dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:12 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 635.166391] binder: 6693:6694 ioctl c0306201 20000040 returned -22 13:49:12 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:12 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 635.181094] binder: unexpected work type, 4, not freed 13:49:12 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 635.274407] binder: send failed reply for transaction 15047, target dead 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:12 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:12 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 635.355970] binder: send failed reply for transaction 15052, target dead 13:49:12 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:12 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 635.419659] binder: BINDER_SET_CONTEXT_MGR already set 13:49:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:12 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 635.481769] binder: send failed reply for transaction 15057, target dead 13:49:12 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 635.525739] binder: BINDER_SET_CONTEXT_MGR already set 13:49:12 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:12 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 635.528048] binder: 6742:6746 ioctl c0306201 20000040 returned -22 13:49:12 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 635.528243] binder: undelivered death notification, 0000000000000000 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 635.571425] binder: release 6749:6752 transaction 15062 out, still active ** 8 printk messages dropped ** [ 635.679360] binder: release 6763:6769 transaction 15067 out, still active 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 635.690262] binder: send failed reply for transaction 15067, target dead 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 635.806138] binder: release 6779:6785 transaction 15072 out, still active 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 635.905933] binder: release 6795:6800 transaction 15077 out, still active 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 635.937832] binder: send failed reply for transaction 15077, target dead 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 635.989144] binder: BINDER_SET_CONTEXT_MGR already set 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 636.142121] binder: release 6831:6833 transaction 15086 out, still active 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 636.142149] binder: unexpected work type, 4, not freed 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 636.159264] binder: 6832:6836 unknown command 0 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 636.266621] binder: 6852:6856 ioctl 40046207 0 returned -16 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 636.278034] binder: undelivered death notification, 0000000000000000 13:49:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:13 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:13 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 636.410405] binder: 6873:6878 ioctl 40046207 0 returned -16 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 636.543149] binder: unexpected work type, 4, not freed 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 636.676063] binder: unexpected work type, 4, not freed 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 636.755818] binder: BINDER_SET_CONTEXT_MGR already set 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 636.755831] binder: 6923:6928 ioctl 40046207 0 returned -16 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 636.851255] binder: unexpected work type, 4, not freed 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 636.917033] binder: 6945:6951 ioctl c0306201 20000040 returned -22 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 636.925950] binder: unexpected work type, 4, not freed 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 637.086826] binder: 6968:6976 unknown command 0 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 637.099726] binder: release 6978:6979 transaction 15133 out, still active 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 637.196811] binder: undelivered TRANSACTION_COMPLETE 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 637.258083] binder: 7000:7001 unknown command 0 13:49:14 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:14 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:14 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:14 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 637.368951] binder: unexpected work type, 4, not freed [ 637.368954] binder: undelivered TRANSACTION_COMPLETE 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 637.478437] binder: undelivered TRANSACTION_COMPLETE 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 637.573088] binder: unexpected work type, 4, not freed 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 637.573091] binder: undelivered TRANSACTION_COMPLETE 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 637.674726] binder: unexpected work type, 4, not freed 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 637.737662] binder: 7067:7073 ioctl c0306201 20000040 returned -22 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 4 printk messages dropped ** [ 637.806445] binder: send failed reply for transaction 15165, target dead 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 12 printk messages dropped ** [ 637.972178] binder: 7108:7113 ioctl c0306201 20000040 returned -22 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 638.112672] binder: send failed reply for transaction 15179, target dead 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 638.283803] binder: send failed reply for transaction 15184, target dead 13:49:15 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:15 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:15 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:15 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 638.302902] binder: 7154:7163 ioctl c0306201 20000040 returned -22 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 638.303091] binder: undelivered death notification, 0000000000000000 13:49:16 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 638.424973] binder: 7174:7178 ioctl c0306201 20000040 returned -22 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 638.516458] binder: undelivered TRANSACTION_COMPLETE 13:49:16 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 638.599803] binder: unexpected work type, 4, not freed [ 638.599806] binder: undelivered TRANSACTION_COMPLETE 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:16 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 638.755302] binder: send failed reply for transaction 15204, target dead [ 638.812280] binder: release 7242:7245 transaction 15208 out, still active [ 638.812286] binder: unexpected work type, 4, not freed [ 638.812289] binder: undelivered TRANSACTION_COMPLETE [ 638.846082] binder: BINDER_SET_CONTEXT_MGR already set 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 638.864404] binder: send failed reply for transaction 15208, target dead 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 638.965730] binder: release 7256:7265 transaction 15213 out, still active 13:49:16 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 639.008851] binder: send failed reply for transaction 15213, target dead 13:49:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:16 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:16 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 639.117624] binder: send failed reply for transaction 15218, target dead 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 639.190477] binder: BINDER_SET_CONTEXT_MGR already set 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 639.192275] binder: undelivered death notification, 0000000000000000 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 639.228981] binder: undelivered TRANSACTION_COMPLETE 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 639.346057] binder: undelivered death notification, 0000000000000000 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 639.361904] binder: send failed reply for transaction 15228, target dead 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 639.490689] binder: send failed reply for transaction 15232, target dead [ 639.558924] binder: release 7350:7352 transaction 15237 out, still active 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 639.558930] binder: unexpected work type, 4, not freed 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 639.558933] binder: undelivered TRANSACTION_COMPLETE [ 639.595978] binder: send failed reply for transaction 15237, target dead 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 639.688210] binder: send failed reply for transaction 15242, target dead 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 639.894226] binder: BINDER_SET_CONTEXT_MGR already set 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 639.918252] binder: undelivered TRANSACTION_COMPLETE 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 640.011903] binder: release 7417:7419 transaction 15256 out, still active 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:17 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 640.011912] binder: undelivered TRANSACTION_COMPLETE 13:49:17 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:17 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 640.106256] binder: release 7431:7434 transaction 15261 out, still active 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 640.106265] binder: undelivered TRANSACTION_COMPLETE 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 9 printk messages dropped ** [ 640.267553] binder: send failed reply for transaction 15265, target dead 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 640.362228] binder: 7464:7470 ioctl 40046207 0 returned -16 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 640.362971] binder: 7464:7470 unknown command 0 [ 640.362978] binder: 7464:7470 ioctl c0306201 20000040 returned -22 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 640.515231] binder: 7491:7493 unknown command 0 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 640.515241] binder: 7491:7493 ioctl c0306201 20000040 returned -22 [ 640.515486] binder: undelivered death notification, 0000000000000000 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 640.562489] binder: unexpected work type, 4, not freed [ 640.562492] binder: undelivered TRANSACTION_COMPLETE 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 640.578101] binder: send failed reply for transaction 15280, target dead 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 640.672653] binder: 7512:7514 unknown command 0 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 640.672663] binder: 7512:7514 ioctl c0306201 20000040 returned -22 ** 2 printk messages dropped ** [ 640.757097] binder: unexpected work type, 4, not freed 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 640.858986] binder: unexpected work type, 4, not freed 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 640.858989] binder: undelivered TRANSACTION_COMPLETE ** 1 printk messages dropped ** [ 640.947320] binder: release 7552:7555 transaction 15298 out, still active 13:49:18 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:18 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:18 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 641.035355] binder: release 7568:7571 transaction 15303 out, still active 13:49:18 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:18 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 641.117519] binder: undelivered TRANSACTION_COMPLETE 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 641.190825] binder: 7577:7587 unknown command 0 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 641.352213] binder: 7608:7615 ioctl 40046207 0 returned -16 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 641.354154] binder: 7608:7615 ioctl c0306201 20000040 returned -22 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 641.379744] binder: unexpected work type, 4, not freed 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 641.504609] binder: unexpected work type, 4, not freed [ 641.504612] binder: undelivered TRANSACTION_COMPLETE 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 