000 no match [ 1119.376782] binder_alloc: 8523: binder_alloc_buf, no vma [ 1119.376819] binder: 8523:8533 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.378744] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.383993] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.400237] binder_alloc: 8528: binder_alloc_buf, no vma [ 1119.400276] binder: 8528:8532 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.400443] binder: 8528:8532 BC_FREE_BUFFER u0000000000000000 no match [ 1119.400575] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.471923] binder_alloc: 8541: binder_alloc_buf, no vma [ 1119.471964] binder: 8541:8545 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.472269] binder: 8541:8545 BC_FREE_BUFFER u0000000000000000 no match [ 1119.472272] binder_alloc: 8542: binder_alloc_buf, no vma [ 1119.472309] binder: 8542:8548 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.472409] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.472895] binder: 8542:8548 BC_FREE_BUFFER u0000000020003000 no match [ 1119.474655] binder_alloc: 8540: binder_alloc_buf, no vma [ 1119.474696] binder: 8540:8546 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.474839] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.497861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.548547] binder_alloc: 8554: binder_alloc_buf, no vma [ 1119.548588] binder: 8554:8556 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.548794] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.582355] binder_alloc: 8544: binder_alloc_buf, no vma [ 1119.582396] binder: 8544:8559 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1119.582548] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.608474] binder_alloc: 8564: binder_alloc_buf, no vma [ 1119.608521] binder: 8564:8565 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.608620] binder: 8564:8565 BC_FREE_BUFFER u0000000000000000 no match [ 1119.608755] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.610200] binder_alloc: 8563: binder_alloc_buf, no vma [ 1119.610238] binder: 8563:8569 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.611414] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.637105] binder_alloc: 8571: binder_alloc_buf, no vma [ 1119.637147] binder: 8571:8572 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.641783] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.660211] binder: 8560:8568 transaction failed 29189/-22, size 72-24 line 3014 [ 1119.664770] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.717377] binder_alloc: 8581: binder_alloc_buf, no vma [ 1119.717417] binder: 8581:8585 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.717525] binder: 8581:8585 BC_FREE_BUFFER u0000000000000000 no match [ 1119.717647] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.748608] binder_alloc: 8583: binder_alloc_buf, no vma [ 1119.748650] binder: 8583:8587 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.749134] binder: 8583:8587 BC_FREE_BUFFER u0000000020003000 no match [ 1119.758830] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.763229] binder_alloc: 8588: binder_alloc_buf, no vma [ 1119.763269] binder: 8588:8589 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.763559] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.804840] binder_alloc: 8594: binder_alloc_buf, no vma [ 1119.804883] binder: 8594:8595 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1119.805034] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.832680] binder_alloc: 8599: binder_alloc_buf, no vma [ 1119.832703] binder_alloc: 8600: binder_alloc_buf, no vma [ 1119.832723] binder: 8599:8601 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.832740] binder: 8600:8604 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.832838] binder_alloc: 8597: binder_alloc_buf, no vma [ 1119.832904] binder: 8597:8602 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.832920] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.833449] binder: 8597:8602 BC_FREE_BUFFER u0000000000000000 no match [ 1119.833822] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.834917] binder: 8599:8601 BC_FREE_BUFFER u0000000020003000 no match [ 1119.877107] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.911802] binder_alloc: 8609: binder_alloc_buf, no vma [ 1119.911843] binder: 8609:8613 