641.512062] binder: send failed reply for transaction 15322, target dead 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 641.653943] binder: 7653:7658 ioctl c0306201 20000040 returned -22 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 641.654220] binder: undelivered death notification, 0000000000000000 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 641.696123] binder: undelivered TRANSACTION_COMPLETE 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 641.811368] binder: 7678:7683 ioctl c0306201 20000040 returned -22 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 11 printk messages dropped ** [ 641.949936] binder: unexpected work type, 4, not freed 13:49:19 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 642.085405] binder: release 7722:7726 transaction 15349 out, still active 13:49:19 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:19 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:19 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 642.127197] binder: 7727:7730 ioctl c0306201 20000040 returned -22 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 642.254914] binder: 7746:7750 unknown command 0 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 642.254922] binder: 7746:7750 ioctl c0306201 20000040 returned -22 [ 642.255923] binder: undelivered death notification, 0000000000000000 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 642.377693] binder: release 7764:7768 transaction 15363 out, still active 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 642.428441] binder: undelivered death notification, 0000000000000000 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 642.541214] binder: undelivered death notification, 0000000000000000 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 642.560258] binder: release 7794:7797 transaction 15373 out, still active 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 642.582220] binder: send failed reply for transaction 15373, target dead 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 642.665612] binder: undelivered death notification, 0000000000000000 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 642.794392] binder: undelivered death notification, 0000000000000000 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 642.914829] binder: undelivered TRANSACTION_COMPLETE 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 1 printk messages dropped ** [ 642.920815] binder: 7848:7852 ioctl 40046207 0 returned -16 13:49:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:20 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:20 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:20 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 643.022882] binder: BINDER_SET_CONTEXT_MGR already set 13:49:20 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 643.025381] binder: 7865:7867 ioctl c0306201 20000040 returned -22 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 643.134677] binder: 7881:7885 ioctl 40046207 0 returned -16 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 643.151323] binder: undelivered death notification, 0000000000000000 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 643.279275] binder: undelivered death notification, 0000000000000000 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 643.431410] binder: BINDER_SET_CONTEXT_MGR already set 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 643.438886] binder: release 7925:7930 transaction 15416 out, still active 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 12 printk messages dropped ** [ 643.603353] binder: send failed reply for transaction 15420, target dead 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 643.727764] binder: BINDER_SET_CONTEXT_MGR already set 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 643.833751] binder: BINDER_SET_CONTEXT_MGR already set 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 643.898048] binder: unexpected work type, 4, not freed 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 644.014039] binder: unexpected work type, 4, not freed 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:21 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 644.074380] binder: unexpected work type, 4, not freed 13:49:21 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:21 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 644.515507] binder: unexpected work type, 4, not freed 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 644.567469] binder: 8060:8061 unknown command 0 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 644.752061] binder: unexpected work type, 4, not freed 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 644.763402] binder: 8085:8090 ioctl c0306201 20000040 returned -22 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 644.890619] binder: undelivered TRANSACTION_COMPLETE ** 2 printk messages dropped ** [ 644.948552] binder: 8114:8117 ioctl 40046207 0 returned -16 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 644.949590] binder: undelivered death notification, 0000000000000000 ** 5 printk messages dropped ** [ 645.030875] binder: 8124:8134 ioctl 40046207 0 returned -16 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 645.034122] binder: 8124:8134 unknown command 0 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 645.121804] binder: undelivered TRANSACTION_COMPLETE 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 645.177017] binder: 8147:8149 ioctl 40046207 0 returned -16 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 645.306855] binder: 8170:8174 ioctl 40046207 0 returned -16 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 645.308925] binder: undelivered death notification, 0000000000000000 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:22 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 645.456400] binder: 8195:8197 ioctl 40046207 0 returned -16 13:49:22 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:22 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 645.552783] binder: release 8213:8215 transaction 15495 out, still active 13:49:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 645.675802] binder: release 8233:8235 transaction 15500 out, still active 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 645.758522] binder: release 8243:8245 transaction 15505 out, still active 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 645.864983] binder: BINDER_SET_CONTEXT_MGR already set 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 645.934308] binder: release 8270:8273 transaction 15514 out, still active 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 646.043599] binder: release 8284:8290 transaction 15519 out, still active [ 646.043604] binder: unexpected work type, 4, not freed 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 646.159351] binder: release 8303:8307 transaction 15523 out, still active 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 646.222295] binder: 8308:8312 unknown command 0 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 646.300629] binder: send failed reply for transaction 15528, target dead 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 646.400205] binder: release 8334:8341 transaction 15533 out, still active 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:23 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 646.531280] binder: 8357:8358 unknown command 0 13:49:23 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 646.601937] binder: release 8365:8368 transaction 15542 out, still active 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 646.692636] binder: undelivered death notification, 0000000000000000 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 646.817432] binder: unexpected work type, 4, not freed 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 646.817435] binder: undelivered TRANSACTION_COMPLETE 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 646.861444] binder: BINDER_SET_CONTEXT_MGR already set [ 646.861454] binder: 8405:8407 ioctl 40046207 0 returned -16 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 646.862195] binder: 8405:8407 unknown command 0 [ 646.862203] binder: 8405:8407 ioctl c0306201 20000040 returned -22 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 647.018429] binder: unexpected work type, 4, not freed [ 647.018431] binder: undelivered TRANSACTION_COMPLETE 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 647.037961] binder: 8431:8437 ioctl 40046207 0 returned -16 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 647.163939] binder: BINDER_SET_CONTEXT_MGR already set 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 647.176312] binder: unexpected work type, 4, not freed 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 647.308399] binder: unexpected work type, 4, not freed 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 647.328441] binder: undelivered death notification, 0000000000000000 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 647.436766] binder: unexpected work type, 4, not freed 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:24 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:24 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:24 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 647.519622] binder: undelivered TRANSACTION_COMPLETE 13:49:24 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:24 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 647.631440] binder: 8529:8535 ioctl c0306201 20000040 returned -22 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 647.782562] binder: 8550:8554 unknown command 0 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 647.807392] binder: unexpected work type, 4, not freed 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 647.807395] binder: undelivered TRANSACTION_COMPLETE 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 647.919723] binder: 8573:8577 ioctl c0306201 20000040 returned -22 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 647.923930] binder: undelivered TRANSACTION_COMPLETE 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 648.034406] binder: undelivered death notification, 0000000000000000 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 648.130400] binder: 8608:8612 unknown command 0 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 648.213246] binder: unexpected work type, 4, not freed 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 648.213249] binder: undelivered TRANSACTION_COMPLETE 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 648.312101] binder: unexpected work type, 4, not freed 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 648.312104] binder: undelivered TRANSACTION_COMPLETE 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 648.343255] binder: undelivered death notification, 0000000000000000 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:25 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 648.464391] binder: BINDER_SET_CONTEXT_MGR already set 13:49:25 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:25 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 648.614618] binder: send failed reply for transaction 15632, target dead 13:49:25 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 648.639877] binder: BINDER_SET_CONTEXT_MGR already set 13:49:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 648.640942] binder: 8684:8693 ioctl c0306201 20000040 returned -22 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 648.772721] binder: 8709:8713 unknown command 0 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 648.802022] binder: unexpected work type, 4, not freed 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 648.892057] binder: 8729:8732 ioctl c0306201 20000040 returned -22 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 648.937470] binder: unexpected work type, 4, not freed 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 649.024828] binder: 8748:8750 ioctl c0306201 20000040 returned -22 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 649.181026] binder: BINDER_SET_CONTEXT_MGR already set 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 649.324705] binder: send failed reply for transaction 15661, target dead 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 649.337314] binder: 8794:8796 unknown command 0 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 649.379398] binder: release 8803:8809 transaction 15666 out, still active 