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.912321] binder: 8609:8613 BC_FREE_BUFFER u0000000000000000 no match [ 1119.912455] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.912757] binder_alloc: 8607: binder_alloc_buf, no vma [ 1119.912800] binder: 8607:8610 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.912922] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.920148] binder_alloc: 8612: binder_alloc_buf, no vma [ 1119.920186] binder: 8612:8619 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.925618] binder: 8612:8619 BC_FREE_BUFFER u0000000020003000 no match [ 1119.929148] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.974788] binder_alloc: 8621: binder_alloc_buf, no vma [ 1119.974828] binder: 8621:8624 transaction failed 29189/-3, size 72-24 line 3137 [ 1119.975110] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.001538] binder_alloc: 8626: binder_alloc_buf, no vma [ 1120.001578] binder: 8626:8627 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1120.001718] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.020776] binder_alloc: 8629: binder_alloc_buf, no vma [ 1120.020818] binder: 8629:8630 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.021268] binder: 8629:8630 BC_FREE_BUFFER u0000000020003000 no match [ 1120.024671] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.040187] binder_alloc: 8628: binder_alloc_buf, no vma [ 1120.040228] binder: 8628:8636 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.040774] binder: 8628:8636 BC_FREE_BUFFER u0000000000000000 no match [ 1120.040932] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.045418] binder_alloc: 8633: binder_alloc_buf, no vma [ 1120.045455] binder: 8633:8635 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.050897] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.072439] binder_alloc: 8638: binder_alloc_buf, no vma [ 1120.072478] binder: 8638:8644 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.072942] binder: 8638:8644 BC_FREE_BUFFER u0000000020003000 no match [ 1120.093062] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.112471] binder_alloc: 8642: binder_alloc_buf, no vma [ 1120.112563] binder: 8642:8648 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.116146] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.125723] binder_alloc: 8649: binder_alloc_buf, no vma [ 1120.125766] binder: 8649:8653 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.126230] binder: 8649:8653 BC_FREE_BUFFER u0000000020003000 no match [ 1120.149338] binder_alloc: 8647: binder_alloc_buf, no vma [ 1120.149379] binder: 8647:8654 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.149499] binder: 8647:8654 BC_FREE_BUFFER u0000000000000000 no match [ 1120.149631] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.151821] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.206351] binder_alloc: 8657: binder_alloc_buf, no vma [ 1120.206391] binder: 8657:8658 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1120.206537] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.239749] binder_alloc: 8663: binder_alloc_buf, no vma [ 1120.239790] binder: 8663:8667 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.239808] binder_alloc: 8661: binder_alloc_buf, no vma [ 1120.239991] binder: 8661:8669 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.241573] binder: 8663:8667 BC_FREE_BUFFER u0000000020003000 no match [ 1120.242007] binder: 8661:8669 BC_FREE_BUFFER u0000000000000000 no match [ 1120.242135] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.242521] binder_alloc: 8662: binder_alloc_buf, no vma [ 1120.242559] binder: 8662:8666 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.242825] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.254079] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.312662] binder_alloc: 8673: binder_alloc_buf, no vma [ 1120.312704] binder: 8673:8683 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.314587] binder: 8673:8683 BC_FREE_BUFFER u0000000020003000 no match [ 1120.325484] binder_alloc: 8672: binder_alloc_buf, no vma [ 1120.325522] binder: 8672:8681 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.325700] binder: 8672:8681 BC_FREE_BUFFER u0000000000000000 no match [ 1120.325830] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.343644] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.358433] binder_alloc: 