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 649.480481] binder: 8815:8822 unknown command 0 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 649.540705] binder: unexpected work type, 4, not freed 13:49:26 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:26 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:26 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:26 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 9 printk messages dropped ** [ 649.650488] binder: undelivered TRANSACTION_COMPLETE 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 649.674434] binder: send failed reply for transaction 15676, target dead 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:27 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 649.790030] binder: send failed reply for transaction 15681, target dead 13:49:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:27 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 649.830149] binder: 8873:8877 ioctl c0306201 20000040 returned -22 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:27 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 13 printk messages dropped ** [ 650.041932] binder: send failed reply for transaction 15691, target dead [ 650.081536] binder: BINDER_SET_CONTEXT_MGR already set [ 650.081546] binder: 8908:8910 ioctl 40046207 0 returned -16 [ 650.082500] binder: 8908:8910 unknown command 0 [ 650.082508] binder: 8908:8910 ioctl c0306201 20000040 returned -22 [ 650.082705] binder: undelivered death notification, 0000000000000000 [ 650.108307] binder: release 8918:8922 transaction 15696 out, still active [ 650.108312] binder: unexpected work type, 4, not freed [ 650.108315] binder: undelivered TRANSACTION_COMPLETE [ 650.155436] binder: send failed reply for transaction 15696, target dead [ 650.233376] binder: BINDER_SET_CONTEXT_MGR already set [ 650.233466] binder: 8938:8943 ioctl 40046207 0 returned -16 [ 650.235060] binder: 8938:8943 unknown command 0 [ 650.235074] binder: 8938:8943 ioctl c0306201 20000040 returned -22 [ 650.235876] binder: undelivered death notification, 0000000000000000 [ 650.259884] binder: release 8937:8942 transaction 15701 out, still active [ 650.259890] binder: unexpected work type, 4, not freed [ 650.259893] binder: undelivered TRANSACTION_COMPLETE [ 650.282644] binder: send failed reply for transaction 15701, target dead [ 650.338714] binder: BINDER_SET_CONTEXT_MGR already set [ 650.338723] binder: 8953:8957 ioctl 40046207 0 returned -16 [ 650.340004] binder: 8953:8957 unknown command 0 [ 650.340013] binder: 8953:8957 ioctl c0306201 20000040 returned -22 [ 650.340207] binder: undelivered death notification, 0000000000000000 [ 650.374242] binder: release 8956:8959 transaction 15706 out, still active [ 650.374247] binder: unexpected work type, 4, not freed [ 650.374250] binder: undelivered TRANSACTION_COMPLETE [ 650.394013] binder: send failed reply for transaction 15706, target dead 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 650.437840] binder: release 8975:8980 transaction 15710 out, still active [ 650.437847] binder: unexpected work type, 4, not freed [ 650.437850] binder: undelivered TRANSACTION_COMPLETE [ 650.484344] binder: BINDER_SET_CONTEXT_MGR already set 13:49:27 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 650.484354] binder: 8977:8981 ioctl 40046207 0 returned -16 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 650.491200] binder: send failed reply for transaction 15710, target dead 13:49:27 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 650.508035] binder: 8977:8981 unknown command 0 13:49:27 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:27 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:27 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 650.508045] binder: 8977:8981 ioctl c0306201 20000040 returned -22 13:49:27 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 650.508267] binder: undelivered death notification, 0000000000000000 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 650.537727] binder: release 8988:8994 transaction 15715 out, still active [ 650.537732] binder: unexpected work type, 4, not freed 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 650.537735] binder: undelivered TRANSACTION_COMPLETE 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 650.652730] binder: 8997:9007 ioctl c0306201 20000040 returned -22 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 4 printk messages dropped ** [ 650.683161] binder: send failed reply for transaction 15720, target dead 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 650.767039] binder: BINDER_SET_CONTEXT_MGR already set 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 650.796845] binder: send failed reply for transaction 15724, target dead 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 650.894297] binder: send failed reply for transaction 15729, target dead 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 650.898672] binder: 9047:9049 unknown command 0 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 651.006318] binder: send failed reply for transaction 15734, target dead 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 651.053109] binder: release 9074:9076 transaction 15738 out, still active 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 651.095701] binder: send failed reply for transaction 15738, target dead 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 651.163662] binder: BINDER_SET_CONTEXT_MGR already set 13:49:28 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 651.183927] binder: undelivered death notification, 0000000000000000 13:49:28 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:28 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 651.332716] binder: send failed reply for transaction 15748, target dead 13:49:28 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 651.424876] binder: BINDER_SET_CONTEXT_MGR already set 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 651.520097] binder: undelivered TRANSACTION_COMPLETE 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 651.539558] binder: send failed reply for transaction 15758, target dead 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 651.715105] binder: BINDER_SET_CONTEXT_MGR already set [ 651.716854] binder: 9178:9180 ioctl 40046207 0 returned -16 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 651.719342] binder: 9178:9180 ioctl c0306201 20000040 returned -22 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 651.807076] binder: unexpected work type, 4, not freed ** 6 printk messages dropped ** [ 651.835009] binder: undelivered death notification, 0000000000000000 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 651.920113] binder: send failed reply for transaction 15773, target dead 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 651.984605] binder: undelivered TRANSACTION_COMPLETE [ 652.040312] binder: send failed reply for transaction 15778, target dead 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 652.111472] binder: send failed reply for transaction 15782, target dead [ 652.208620] binder: BINDER_SET_CONTEXT_MGR already set [ 652.208632] binder: 9250:9258 ioctl 40046207 0 returned -16 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 652.209934] binder: 9250:9258 unknown command 0 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 1 printk messages dropped ** [ 652.210298] binder: undelivered death notification, 0000000000000000 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 652.253609] binder: send failed reply for transaction 15787, target dead 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:29 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 652.373982] binder: send failed reply for transaction 15792, target dead 13:49:29 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:29 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:29 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:29 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 652.514437] binder: 9307:9313 ioctl c0306201 20000040 returned -22 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 652.514730] binder: undelivered death notification, 0000000000000000 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 652.633728] binder: undelivered death notification, 0000000000000000 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 652.680743] binder: undelivered TRANSACTION_COMPLETE 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 652.797572] binder: undelivered TRANSACTION_COMPLETE 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 652.873021] binder: BINDER_SET_CONTEXT_MGR already set 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 652.874186] binder: undelivered death notification, 0000000000000000 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 653.007480] binder: BINDER_SET_CONTEXT_MGR already set 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 653.007492] binder: 9393:9398 ioctl 40046207 0 returned -16 ** 4 printk messages dropped ** [ 653.097283] binder: release 9404:9409 transaction 15825 out, still active 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 653.148666] binder: BINDER_SET_CONTEXT_MGR already set [ 653.148677] binder: 9413:9423 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 653.149592] binder: 9413:9423 ioctl c0306201 20000040 returned -22 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 653.201729] binder: send failed reply for transaction 15830, target dead 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 653.277559] binder: send failed reply for transaction 15834, target dead 13:49:30 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:30 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:30 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:30 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 653.405796] binder: BINDER_SET_CONTEXT_MGR already set [ 653.405806] binder: 9459:9464 ioctl 40046207 0 returned -16 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 653.415994] binder: release 9457:9463 transaction 15844 out, still active 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 653.523918] binder: BINDER_SET_CONTEXT_MGR already set 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 653.565292] binder: send failed reply for transaction 15849, target dead 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 653.718226] binder: BINDER_SET_CONTEXT_MGR already set 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 653.767126] binder: send failed reply for transaction 15858, target dead 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 653.819831] binder: release 9517:9519 transaction 15862 out, still active [ 653.819836] binder: unexpected work type, 4, not freed 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 653.942018] binder: unexpected work type, 4, not freed [ 653.942020] binder: undelivered TRANSACTION_COMPLETE [ 653.960205] binder: send failed reply for transaction 15867, target dead 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 654.033638] binder: release 9548:9551 transaction 15871 out, still active 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 654.033643] binder: unexpected work type, 4, not freed 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 654.033646] binder: undelivered TRANSACTION_COMPLETE [ 654.036944] binder: BINDER_SET_CONTEXT_MGR already set 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 654.037983] binder: 9540:9544 ioctl c0306201 20000040 returned -22 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 654.153120] binder: 9566:9572 ioctl 40046207 0 returned -16 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 654.165555] binder: unexpected work type, 4, not freed 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 654.245863] binder: unexpected work type, 4, not freed 13:49:31 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 654.245866] binder: undelivered TRANSACTION_COMPLETE 13:49:31 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:31 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:31 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 654.439076] binder: release 9616:9618 transaction 15889 out, still active 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 654.439081] binder: unexpected work type, 4, not freed [ 654.439084] binder: undelivered TRANSACTION_COMPLETE [ 654.467387] binder: send failed reply for transaction 15889, target dead 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 