8678: binder_alloc_buf, no vma [ 1120.358483] binder: 8678:8682 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.358646] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.414147] binder_alloc: 8690: binder_alloc_buf, no vma [ 1120.414188] binder: 8690:8691 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1120.418817] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.443594] binder_alloc: 8692: binder_alloc_buf, no vma [ 1120.443637] binder: 8692:8700 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.444263] binder_alloc: 8696: binder_alloc_buf, no vma [ 1120.444302] binder: 8696:8697 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.444403] binder: 8696:8697 BC_FREE_BUFFER u0000000000000000 no match [ 1120.444680] binder_alloc: 8695: binder_alloc_buf, no vma [ 1120.444716] binder: 8695:8701 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.444839] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.445511] binder: 8692:8700 BC_FREE_BUFFER u0000000020003000 no match [ 1120.445916] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.460829] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.505719] binder_alloc: 8708: binder_alloc_buf, no vma [ 1120.505759] binder: 8708:8710 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.506209] binder: 8708:8710 BC_FREE_BUFFER u0000000020003000 no match [ 1120.508808] binder_alloc: 8707: binder_alloc_buf, no vma [ 1120.508849] binder: 8707:8711 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.509001] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.540053] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.541955] binder_alloc: 8714: binder_alloc_buf, no vma [ 1120.541997] binder: 8714:8718 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.542111] binder: 8714:8718 BC_FREE_BUFFER u0000000000000000 no match [ 1120.542226] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.591984] binder_alloc: 8721: binder_alloc_buf, no vma [ 1120.592024] binder: 8721:8722 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1120.593963] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.617568] binder_alloc: 8727: binder_alloc_buf, no vma [ 1120.617608] binder: 8727:8731 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.617955] binder: 8727:8731 BC_FREE_BUFFER u0000000000000000 no match [ 1120.618076] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.618214] binder_alloc: 8724: binder_alloc_buf, no vma [ 1120.618254] binder: 8724:8726 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.618520] binder_alloc: 8723: binder_alloc_buf, no vma [ 1120.618557] binder: 8723:8732 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.618674] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.619016] binder: 8724:8726 BC_FREE_BUFFER u0000000020003000 no match [ 1120.625986] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.689531] binder_alloc: 8735: binder_alloc_buf, no vma [ 1120.689570] binder: 8735:8743 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.692932] binder: 8735:8743 BC_FREE_BUFFER u0000000020003000 no match [ 1120.711622] binder_alloc: 8742: binder_alloc_buf, no vma [ 1120.711667] binder: 8742:8745 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.711799] binder: 8742:8745 BC_FREE_BUFFER u0000000000000000 no match [ 1120.711973] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.712353] binder_alloc: 8741: binder_alloc_buf, no vma [ 1120.712393] binder: 8741:8747 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.712515] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.732558] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.778096] binder_alloc: 8748: binder_alloc_buf, no vma [ 1120.778137] binder: 8748:8754 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.778628] binder: 8748:8754 BC_FREE_BUFFER u0000000020003000 no match [ 1120.785497] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.817661] binder_alloc: 8757: binder_alloc_buf, no vma [ 1120.817699] binder: 8757:8758 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1120.817919] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.846797] binder_alloc: 8763: binder_alloc_buf, no vma [ 1120.846836] binder: 8763:8764 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.848941] binder: 8763:8764 BC_FREE_BUFFER u0000000020003000 no match [ 1120.860187] binder_alloc: 