654.529795] binder: release 9627:9632 transaction 15894 out, still active 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 654.636898] binder: release 9645:9649 transaction 15898 out, still active 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 654.733289] binder: release 9664:9672 transaction 15903 out, still active 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 654.829269] binder: release 9678:9683 transaction 15907 out, still active 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 654.868861] binder: send failed reply for transaction 15907, target dead 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 654.929269] binder: release 9695:9702 transaction 15912 out, still active 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 655.022447] binder: send failed reply for transaction 15917, target dead 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 655.112514] binder: undelivered death notification, 0000000000000000 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:32 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 655.145262] binder: send failed reply for transaction 15921, target dead ** 2 printk messages dropped ** [ 655.206321] binder: undelivered TRANSACTION_COMPLETE 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 655.239321] binder: send failed reply for transaction 15926, target dead ** 3 printk messages dropped ** [ 655.498344] binder: BINDER_SET_CONTEXT_MGR already set [ 655.498353] binder: 9771:9774 ioctl 40046207 0 returned -16 [ 655.500775] binder: 9771:9774 unknown command 0 13:49:32 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 655.500784] binder: 9771:9774 ioctl c0306201 20000040 returned -22 13:49:32 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:32 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:32 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 655.781224] binder: unexpected work type, 4, not freed ** 3 printk messages dropped ** [ 655.782033] binder: undelivered death notification, 0000000000000000 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 655.816180] binder: send failed reply for transaction 15936, target dead ** 3 printk messages dropped ** [ 655.899147] binder: 9804:9810 ioctl c0306201 20000040 returned -22 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 655.987647] binder: 9821:9822 unknown command 0 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 655.987657] binder: 9821:9822 ioctl c0306201 20000040 returned -22 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 656.122933] binder: send failed reply for transaction 15951, target dead 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 656.123161] binder: BINDER_SET_CONTEXT_MGR already set 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 656.227301] binder: undelivered TRANSACTION_COMPLETE 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 656.238222] binder: undelivered death notification, 0000000000000000 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 656.355446] binder: 9880:9884 unknown command 0 ** 3 printk messages dropped ** [ 656.440949] binder: unexpected work type, 4, not freed 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 656.440952] binder: undelivered TRANSACTION_COMPLETE 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 656.481572] binder: 9899:9901 unknown command 0 [ 656.481582] binder: 9899:9901 ioctl c0306201 20000040 returned -22 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 656.547149] binder: unexpected work type, 4, not freed 13:49:33 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 656.577420] binder: 9920:9925 ioctl c0306201 20000040 returned -22 13:49:33 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:33 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 656.577726] binder: undelivered death notification, 0000000000000000 13:49:33 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:33 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 656.689265] binder: 9934:9941 unknown command 0 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 656.790738] binder: 9953:9960 unknown command 0 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 656.790748] binder: 9953:9960 ioctl c0306201 20000040 returned -22 [ 656.790969] binder: undelivered death notification, 0000000000000000 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 1 printk messages dropped ** [ 656.846982] binder: unexpected work type, 4, not freed 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 656.898785] binder: 9968:9971 ioctl c0306201 20000040 returned -22 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 657.052242] binder: unexpected work type, 4, not freed 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 4 printk messages dropped ** [ 657.059315] binder: undelivered death notification, 0000000000000000 ** 3 printk messages dropped ** [ 657.148585] binder: BINDER_SET_CONTEXT_MGR already set 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 657.151206] binder: undelivered death notification, 0000000000000000 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 657.269181] binder: send failed reply for transaction 16005, target dead 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 657.285975] binder: undelivered death notification, 0000000000000000 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 657.327337] binder: undelivered TRANSACTION_COMPLETE ** 5 printk messages dropped ** [ 657.402116] binder: undelivered death notification, 0000000000000000 13:49:34 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:34 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:34 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:34 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:34 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 657.422927] binder: undelivered TRANSACTION_COMPLETE ** 8 printk messages dropped ** [ 657.549915] binder: undelivered TRANSACTION_COMPLETE [ 657.569619] binder: send failed reply for transaction 16020, target dead 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 657.612858] binder: release 10087:10091 transaction 16024 out, still active 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 657.612864] binder: unexpected work type, 4, not freed 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 657.655926] binder: undelivered death notification, 0000000000000000 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 657.720232] binder: undelivered TRANSACTION_COMPLETE 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 657.752137] binder: undelivered death notification, 0000000000000000 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 657.840479] binder: undelivered TRANSACTION_ERROR: 29189 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 657.999087] binder: BINDER_SET_CONTEXT_MGR already set ** 2 printk messages dropped ** [ 658.004084] binder: 10147:10150 ioctl c0306201 20000040 returned -22 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 658.028391] binder: undelivered TRANSACTION_COMPLETE 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 658.154697] binder: BINDER_SET_CONTEXT_MGR already set 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 658.187839] binder: 10167:10174 unknown command 0 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 658.314770] binder: 10192:10199 unknown command 0 13:49:35 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:35 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 658.314780] binder: 10192:10199 ioctl c0306201 20000040 returned -22 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:35 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 658.426993] binder: 10212:10216 ioctl c0306201 20000040 returned -22 13:49:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:35 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 658.481900] binder: undelivered TRANSACTION_COMPLETE ** 1 printk messages dropped ** [ 658.565206] binder: BINDER_SET_CONTEXT_MGR already set 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 658.590556] binder: undelivered TRANSACTION_COMPLETE 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 658.713104] binder: 10263:10267 ioctl c0306201 20000040 returned -22 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 658.713330] binder: undelivered death notification, 0000000000000000 ** 4 printk messages dropped ** [ 658.838523] binder: 10281:10283 ioctl c0306201 20000040 returned -22 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 658.892809] binder: undelivered TRANSACTION_COMPLETE 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 658.990926] binder: undelivered TRANSACTION_COMPLETE 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 659.003596] binder: send failed reply for transaction 16083, target dead 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 659.052498] binder: 10315:10319 unknown command 0 ** 4 printk messages dropped ** [ 659.087325] binder: undelivered TRANSACTION_COMPLETE 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 659.213527] binder: 10339:10343 ioctl c0306201 20000040 returned -22 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 659.213773] binder: undelivered death notification, 0000000000000000 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 659.382739] binder: 10363:10369 ioctl c0306201 20000040 returned -22 ** 3 printk messages dropped ** [ 659.480401] binder: undelivered TRANSACTION_COMPLETE 13:49:36 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:36 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:36 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:36 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 659.532246] binder: 10378:10397 ioctl 40046207 0 returned -16 13:49:36 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:36 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 659.567459] binder: undelivered TRANSACTION_COMPLETE [ 659.604925] binder: send failed reply for transaction 16107, target dead 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 659.662842] binder: release 10412:10415 transaction 16111 out, still active ** 5 printk messages dropped ** [ 659.725905] binder: 10411:10418 unknown command 0 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 659.725914] binder: 10411:10418 ioctl c0306201 20000040 returned -22 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 659.822827] binder: 10433:10437 unknown command 0 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 659.898655] binder: 10448:10449 ioctl 40046207 0 returned -16 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 659.967523] binder: unexpected work type, 4, not freed 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 660.048690] binder: 10471:10476 ioctl 40046207 0 returned -16 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 660.057134] binder: 10471:10476 unknown command 0 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 4 printk messages dropped ** [ 660.109856] binder: undelivered TRANSACTION_COMPLETE 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 660.183249] binder: undelivered TRANSACTION_COMPLETE 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 660.196766] binder: undelivered death notification, 0000000000000000 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 660.317413] binder: undelivered TRANSACTION_COMPLETE 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 660.420667] binder: unexpected work type, 4, not freed [ 660.420670] binder: undelivered TRANSACTION_COMPLETE 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:37 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 660.444645] binder: send failed reply for transaction 16145, target dead 13:49:37 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:37 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:37 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 660.559836] binder: undelivered TRANSACTION_COMPLETE 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 660.628203] binder: 10554:10556 ioctl 40046207 0 returned -16 [ 660.631706] binder: 10554:10556 unknown command 0 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 660.638185] binder: unexpected work type, 4, not freed 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 660.731502] binder: undelivered TRANSACTION_COMPLETE 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 660.824870] binder: release 10595:10598 transaction 16164 out, still active 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 660.915945] binder: 10602:10606 unknown command 0 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 661.033959] binder: 10626:10628 ioctl 40046207 0 returned -16 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 661.040208] binder: 10626:10628 unknown command 0 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:38 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 661.162178] binder: 10642:10650 unknown command 0 [ 661.162187] binder: 10642:10650 ioctl c0306201 20000040 returned -22 13:49:38 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:38 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.162384] binder: undelivered death notification, 0000000000000000 [ 661.163718] binder: release 10647:10652 transaction 16179 out, still active [ 661.163722] binder: unexpected work type, 4, not freed [ 661.163725] binder: undelivered TRANSACTION_COMPLETE [ 661.197993] binder: send failed reply for transaction 16179, target dead [ 661.293650] binder: BINDER_SET_CONTEXT_MGR already set [ 661.293661] binder: 10667:10672 ioctl 40046207 0 returned -16 [ 661.294719] binder: 10667:10672 unknown command 0 [ 661.294728] binder: 10667:10672 ioctl c0306201 20000040 returned -22 [ 661.294976] binder: undelivered death notification, 0000000000000000 [ 661.313761] binder: release 10671:10674 transaction 16184 out, still active [ 661.313767] binder: unexpected work type, 4, not freed [ 661.313770] binder: undelivered TRANSACTION_COMPLETE [ 661.318146] binder: send failed reply for transaction 16184, target dead [ 661.396509] binder: release 10683:10687 transaction 16188 out, still active 13:49:38 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 661.396515] binder: unexpected work type, 4, not freed [ 661.396518] binder: undelivered TRANSACTION_COMPLETE [ 661.412222] binder: send failed reply for transaction 16188, target dead [ 661.429115] binder: BINDER_SET_CONTEXT_MGR already set [ 661.429125] binder: 10682:10688 ioctl 40046207 0 returned -16 [ 661.431644] binder: 10682:10688 unknown command 0 [ 661.431653] binder: 10682:10688 ioctl c0306201 20000040 returned -22 13:49:38 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.431900] binder: undelivered death notification, 0000000000000000 [ 661.520841] binder: release 10704:10707 transaction 16193 out, still active [ 661.520847] binder: unexpected work type, 4, not freed 13:49:38 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 661.520850] binder: undelivered TRANSACTION_COMPLETE [ 661.554683] binder: send failed reply for transaction 16193, target dead [ 661.586958] binder: BINDER_SET_CONTEXT_MGR already set [ 661.586968] binder: 10713:10717 ioctl 40046207 0 returned -16 [ 661.587947] binder: 10713:10717 unknown command 0 [ 661.587955] binder: 10713:10717 ioctl c0306201 20000040 returned -22 [ 661.588145] binder: undelivered death notification, 0000000000000000 [ 661.612975] binder: release 10723:10724 transaction 16198 out, still active 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 661.613139] binder: unexpected work type, 4, not freed [ 661.613142] binder: undelivered TRANSACTION_COMPLETE [ 661.630222] binder: send failed reply for transaction 16198, target dead 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 661.671791] binder: BINDER_SET_CONTEXT_MGR already set 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.671801] binder: 10728:10733 ioctl 40046207 0 returned -16 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.677670] binder: 10728:10733 unknown command 0 [ 661.677679] binder: 10728:10733 ioctl c0306201 20000040 returned -22 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.678008] binder: undelivered death notification, 0000000000000000 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 661.699683] binder: release 10734:10739 transaction 16203 out, still active [ 661.699688] binder: unexpected work type, 4, not freed 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 661.699691] binder: undelivered TRANSACTION_COMPLETE [ 661.719871] binder: send failed reply for transaction 16203, target dead 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.792847] binder: BINDER_SET_CONTEXT_MGR already set [ 661.792856] binder: 10746:10747 ioctl 40046207 0 returned -16 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.796187] binder: 10746:10747 unknown command 0 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 661.796197] binder: 10746:10747 ioctl c0306201 20000040 returned -22 ** 3 printk messages dropped ** [ 661.826844] binder: undelivered TRANSACTION_COMPLETE 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 661.907429] binder: 10767:10769 unknown command 0 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:39 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:39 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 661.907438] binder: 10767:10769 ioctl c0306201 20000040 returned -22 ** 6 printk messages dropped ** [ 662.015494] binder: 10784:10790 ioctl 40046207 0 returned -16 13:49:39 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:39 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 662.017514] binder: 10784:10790 unknown command 0 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 662.017523] binder: 10784:10790 ioctl c0306201 20000040 returned -22 [ 662.017795] binder: undelivered death notification, 0000000000000000 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 662.112104] binder: unexpected work type, 4, not freed 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 662.112107] binder: undelivered TRANSACTION_COMPLETE 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 662.167060] binder: 10808:10809 unknown command 0 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 662.316442] binder: unexpected work type, 4, not freed 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 662.327803] binder: undelivered death notification, 0000000000000000 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 662.436442] binder: undelivered death notification, 0000000000000000 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 662.533716] binder: undelivered TRANSACTION_COMPLETE 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 662.565063] binder: send failed reply for transaction 16241, target dead 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 662.685094] binder: 10888:10892 ioctl 40046207 0 returned -16 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 662.726477] binder: release 10893:10896 transaction 16251 out, still active 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 662.813010] binder: unexpected work type, 4, not freed 13:49:40 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 662.851169] binder: 10913:10915 ioctl 40046207 0 returned -16 13:49:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:40 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:40 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:40 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 662.958539] binder: release 10924:10934 transaction 16260 out, still active 13:49:40 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 663.081971] binder: release 10947:10951 transaction 16265 out, still active 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 663.225821] binder: release 10967:10974 transaction 16270 out, still active 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 663.295561] binder: BINDER_SET_CONTEXT_MGR already set 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 663.353319] binder: unexpected work type, 4, not freed 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 663.381874] binder: undelivered death notification, 0000000000000000 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 663.384643] binder: send failed reply for transaction 16274, target dead 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 663.484843] binder: undelivered TRANSACTION_COMPLETE 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 663.596235] binder: unexpected work type, 4, not freed 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 663.670070] binder: 11040:11044 ioctl c0306201 20000040 returned -22 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 663.721209] binder: undelivered TRANSACTION_COMPLETE 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 663.888972] binder: 11072:11082 ioctl c0306201 20000040 returned -22 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:41 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 664.042276] binder: 11104:11107 unknown command 0 13:49:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:41 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:41 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 664.042286] binder: 11104:11107 ioctl c0306201 20000040 returned -22 13:49:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 664.042470] binder: undelivered death notification, 0000000000000000 ** 7 printk messages dropped ** [ 664.177446] binder: 11121:11133 ioctl c0306201 20000040 returned -22 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 664.177704] binder: undelivered death notification, 0000000000000000 [ 664.188030] binder: release 11126:11134 transaction 16308 out, still active [ 664.188036] binder: unexpected work type, 4, not freed 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 664.188039] binder: undelivered TRANSACTION_COMPLETE 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 664.299844] binder: 11143:11147 ioctl c0306201 20000040 returned -22 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 664.300141] binder: undelivered death notification, 0000000000000000 ** 2 printk messages dropped ** [ 664.394981] binder: unexpected work type, 4, not freed 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 664.464951] binder: 11167:11172 ioctl c0306201 20000040 returned -22 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 664.465653] binder: undelivered death notification, 0000000000000000 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 664.627028] binder: send failed reply for transaction 16326, target dead 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 664.634646] binder: BINDER_SET_CONTEXT_MGR already set 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 1 printk messages dropped ** [ 664.636123] binder: 11190:11202 unknown command 0 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 2 printk messages dropped ** [ 664.695318] binder: release 11211:11216 transaction 16331 out, still active 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 664.759881] binder: 11219:11225 ioctl c0306201 20000040 returned -22 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 4 printk messages dropped ** [ 664.859954] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 664.864910] binder: undelivered death notification, 0000000000000000 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:42 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:42 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 664.868480] binder: send failed reply for transaction 16336, target dead 13:49:42 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:42 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 7 printk messages dropped ** [ 665.064003] binder: 11264:11266 ioctl c0306201 20000040 returned -22 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 665.064242] binder: undelivered death notification, 0000000000000000 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 665.181830] binder: unexpected work type, 4, not freed 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 665.184493] binder: undelivered death notification, 0000000000000000 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 665.331963] binder: 11312:11314 ioctl c0306201 20000040 returned -22 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 665.412018] binder: unexpected work type, 4, not freed 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 665.497747] binder: 11331:11333 ioctl c0306201 20000040 returned -22 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 665.520578] binder: undelivered TRANSACTION_COMPLETE 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 665.661129] binder: 11357:11361 ioctl c0306201 20000040 returned -22 [ 665.661381] binder: undelivered death notification, 0000000000000000 [ 665.762959] binder: release 11369:11377 transaction 16374 out, still active 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 665.824271] binder: 11381:11386 ioctl c0306201 20000040 returned -22 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 665.965035] binder: BINDER_SET_CONTEXT_MGR already