8762: binder_alloc_buf, no vma [ 1120.860220] binder: 8762:8768 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.860355] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.900086] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.900812] binder_alloc: 8772: binder_alloc_buf, no vma [ 1120.900852] binder: 8772:8773 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.900996] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.909045] binder_alloc: 8760: binder_alloc_buf, no vma [ 1120.909084] binder: 8760:8766 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.909176] binder: 8760:8766 BC_FREE_BUFFER u0000000000000000 no match [ 1120.917714] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.932483] binder_alloc: 8775: binder_alloc_buf, no vma [ 1120.932524] binder: 8775:8779 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.932988] binder: 8775:8779 BC_FREE_BUFFER u0000000020003000 no match [ 1120.944782] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.978329] binder_alloc: 8781: binder_alloc_buf, no vma [ 1120.978368] binder: 8781:8786 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.978468] binder: 8781:8786 BC_FREE_BUFFER u0000000000000000 no match [ 1120.978606] binder: undelivered TRANSACTION_ERROR: 29189 [ 1120.987328] binder_alloc: 8785: binder_alloc_buf, no vma [ 1120.987367] binder: 8785:8787 transaction failed 29189/-3, size 72-24 line 3137 [ 1120.994480] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.030504] binder_alloc: 8790: binder_alloc_buf, no vma [ 1121.030543] binder: 8790:8791 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1121.036683] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.056913] binder_alloc: 8793: binder_alloc_buf, no vma [ 1121.056952] binder: 8793:8794 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.057401] binder: 8793:8794 BC_FREE_BUFFER u0000000020003000 no match [ 1121.061946] binder_alloc: 8796: binder_alloc_buf, no vma [ 1121.061987] binder: 8796:8799 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.062081] binder: 8796:8799 BC_FREE_BUFFER u0000000000000000 no match [ 1121.062212] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.063520] binder_alloc: 8797: binder_alloc_buf, no vma [ 1121.063703] binder: 8797:8800 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.063899] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.064367] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.104266] binder_alloc: 8804: binder_alloc_buf, no vma [ 1121.104307] binder: 8804:8806 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.104403] binder: 8804:8806 BC_FREE_BUFFER u0000000000000000 no match [ 1121.104535] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.125062] binder_alloc: 8807: binder_alloc_buf, no vma [ 1121.125102] binder: 8807:8809 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.125248] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.172811] binder_alloc: 8805: binder_alloc_buf, no vma [ 1121.172853] binder: 8805:8817 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.174451] binder: 8805:8817 BC_FREE_BUFFER u0000000020003000 no match [ 1121.182216] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.214802] binder_alloc: 8818: binder_alloc_buf, no vma [ 1121.214841] binder: 8818:8821 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.214931] binder: 8818:8821 BC_FREE_BUFFER u0000000000000000 no match [ 1121.220287] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.264410] binder_alloc: 8824: binder_alloc_buf, no vma [ 1121.264451] binder: 8824:8825 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1121.270385] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.284006] binder_alloc: 8826: binder_alloc_buf, no vma [ 1121.284046] binder: 8826:8830 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.284333] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.289474] binder_alloc: 8827: binder_alloc_buf, no vma [ 1121.289513] binder: 8827:8835 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.291269] binder: 8827:8835 BC_FREE_BUFFER u0000000020003000 no match [ 1121.296243] binder_alloc: 8831: binder_alloc_buf, no vma [ 1121.296286] binder: 8831:8833 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.296494] binder: 8831:8833 BC_FREE_BUFFER u0000000000000000 no match [ 1121.296715] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.342546] binder_alloc: 