set 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 665.968714] binder: 11404:11407 ioctl c0306201 20000040 returned -22 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 666.089189] binder: release 11422:11427 transaction 16388 out, still active 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:43 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 666.116554] binder: BINDER_SET_CONTEXT_MGR already set 13:49:43 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:43 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 666.126870] binder: undelivered death notification, 0000000000000000 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 666.391441] binder: BINDER_SET_CONTEXT_MGR already set 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 666.560017] binder: BINDER_SET_CONTEXT_MGR already set 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 666.573771] binder: undelivered death notification, 0000000000000000 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 666.587606] binder: release 11484:11492 transaction 16407 out, still active 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 666.870209] binder: BINDER_SET_CONTEXT_MGR already set 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 667.013765] binder: BINDER_SET_CONTEXT_MGR already set 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 667.019610] binder: undelivered death notification, 0000000000000000 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 667.217518] binder: BINDER_SET_CONTEXT_MGR already set 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 667.218615] binder: 11542:11543 ioctl c0306201 20000040 returned -22 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 667.348964] binder: 11563:11564 ioctl c0306201 20000040 returned -22 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:44 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 4 printk messages dropped ** [ 667.467363] binder: BINDER_SET_CONTEXT_MGR already set [ 667.467373] binder: 11580:11583 ioctl 40046207 0 returned -16 ** 3 printk messages dropped ** [ 667.473066] binder: send failed reply for transaction 16431, target dead 13:49:44 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:44 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:44 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 667.567291] binder: send failed reply for transaction 16436, target dead 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 667.627916] binder: undelivered death notification, 0000000000000000 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 3 printk messages dropped ** [ 667.765439] binder: send failed reply for transaction 16445, target dead 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 667.776323] binder: BINDER_SET_CONTEXT_MGR already set 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 667.781394] binder: undelivered death notification, 0000000000000000 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 667.843007] binder: send failed reply for transaction 16450, target dead 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 667.943724] binder: send failed reply for transaction 16455, target dead 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 668.027452] binder: BINDER_SET_CONTEXT_MGR already set 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 668.036807] binder: send failed reply for transaction 16459, target dead 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 668.187553] binder: send failed reply for transaction 16464, target dead 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 668.336270] binder: 11712:11717 unknown command 0 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 668.336531] binder: undelivered death notification, 0000000000000000 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 668.481557] binder: unexpected work type, 4, not freed 13:49:45 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:45 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:45 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:45 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 668.595936] binder: release 11757:11763 transaction 16484 out, still active ** 4 printk messages dropped ** [ 668.599726] binder: undelivered death notification, 0000000000000000 13:49:45 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 668.857710] binder: release 11798:11804 transaction 16493 out, still active 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 668.857886] binder: 11801:11805 unknown command 0 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 669.029497] binder: 11822:11827 ioctl 40046207 0 returned -16 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 669.067960] binder: undelivered TRANSACTION_COMPLETE 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 669.140536] binder: undelivered TRANSACTION_COMPLETE 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 669.152641] binder: 11848:11853 unknown command 0 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 669.231619] binder: undelivered TRANSACTION_COMPLETE 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 669.308145] binder: 11876:11881 ioctl 40046207 0 returned -16 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 669.362892] binder: send failed reply for transaction 16516, target dead 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 669.429521] binder: 11898:11903 unknown command 0 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 669.436035] binder: undelivered death notification, 0000000000000000 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:46 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:46 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 669.597914] binder: 11918:11924 unknown command 0 13:49:46 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:46 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:46 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 669.739758] binder: 11939:11947 unknown command 0 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 669.739768] binder: 11939:11947 ioctl c0306201 20000040 returned -22 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 669.846565] binder: undelivered TRANSACTION_COMPLETE [ 669.850199] binder: send failed reply for transaction 16539, target dead 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 669.920767] binder: undelivered TRANSACTION_COMPLETE ** 3 printk messages dropped ** [ 670.029340] binder: release 11993:11995 transaction 16549 out, still active 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) [ 670.029345] binder: unexpected work type, 4, not freed 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 9 printk messages dropped ** [ 670.168018] binder: BINDER_SET_CONTEXT_MGR already set 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 670.170669] binder: 12009:12011 ioctl c0306201 20000040 returned -22 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 670.201307] binder: undelivered TRANSACTION_COMPLETE 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 670.226722] binder: send failed reply for transaction 16558, target dead 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 6 printk messages dropped ** [ 670.316549] binder: unexpected work type, 4, not freed 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 670.430142] binder: release 12053:12057 transaction 16567 out, still active 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 670.487573] binder: 12058:12063 ioctl c0306201 20000040 returned -22 ** 2 printk messages dropped ** [ 670.506443] binder: unexpected work type, 4, not freed 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 670.506446] binder: undelivered TRANSACTION_COMPLETE 13:49:47 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:47 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:47 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:47 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 670.650289] binder: 12085:12091 ioctl c0306201 20000040 returned -22 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 670.650561] binder: undelivered death notification, 0000000000000000 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 670.827964] binder: 12114:12120 unknown command 0 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 670.827975] binder: 12114:12120 ioctl c0306201 20000040 returned -22 ** 2 printk messages dropped ** [ 670.844554] binder: unexpected work type, 4, not freed 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 670.928041] binder: BINDER_SET_CONTEXT_MGR already set 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 671.038341] binder: unexpected work type, 4, not freed 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 671.040285] binder: 12152:12159 ioctl c0306201 20000040 returned -22 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 671.208381] binder: send failed reply for transaction 16600, target dead 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 671.222934] binder: 12182:12184 ioctl c0306201 20000040 returned -22 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 8 printk messages dropped ** [ 671.348144] binder: 12203:12207 ioctl c0306201 20000040 returned -22 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 671.412955] binder: unexpected work type, 4, not freed 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 671.466757] binder: 12218:12230 ioctl c0306201 20000040 returned -22 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:48 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:48 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 671.496544] binder: undelivered TRANSACTION_COMPLETE 13:49:48 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:48 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:48 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 671.620669] binder: unexpected work type, 4, not freed 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 671.694767] binder: unexpected work type, 4, not freed 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 671.703972] binder: undelivered death notification, 0000000000000000 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 671.800850] binder: BINDER_SET_CONTEXT_MGR already set 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 6 printk messages dropped ** [ 671.903251] binder: undelivered TRANSACTION_COMPLETE ** 4 printk messages dropped ** [ 671.923754] binder: undelivered death notification, 0000000000000000 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 3 printk messages dropped ** [ 672.026980] binder: 12322:12326 unknown command 0 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 672.158267] binder: undelivered TRANSACTION_COMPLETE 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 7 printk messages dropped ** [ 672.242104] binder: 12363:12366 ioctl 40046207 0 returned -16 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 8 printk messages dropped ** [ 672.338866] binder: unexpected work type, 4, not freed 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 672.338869] binder: undelivered TRANSACTION_COMPLETE 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 672.417833] binder: undelivered TRANSACTION_COMPLETE 13:49:49 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:49 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:49 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:49 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 672.448296] binder: send failed reply for transaction 16659, target dead ** 1 printk messages dropped ** [ 672.516793] binder: 12398:12400 ioctl 40046207 0 returned -16 13:49:49 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:49 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 5 printk messages dropped ** [ 672.540284] binder: undelivered TRANSACTION_COMPLETE 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 672.641096] binder: 12428:12436 ioctl 40046207 0 returned -16 ** 4 printk messages dropped ** [ 672.657105] binder: unexpected work type, 4, not freed [ 672.657108] binder: undelivered TRANSACTION_COMPLETE 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) [ 672.699361] binder: send failed reply for transaction 16669, target dead 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 672.778059] binder: 12452:12454 unknown command 0 ** 1 printk messages dropped ** [ 672.778344] binder: undelivered death notification, 0000000000000000 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 672.792935] binder: send failed reply for transaction 16674, target dead 13:49:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 672.880483] binder: release 12471:12475 transaction 16678 out, still active 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 4 printk messages dropped ** [ 672.899706] binder: 12470:12479 unknown command 0 ** 1 printk messages dropped ** [ 672.899912] binder: undelivered death notification, 0000000000000000 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 1 printk messages dropped ** [ 672.949029] binder: release 12484:12486 transaction 16683 out, still active 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) ** 5 printk messages dropped ** [ 673.078643] binder: release 12499:12502 transaction 16688 out, still active 13:49:50 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 673.179920] binder: release 12518:12524 transaction 16693 out, still active 13:49:50 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 2 printk messages dropped ** [ 673.189058] binder: send failed reply for transaction 16693, target dead 13:49:50 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:50 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) 13:49:50 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) ** 5 printk messages dropped ** [ 673.262623] binder: 12530:12535 unknown command 0 ** 2 printk messages dropped ** [ 673.296923] binder: send failed reply for transaction 16697, target dead 13:49:51 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:51 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 673.369134] binder: release 12547:12554 transaction 16702 out, still active 13:49:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:51 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 7 printk messages dropped ** [ 673.423791] binder: undelivered death notification, 0000000000000000 13:49:51 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:51 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:51 executing program 5: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 673.450309] binder: release 12560:12566 transaction 16707 out, still active 13:49:51 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) write$cgroup_int(r0, &(0x7f0000000180)=0x3f, 0x12) 13:49:51 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 13:49:51 executing program 2: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000001180)="11dca5055e0bcfec7be070") r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3bd, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 673.572321] binder: BINDER_SET_CONTEXT_MGR already set 13:49:51 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 13:49:51 executing program 4: r0 = socket$inet(0x2, 0x200000002, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) r1 = dup2(r0, r0) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ** 8 printk messages dropped ** [ 673.698496] binder: release 12597:12601 transaction 16716 out, still active ** 160 printk messages dropped ** [ 675.804502] binder: unexpected work type, 4, not freed [ 675.804505] binder: undelivered TRANSACTION_COMPLETE [ 675.829969] binder: send failed reply for transaction 16812, target dead [ 675.907614] binder: BINDER_SET_CONTEXT_MGR already set [ 675.907626] binder: 12933:12940 ioctl 40046207 0 returned -16 [ 675.909495] binder: 12933:12940 unknown command 0 [ 675.909504] binder: 12933:12940 ioctl c0306201 20000040 returned -22 [ 675.909700] binder: undelivered death notification, 0000000000000000 [ 675.926255] binder: release 12942:12945 transaction 16817 out, still active [ 675.926260] binder: unexpected work type, 4, not freed [ 675.926263] binder: undelivered TRANSACTION_COMPLETE [ 675.973579] binder: send failed reply for transaction 16817, target dead [ 676.040082] binder: BINDER_SET_CONTEXT_MGR already set [ 676.040091] binder: 12954:12963 ioctl 40046207 0 returned -16 [ 676.045352] binder: 12954:12963 unknown command 0 [ 676.045361] binder: 12954:12963 ioctl c0306201 20000040 returned -22 [ 676.045554] binder: undelivered death notification, 0000000000000000 [ 676.062898] binder: release 12957:12964 transaction 16822 out, still active [ 676.062904] binder: unexpected work type, 4, not freed [ 676.062907] binder: undelivered TRANSACTION_COMPLETE [ 676.093474] binder: send failed reply for transaction 16822, target dead [ 676.192621] binder: BINDER_SET_CONTEXT_MGR already set [ 676.192638] binder: 12980:12985 ioctl 40046207 0 returned -16 [ 676.193559] binder: release 12979:12983 transaction 16826 out, still active [ 676.193564] binder: unexpected work type, 4, not freed [ 676.193567] binder: undelivered TRANSACTION_COMPLETE [ 676.195715] binder: 12980:12985 unknown command 0 [ 676.195723] binder: 12980:12985 ioctl c0306201 20000040 returned -22 [ 676.197293] binder: undelivered death notification, 0000000000000000 [ 676.207843] binder: send failed reply for transaction 16826, target dead [ 676.282072] binder: release 13000:13001 transaction 16831 out, still active [ 676.282077] binder: unexpected work type, 4, not freed [ 676.282080] binder: undelivered TRANSACTION_COMPLETE [ 676.301969] binder: send failed reply for transaction 16831, target dead [ 676.345972] binder: BINDER_SET_CONTEXT_MGR already set [ 676.345984] binder: 13014:13017 ioctl 40046207 0 returned -16 [ 676.357644] binder: 13014:13017 unknown command 0 [ 676.357654] binder: 13014:13017 ioctl c0306201 20000040 returned -22 [ 676.357892] binder: undelivered death notification, 0000000000000000 [ 676.381573] binder: release 13016:13020 transaction 16836 out, still active [ 676.381578] binder: unexpected work type, 4, not freed [ 676.381581] binder: undelivered TRANSACTION_COMPLETE [ 676.413430] binder: send failed reply for transaction 16836, target dead [ 676.462325] binder: release 13030:13034 transaction 16840 out, still active [ 676.462331] binder: unexpected work type, 4, not freed [ 676.462334] binder: undelivered TRANSACTION_COMPLETE [ 676.471836] binder: BINDER_SET_CONTEXT_MGR already set [ 676.471845] binder: 13031:13036 ioctl 40046207 0 returned -16 [ 676.487134] binder: 13031:13036 unknown command 0 [ 676.487145] binder: 13031:13036 ioctl c0306201 20000040 returned -22 [ 676.487437] binder: undelivered death notification, 0000000000000000 [ 676.505719] binder: send failed reply for transaction 16840, target dead [ 676.580309] binder: release 13050:13054 transaction 16845 out, still active [ 676.580315] binder: unexpected work type, 4, not freed [ 676.580318] binder: undelivered TRANSACTION_COMPLETE [ 676.622962] binder: send failed reply for transaction 16845, target dead [ 676.633187] binder: BINDER_SET_CONTEXT_MGR already set [ 676.633196] binder: 13055:13060 ioctl 40046207 0 returned -16 [ 676.634120] binder: 13055:13060 unknown command 0 [ 676.634127] binder: 13055:13060 ioctl c0306201 20000040 returned -22 [ 676.634811] binder: undelivered death notification, 0000000000000000 [ 676.754839] binder: BINDER_SET_CONTEXT_MGR already set [ 676.754849] binder: 13083:13085 ioctl 40046207 0 returned -16 [ 676.757516] binder: 13083:13085 unknown command 0 [ 676.757525] binder: 13083:13085 ioctl c0306201 20000040 returned -22 [ 676.757768] binder: undelivered death notification, 0000000000000000 [ 676.758965] binder: release 13075:13080 transaction 16851 out, still active [ 676.758969] binder: unexpected work type, 4, not freed [ 676.758972] binder: undelivered TRANSACTION_COMPLETE [ 676.762921] binder: send failed reply for transaction 16851, target dead [ 676.842080] binder: release 13093:13099 transaction 16855 out, still active [ 676.842085] binder: unexpected work type, 4, not freed [ 676.842088] binder: undelivered TRANSACTION_COMPLETE [ 676.857893] binder: BINDER_SET_CONTEXT_MGR already set [ 676.857903] binder: 13096:13101 ioctl 40046207 0 returned -16 [ 676.860568] binder: 13096:13101 unknown command 0 [ 676.860578] binder: 13096:13101 ioctl c0306201 20000040 returned -22 [ 676.860851] binder: undelivered death notification, 0000000000000000 [ 676.870649] binder: send failed reply for transaction 16855, target dead [ 676.953975] binder: release 13109:13115 transaction 16860 out, still active [ 676.953981] binder: unexpected work type, 4, not freed [ 676.953983] binder: undelivered TRANSACTION_COMPLETE [ 676.984410] binder: send failed reply for transaction 16860, target dead [ 677.024391] binder: BINDER_SET_CONTEXT_MGR already set [ 677.024401] binder: 13122:13125 ioctl 40046207 0 returned -16 [ 677.050235] binder: 13122:13125 unknown command 0 [ 677.050245] binder: 13122:13125 ioctl c0306201 20000040 returned -22 [ 677.050597] binder: undelivered death notification, 0000000000000000 [ 677.072279] binder: release 13127:13135 transaction 16865 out, still active [ 677.072285] binder: unexpected work type, 4, not freed [ 677.072287] binder: undelivered TRANSACTION_COMPLETE [ 677.107184] binder: send failed reply for transaction 16865, target dead [ 677.154753] binder: release 13145:13148 transaction 16869 out, still active [ 677.154760] binder: unexpected work type, 4, not freed [ 677.154762] binder: undelivered TRANSACTION_COMPLETE [ 677.211416] binder: send failed reply for transaction 16869, target dead [ 677.242015] binder: BINDER_SET_CONTEXT_MGR already set [ 677.242025] binder: 13152:13158 ioctl 40046207 0 returned -16 [ 677.242852] binder: 13152:13158 unknown command 0 [ 677.242861] binder: 13152:13158 ioctl c0306201 20000040 returned -22 [ 677.243051] binder: undelivered death notification, 0000000000000000 [ 677.261423] binder: release 13165:13169 transaction 16874 out, still active [ 677.261429] binder: unexpected work type, 4, not freed [ 677.261432] binder: undelivered TRANSACTION_COMPLETE [ 677.288031] binder: send failed reply for transaction 16874, target dead [ 677.350695] binder: release 13175:13179 transaction 16878 out, still active [ 677.350700] binder: unexpected work type, 4, not freed [ 677.350703] binder: undelivered TRANSACTION_COMPLETE [ 677.377760] binder: send failed reply for transaction 16878, target dead [ 677.382068] binder: BINDER_SET_CONTEXT_MGR already set [ 677.382078] binder: 13180:13185 ioctl 40046207 0 returned -16 [ 677.382902] binder: 13180:13185 unknown command 0 [ 677.382911] binder: 13180:13185 ioctl c0306201 20000040 returned -22 [ 677.383308] binder: undelivered death notification, 0000000000000000 [ 677.429042] binder: release 13190:13193 transaction 16883 out, still active [ 677.429048] binder: unexpected work type, 4, not freed [ 677.429051] binder: undelivered TRANSACTION_COMPLETE [ 677.443584] binder: send failed reply for transaction 16883, target dead [ 677.513632] binder: release 13206:13210 transaction 16887 out, still active [ 677.513637] binder: unexpected work type, 4, not freed [ 677.513640] binder: undelivered TRANSACTION_COMPLETE [ 677.517955] binder: BINDER_SET_CONTEXT_MGR already set [ 677.517967] binder: 13203:13207 ioctl 40046207 0 returned -16 [ 677.527004] binder: 13203:13207 unknown command 0 [ 677.527013] binder: 13203:13207 ioctl c0306201 20000040 returned -22 [ 677.527279] binder: undelivered death notification, 0000000000000000 [ 677.556543] binder: send failed reply for transaction 16887, target dead [ 677.590206] binder: BINDER_SET_CONTEXT_MGR already set [ 677.590217] binder: 13218:13220 ioctl 40046207 0 returned -16 [ 677.594324] binder: 13218:13220 unknown command 0 [ 677.594333] binder: 13218:13220 ioctl c0306201 20000040 returned -22 [ 677.594608] binder: undelivered death notification, 0000000000000000 [ 678.008732] binder: send failed reply for transaction 16893 to 13232:13233 [ 678.008932] binder: undelivered TRANSACTION_COMPLETE [ 678.008948] binder: undelivered TRANSACTION_ERROR: 29189 [ 678.037410] binder: BINDER_SET_CONTEXT_MGR already set [ 678.037420] binder: 13236:13240 ioctl 40046207 0 returned -16 [ 678.038579] binder: 13236:13240 unknown command 0 [ 678.038587] binder: 13236:13240 ioctl c0306201 20000040 returned -22 [ 678.038784] binder: undelivered death notification, 0000000000000000 [ 678.063425] binder: release 13238:13246 transaction 16898 out, still active [ 678.063431] binder: unexpected work type, 4, not freed [ 678.063434] binder: undelivered TRANSACTION_COMPLETE [ 678.090490] binder: send failed reply for transaction 16898, target dead [ 678.162120] binder: BINDER_SET_CONTEXT_MGR already set [ 678.162130] binder: 13250:13260 ioctl 40046207 0 returned -16 [ 678.170604] binder: release 13256:13259 transaction 16903 out, still active [ 678.170610] binder: unexpected work type, 4, not freed [ 678.170613] binder: undelivered TRANSACTION_COMPLETE [ 