8838: binder_alloc_buf, no vma [ 1121.342586] binder: 8838:8839 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.342890] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.361530] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.365081] binder_alloc: 8841: binder_alloc_buf, no vma [ 1121.365116] binder: 8841:8842 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.365303] binder: 8841:8842 BC_FREE_BUFFER u0000000000000000 no match [ 1121.365488] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.394333] binder_alloc: 8843: binder_alloc_buf, no vma [ 1121.394373] binder: 8843:8847 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.394812] binder: 8843:8847 BC_FREE_BUFFER u0000000020003000 no match [ 1121.402900] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.424440] binder_alloc: 8853: binder_alloc_buf, no vma [ 1121.424480] binder: 8853:8854 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.424572] binder: 8853:8854 BC_FREE_BUFFER u0000000000000000 no match [ 1121.424720] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.508822] binder_alloc: 8859: binder_alloc_buf, no vma [ 1121.508861] binder: 8859:8860 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1121.508998] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.525920] binder_alloc: 8861: binder_alloc_buf, no vma [ 1121.525963] binder: 8861:8864 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.526096] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.549709] binder_alloc: 8862: binder_alloc_buf, no vma [ 1121.549748] binder: 8862:8871 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.551125] binder: 8862:8871 BC_FREE_BUFFER u0000000020003000 no match [ 1121.553576] binder_alloc: 8867: binder_alloc_buf, no vma [ 1121.553617] binder: 8867:8872 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.553722] binder: 8867:8872 BC_FREE_BUFFER u0000000000000000 no match [ 1121.554218] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.594861] binder_alloc: 8870: binder_alloc_buf, no vma [ 1121.594904] binder: 8870:8873 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.595115] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.598955] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.667602] binder_alloc: 8880: binder_alloc_buf, no vma [ 1121.667643] binder: 8880:8883 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.667740] binder: 8880:8883 BC_FREE_BUFFER u0000000000000000 no match [ 1121.668045] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.678075] binder_alloc: 8886: binder_alloc_buf, no vma [ 1121.678115] binder: 8886:8887 transaction failed 29189/-3, size 72-24 line 3137 [ 1121.678541] binder: 8886:8887 BC_FREE_BUFFER u0000000020003000 no match [ 1121.694447] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.751475] binder_alloc: 8891: binder_alloc_buf, no vma [ 1121.751518] binder: 8891:8894 transaction failed 29189/-3, size 6382171054619695851--1431533170540595410 line 3137 [ 1121.754197] binder: undelivered TRANSACTION_ERROR: 29189 [ 1121.754321] INFO: task init:1770 blocked for more than 140 seconds. [ 1121.754326] Not tainted 4.4.174+ #4 [ 1121.754328] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1121.754349] init D ffff8800977df718 29280 1770 1 0x00000000 [ 1121.754362] ffff8800977df718 ffff8801d43c17c0 36eaf904ef243db2 ffff8801d43c17c0 [ 1121.754371] 0000000000000000 ffff8801d43c2000 ffff8801db71f180 ffff8801db71f1a8 [ 1121.754380] ffff8801db71e898 ffff8801d1d94740 ffff8801d43c17c0 ffffed0012efb001 [ 1121.754382] Call Trace: [ 1121.754400] [] schedule+0x99/0x1d0 [ 1121.754409] [] schedule_preempt_disabled+0x13/0x20 [ 1121.754418] [] mutex_lock_nested+0x3c2/0xb80 [ 1121.754431] [] ? tty_open+0x56a/0xf50 [ 1121.754440] [] ? assoc_array_gc+0x1233/0x12e0 [ 1121.754448] [] ? mutex_trylock+0x500/0x500 [ 1121.754459] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 1121.754466] [] tty_open+0x56a/0xf50 [ 1121.754474] [] ? tty_init_dev+0x420/0x420 [ 1121.754486] [] ? chrdev_open+0xca/0x630 [ 1121.754494] [] ? tty_init_dev+0x420/0x420 [ 1121.754501] [] chrdev_open+0x230/0x630 [ 1121.754508] [] ? cdev_put.part.0+0x50/0x50 [ 1121.754518] [] do_dentry_open+0x38f/0xbd0 [ 1121.754526] [] ? __inode_permission2+0x9e/0x250 [ 1121.754533] [] ? cdev_put.part.0+0x50/0x50 [ 1121.754540] [] vfs_open+0x10b/0x210 [ 1121.754547] [] ? may_open.isra.0+0xe7/0x210 [ 1121.754554] [] path_openat+0x136f/0x4470 [ 1121.754561] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 1121.754569] [] ? may_open.isra.0+0x210/0x210 [ 1121.754580] [] ? trace_hardirqs_on+0x10/0x10 [ 1121.754587] [] do_filp_open+0x1a1/0x270 [ 1121.754594] [] ? user_path_mountpoint_at+0x50/0x50 [ 1121.754603] [] ? __alloc_fd+0x1ea/0x490 [ 1121.754610] [] ? _raw_spin_unlock+0x2d/0x50 [ 1121.754617] [] do_sys_open+0x2f8/0x600 [ 1121.754623] [] ? filp_open+0x70/0x70 [ 1121.754631] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 1121.754638] [] SyS_open+0x2d/0x40 [ 1121.754645] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 1121.754651] 1 lock held by init/1770: [ 1121.754667] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x56a/0xf50 [ 1121.754671] Sending NMI to all CPUs: [ 1121.755978] NMI backtrace for cpu 0 [ 1121.755981] CPU: 0 PID: 8894 Comm: syz-executor.0 Not tainted 4.4.174+ #4 [ 1121.755983] task: ffff8800b8024740 task.stack: ffff8800b2a48000 [ 1121.755986] RIP: 0010:[] [] memcmp+0x69/0xc0 [ 1121.755988] RSP: 0018:ffff8800b2a4f608 EFLAGS: 00000297 [ 1121.755991] RAX: 00000000000000ff RBX: ffff8800b2a4f6ce RCX: 0000000000000006 [ 1121.755994] RDX: 0000000000000000 RSI: ffff8800ba6eead6 RDI: ffff8800b2a4f6c0 [ 1121.755997] RBP: ffff8800b2a4f630 R08: ffff8800b2a4f6a8 R09: 0000000000000000 [ 1121.756001] R10: 000000000075bf20 R11: 0000000000000000 R12: dffffc0000000000 [ 1121.756004] R13: ffff8800b2a4f728 R14: 0000000000000068 R15: ffff8800b2a4f720 [ 1121.756008] FS: 0000000000000000(0000) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 1121.756010] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.756013] CR2: 000000000137ed08 CR3: 0000000002e0a000 CR4: 00000000001606b0 [ 1121.756016] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1121.756018] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1121.756019] Stack: [ 1121.756022] ffff8800b8025000 ffff8800b8025028 0000000041253939 ffff8800ba6eeab0 [ 1121.756025] 0000000000053939 ffff8800b2a4f698 ffffffff81b46d2b 0200000000000001 [ 1121.756027] ffff8800b2a4f6c0 ffff8800b2a4f6a8 ffff88000000000d 0000000000000000 [ 1121.756029] Call Trace: [ 1121.756032] [] depot_save_stack+0x18b/0x5f0 [ 1121.756034] [] kasan_slab_free+0x104/0x190 [ 1121.756037] [] ? save_stack_trace+0x26/0x50 [ 1121.756039] [] ? kasan_slab_free+0xb0/0x190 [ 1121.756041] [] ? kmem_cache_free+0xbe/0x350 [ 1121.756043] [] ? remove_vma+0x122/0x170 [ 1121.756045] [] ? exit_mmap+0x267/0x3a0 [ 1121.756047] [] ? mmput+0xde/0x360 [ 1121.756050] [] ? do_exit+0x7ee/0x2c60 [ 1121.756052] [] ? do_group_exit+0x111/0x300 [ 1121.756055] [] ? get_signal+0x517/0x1570 [ 1121.756057] [] ? do_signal+0x9c/0x1840 [ 1121.756059] [] ? exit_to_usermode_loop+0x127/0x170 [ 1121.756062] [] ? syscall_return_slowpath+0x25b/0x2e0 [ 1121.756064] [] ? int_ret_from_sys_call+0x25/0xa3 [ 1121.756067] [] ? debug_check_no_obj_freed+0x159/0x6e0 [ 1121.756069] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 1121.756072] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 1121.756075] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 1121.756078] [] ? debug_check_no_obj_freed+0x2b9/0x6e0 [ 1121.756081] [] ? debug_object_active_state+0x380/0x380 [ 1121.756084] [] ? kmem_cache_free+0x9e/0x350 [ 1121.756086] [] ? remove_vma+0x122/0x170 [ 1121.756089] [] ? remove_vma+0x122/0x170 [ 1121.756092] [] kmem_cache_free+0xbe/0x350 [ 1121.756094] [] remove_vma+0x122/0x170 [ 1121.756097] [] exit_mmap+0x267/0x3a0 [ 1121.756099] [] ? SyS_remap_file_pages+0x710/0x710 [ 1121.756101] [] ? __might_fault+0x115/0x1d0 [ 1121.756104] [] ? __might_sleep+0x90/0x1a0 [ 1121.756106] [] mmput+0xde/0x360 [ 1121.756108] [] do_exit+0x7ee/0x2c60 [ 1121.756110] [] ? futex_wait_setup+0x350/0x350 [ 1121.756112] [] ? release_task+0x14a0/0x14a0 [ 1121.756115] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1121.756118] [] ? recalc_sigpending+0x74/0xa0 [ 1121.756120] [] ? dequeue_signal+0xc8/0x550 [ 1121.756123] [] ? check_preemption_disabled+0x3c/0x200 [ 1121.756126] [] do_group_exit+0x111/0x300 [ 1121.756128] [] get_signal+0x517/0x1570 [ 1121.756130] [] do_signal+0x9c/0x1840 [ 1121.756133] [] ? exit_robust_list+0x220/0x220 [ 1121.756135] [] ? trace_hardirqs_on+0x10/0x10 [ 1121.756138] [] ? setup_sigcontext+0x780/0x780 [ 1121.756140] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1121.756143] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 1121.756145] [] ? SyS_futex+0x247/0x340 [ 1121.756148] [] ? exit_to_usermode_loop+0xf2/0x170 [ 1121.756151] [] exit_to_usermode_loop+0x127/0x170 [ 1121.756154] [] syscall_return_slowpath+0x25b/0x2e0 [ 1121.756156] [] int_ret_from_sys_call+0x25/0xa3 [ 1121.756164] Code: e8 03 83 e2 07 42 0f b6 04 20 38 d0 7f 04 84 c0 75 57 48 89 f2 48 89 f1 0f b6 03 48 c1 ea 03 83 e1 07 42 0f b6 14 22 38 ca 7f 04 <84> d2 75 22 0f b6 16 29 d [ 1121.756166] NMI backtrace for cpu 1 [ 1121.756169] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 1121.756172] task: ffff8801da6c5f00 task.stack: ffff8800001c8000 [ 1121.756175] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 1121.756178] RSP: 0018:ffff8800001cfc88 EFLAGS: 00000046 [ 1121.756181] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 1121.756184] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 1121.756187] RBP: ffff8800001cfcb8 R08: 0000000000000018 R09: 0000000000000000 [ 1121.756189] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 1121.756192] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 1121.756195] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 1121.756197] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.756200] CR2: 00007fff0d058e68 CR3: 00000000b2ed7000 CR4: 00000000001606b0 [ 1121.756203] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1121.756205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1121.756207] Stack: [ 1121.756210] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 1121.756213] 000000000001b6c0 0000000000000008 ffff8800001cfcd8 ffffffff81092bee [ 1121.756217] 0000000000000008 ffffffff82924260 ffff8800001cfd30 ffffffff81ab8252 [ 1121.756218] Call Trace: [ 1121.756222] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 1121.756224] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 1121.756227] [] ? print_lock+0xa8/0xab [ 1121.756230] [] ? irq_force_complete_move+0x330/0x330 [ 1121.756233] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 1121.756236] [] watchdog.cold+0xd3/0xee [ 1121.756238] [] ? watchdog+0xac/0xa00 [ 1121.756241] [] ? reset_hung_task_detector+0x20/0x20 [ 1121.756243] [] kthread+0x273/0x310 [ 1121.756246] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.756249] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 1121.756251] [] ? finish_task_switch+0x1e1/0x660 [ 1121.756254] [] ? finish_task_switch+0x1b3/0x660 [ 1121.756257] [] ? __schedule+0x7af/0x1ee0 [ 1121.756260] [] ? __schedule+0x7a3/0x1ee0 [ 1121.756263] [] ? __schedule+0x7af/0x1ee0 [ 1121.756266] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.756268] [] ret_from_fork+0x55/0x80 [ 1121.756271] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.756277] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 1121.756488] Kernel panic - not syncing: hung_task: blocked tasks [ 1121.756495] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 1121.756506] 0000000000000000 96a2726f9c534d77 ffff8800001cfc60 ffffffff81aad1a1 [ 1121.756514] ffff8801d43c17c0 ffffffff82872120 dffffc0000000000 0000000000000002 [ 1121.756522] 00000000003fff68 ffff8800001cfd40 ffffffff813a48c2 0000000041b58ab3 [ 1121.756524] Call Trace: [ 1121.756539] [] dump_stack+0xc1/0x120 [ 1121.756553] [] panic+0x1b9/0x37b [ 1121.756561] [] ? add_taint.cold+0x16/0x16 [ 1121.756570] [] ? find_next_bit+0x44/0x50 [ 1121.756580] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 1121.756588] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 1121.756596] [] watchdog.cold+0xe4/0xee [ 1121.756603] [] ? watchdog+0xac/0xa00 [ 1121.756610] [] ? reset_hung_task_detector+0x20/0x20 [ 1121.756620] [] kthread+0x273/0x310 [ 1121.756627] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.756635] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 1121.756644] [] ? finish_task_switch+0x1e1/0x660 [ 1121.756649] [] ? finish_task_switch+0x1b3/0x660 [ 1121.756658] [] ? __schedule+0x7af/0x1ee0 [ 1121.756664] [] ? __schedule+0x7a3/0x1ee0 [ 1121.756670] [] ? __schedule+0x7af/0x1ee0 [ 1121.756677] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.756685] [] ret_from_fork+0x55/0x80 [ 1121.756692] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 1121.757313] Kernel Offset: disabled [ 1134.195237] Rebooting in 86400 seconds..