678.171000] binder: 13250:13260 unknown command 0 [ 678.171009] binder: 13250:13260 ioctl c0306201 20000040 returned -22 [ 678.171198] binder: undelivered death notification, 0000000000000000 [ 678.201938] binder: send failed reply for transaction 16903, target dead [ 678.272022] binder: BINDER_SET_CONTEXT_MGR already set [ 678.272031] binder: 13271:13277 ioctl 40046207 0 returned -16 [ 678.272790] binder: release 13272:13275 transaction 16907 out, still active [ 678.272795] binder: unexpected work type, 4, not freed [ 678.272798] binder: undelivered TRANSACTION_COMPLETE [ 678.276485] binder: 13271:13277 unknown command 0 [ 678.276494] binder: 13271:13277 ioctl c0306201 20000040 returned -22 [ 678.277412] binder: undelivered death notification, 0000000000000000 [ 678.305041] binder: send failed reply for transaction 16907, target dead [ 678.386678] binder: release 13289:13292 transaction 16912 out, still active [ 678.386684] binder: unexpected work type, 4, not freed [ 678.386687] binder: undelivered TRANSACTION_COMPLETE [ 678.391323] binder: send failed reply for transaction 16912, target dead [ 678.405865] binder: BINDER_SET_CONTEXT_MGR already set [ 678.405877] binder: 13290:13295 ioctl 40046207 0 returned -16 [ 678.417756] binder: 13290:13295 unknown command 0 [ 678.417769] binder: 13290:13295 ioctl c0306201 20000040 returned -22 [ 678.419287] binder: undelivered death notification, 0000000000000000 [ 678.448603] binder: release 13298:13303 transaction 16917 out, still active [ 678.448608] binder: unexpected work type, 4, not freed [ 678.448611] binder: undelivered TRANSACTION_COMPLETE [ 678.470481] binder: send failed reply for transaction 16917, target dead [ 678.537818] binder: BINDER_SET_CONTEXT_MGR already set [ 678.537827] binder: 13313:13316 ioctl 40046207 0 returned -16 [ 678.545898] binder: 13313:13316 unknown command 0 [ 678.545908] binder: 13313:13316 ioctl c0306201 20000040 returned -22 [ 678.546137] binder: undelivered death notification, 0000000000000000 [ 678.573200] binder: release 13315:13324 transaction 16922 out, still active [ 678.573206] binder: unexpected work type, 4, not freed [ 678.573209] binder: undelivered TRANSACTION_COMPLETE [ 678.609992] binder: send failed reply for transaction 16922, target dead [ 678.698188] binder: BINDER_SET_CONTEXT_MGR already set [ 678.698197] binder: 13334:13337 ioctl 40046207 0 returned -16 [ 678.699239] binder: 13334:13337 unknown command 0 [ 678.699247] binder: 13334:13337 ioctl c0306201 20000040 returned -22 [ 678.699589] binder: undelivered death notification, 0000000000000000 [ 678.729611] binder: release 13344:13349 transaction 16927 out, still active [ 678.729617] binder: unexpected work type, 4, not freed [ 678.729620] binder: undelivered TRANSACTION_COMPLETE [ 678.733424] binder: send failed reply for transaction 16927, target dead [ 678.851337] binder: release 13363:13368 transaction 16931 out, still active [ 678.851343] binder: unexpected work type, 4, not freed [ 678.851345] binder: undelivered TRANSACTION_COMPLETE [ 678.863460] binder: BINDER_SET_CONTEXT_MGR already set [ 678.863470] binder: 13365:13371 ioctl 40046207 0 returned -16 [ 678.869068] binder: 13365:13371 unknown command 0 [ 678.869078] binder: 13365:13371 ioctl c0306201 20000040 returned -22 [ 678.869325] binder: undelivered death notification, 0000000000000000 [ 678.888138] binder: send failed reply for transaction 16931, target dead [ 678.991424] binder: release 13382:13388 transaction 16936 out, still active [ 678.991429] binder: unexpected work type, 4, not freed [ 678.991436] binder: undelivered TRANSACTION_COMPLETE [ 679.013751] binder: send failed reply for transaction 16936, target dead [ 679.023495] binder: BINDER_SET_CONTEXT_MGR already set [ 679.023509] binder: 13390:13392 ioctl 40046207 0 returned -16 [ 679.024419] binder: 13390:13392 unknown command 0 [ 679.024427] binder: 13390:13392 ioctl c0306201 20000040 returned -22 [ 679.024618] binder: undelivered death notification, 0000000000000000 [ 679.078676] binder: release 13397:13399 transaction 16941 out, still active [ 679.078682] binder: unexpected work type, 4, not freed [ 679.078685] binder: undelivered TRANSACTION_COMPLETE [ 679.089933] binder: send failed reply for transaction 16941, target dead [ 679.124791] binder: BINDER_SET_CONTEXT_MGR already set [ 679.124800] binder: 13408:13410 ioctl 40046207 0 returned -16 [ 679.128449] binder: 13408:13410 unknown command 0 [ 679.128458] binder: 13408:13410 ioctl c0306201 20000040 returned -22 [ 679.129949] binder: undelivered death notification, 0000000000000000 [ 679.216585] binder: release 13417:13419 transaction 16946 out, still active [ 679.216592] binder: unexpected work type, 4, not freed [ 679.216595] binder: undelivered TRANSACTION_COMPLETE [ 679.217137] binder: BINDER_SET_CONTEXT_MGR already set [ 679.217146] binder: 13421:13423 ioctl 40046207 0 returned -16 [ 679.218013] binder: 13421:13423 unknown command 0 [ 679.218022] binder: 13421:13423 ioctl c0306201 20000040 returned -22 [ 679.218212] binder: undelivered death notification, 0000000000000000 [ 679.232467] binder: send failed reply for transaction 16946, target dead [ 679.266422] binder: release 13431:13433 transaction 16951 out, still active [ 679.266428] binder: unexpected work type, 4, not freed [ 679.266431] binder: undelivered TRANSACTION_COMPLETE [ 679.289089] binder: send failed reply for transaction 16951, target dead [ 679.361458] binder: BINDER_SET_CONTEXT_MGR already set [ 679.361468] binder: 13438:13451 ioctl 40046207 0 returned -16 [ 679.363924] binder: 13438:13451 unknown command 0 [ 679.363934] binder: 13438:13451 ioctl c0306201 20000040 returned -22 [ 679.364200] binder: undelivered death notification, 0000000000000000 [ 679.388891] binder: release 13448:13454 transaction 16956 out, still active [ 679.388897] binder: unexpected work type, 4, not freed [ 679.388900] binder: undelivered TRANSACTION_COMPLETE [ 679.430839] binder: send failed reply for transaction 16956, target dead [ 679.489039] binder: BINDER_SET_CONTEXT_MGR already set [ 679.489049] binder: 13461:13469 ioctl 40046207 0 returned -16 [ 679.490457] binder: 13461:13469 unknown command 0 [ 679.490465] binder: 13461:13469 ioctl c0306201 20000040 returned -22 [ 679.491008] binder: undelivered death notification, 0000000000000000 [ 679.494043] binder: release 13459:13466 transaction 16961 out, still active [ 679.494048] binder: unexpected work type, 4, not freed [ 679.494051] binder: undelivered TRANSACTION_COMPLETE [ 679.514286] binder: send failed reply for transaction 16961, target dead [ 679.573671] binder: release 13479:13482 transaction 16965 out, still active [ 679.573677] binder: unexpected work type, 4, not freed [ 679.573680] binder: undelivered TRANSACTION_COMPLETE [ 679.599124] binder: send failed reply for transaction 16965, target dead [ 679.647640] binder: release 13489:13497 transaction 16969 out, still active [ 679.647646] binder: unexpected work type, 4, not freed [ 679.647649] binder: undelivered TRANSACTION_COMPLETE [ 679.667983] binder: BINDER_SET_CONTEXT_MGR already set [ 679.667992] binder: 13490:13495 ioctl 40046207 0 returned -16 [ 679.668884] binder: 13490:13495 unknown command 0 [ 679.668893] binder: 13490:13495 ioctl c0306201 20000040 returned -22 [ 679.669211] binder: undelivered death notification, 0000000000000000 [ 679.669509] binder: send failed reply for transaction 16969, target dead [ 679.725353] binder: release 13502:13503 transaction 16974 out, still active [ 679.725359] binder: unexpected work type, 4, not freed [ 679.725366] binder: undelivered TRANSACTION_COMPLETE [ 679.730978] binder: send failed reply for transaction 16974, target dead [ 679.822028] binder: BINDER_SET_CONTEXT_MGR already set [ 679.822039] binder: 13516:13521 ioctl 40046207 0 returned -16 [ 679.826268] binder: 13516:13521 unknown command 0 [ 679.826277] binder: 13516:13521 ioctl c0306201 20000040 returned -22 [ 679.826962] binder: undelivered death notification, 0000000000000000 [ 679.840308] binder: release 13514:13518 transaction 16979 out, still active [ 679.840314] binder: unexpected work type, 4, not freed [ 679.840317] binder: undelivered TRANSACTION_COMPLETE [ 679.876800] binder: send failed reply for transaction 16979, target dead [ 679.919520] binder: release 13532:13536 transaction 16983 out, still active [ 679.919525] binder: unexpected work type, 4, not freed [ 679.919528] binder: undelivered TRANSACTION_COMPLETE [ 679.922853] binder: send failed reply for transaction 16983, target dead [ 679.993163] binder: BINDER_SET_CONTEXT_MGR already set [ 679.993172] binder: 13540:13544 ioctl 40046207 0 returned -16 [ 680.000730] binder: 13540:13544 unknown command 0 [ 680.000740] binder: 13540:13544 ioctl c0306201 20000040 returned -22 [ 680.000942] binder: undelivered death notification, 0000000000000000 [ 680.049144] binder: release 13552:13554 transaction 16988 out, still active [ 680.049151] binder: unexpected work type, 4, not freed [ 680.049154] binder: undelivered TRANSACTION_COMPLETE [ 680.084354] binder: send failed reply for transaction 16988, target dead [ 680.143618] binder: BINDER_SET_CONTEXT_MGR already set [ 680.143632] binder: 13559:13568 ioctl 40046207 0 returned -16 [ 680.148420] binder: 13559:13568 unknown command 0 [ 680.148430] binder: 13559:13568 ioctl c0306201 20000040 returned -22 [ 680.148574] binder: release 13564:13570 transaction 16993 out, still active [ 680.148579] binder: unexpected work type, 4, not freed [ 680.148582] binder: undelivered TRANSACTION_COMPLETE [ 680.148823] binder: undelivered death notification, 0000000000000000 [ 680.188322] binder: send failed reply for transaction 16993, target dead [ 680.263625] binder: release 13580:13583 transaction 16997 out, still active [ 680.263631] binder: unexpected work type, 4, not freed [ 680.263634] binder: undelivered TRANSACTION_COMPLETE [ 680.268787] binder: BINDER_SET_CONTEXT_MGR already set [ 680.268796] binder: 13584:13588 ioctl 40046207 0 returned -16 [ 680.271123] binder: 13584:13588 unknown command 0 [ 680.271133] binder: 13584:13588 ioctl c0306201 20000040 returned -22 [ 680.271388] binder: undelivered death notification, 0000000000000000 [ 680.285542] binder: send failed reply for transaction 16997, target dead [ 680.389597] binder: release 13597:13606 transaction 17002 out, still active [ 680.389603] binder: unexpected work type, 4, not freed [ 680.389606] binder: undelivered TRANSACTION_COMPLETE [ 680.417564] binder: send failed reply for transaction 17002, target dead [ 680.429528] binder: BINDER_SET_CONTEXT_MGR already set [ 680.429537] binder: 13607:13608 ioctl 40046207 0 returned -16 [ 680.430333] binder: 13607:13608 unknown command 0 [ 680.430341] binder: 13607:13608 ioctl c0306201 20000040 returned -22 [ 680.433554] binder: undelivered death notification, 0000000000000000 [ 680.515808] binder: release 13618:13625 transaction 17007 out, still active [ 680.515814] binder: unexpected work type, 4, not freed [ 680.515817] binder: undelivered TRANSACTION_COMPLETE [ 680.539216] binder: send failed reply for transaction 17007, target dead [ 680.597419] binder: BINDER_SET_CONTEXT_MGR already set [ 680.597429] binder: 13631:13633 ioctl 40046207 0 returned -16 [ 680.599485] binder: 13631:13633 unknown command 0 [ 680.599493] binder: 13631:13633 ioctl c0306201 20000040 returned -22 [ 680.600478] binder: undelivered death notification, 0000000000000000 [ 680.608566] binder: release 13634:13640 transaction 17012 out, still active [ 680.608579] binder: unexpected work type, 4, not freed [ 680.608582] binder: undelivered TRANSACTION_COMPLETE [ 680.642767] binder: send failed reply for transaction 17012, target dead [ 680.696337] binder: release 13648:13653 transaction 17016 out, still active [ 680.696342] binder: unexpected work type, 4, not freed [ 680.696345] binder: undelivered TRANSACTION_COMPLETE [ 680.726660] binder: send failed reply for transaction 17016, target dead [ 680.799270] binder: BINDER_SET_CONTEXT_MGR already set [ 680.799281] binder: 13659:13660 ioctl 40046207 0 returned -16 [ 680.800257] binder: 13659:13660 unknown command 0 [ 680.800265] binder: 13659:13660 ioctl c0306201 20000040 returned -22 [ 680.800503] binder: undelivered death notification, 0000000000000000 [ 680.809946] binder: release 13664:13671 transaction 17021 out, still active [ 680.809952] binder: unexpected work type, 4, not freed [ 680.809954] binder: undelivered TRANSACTION_COMPLETE [ 680.837041] binder: send failed reply for transaction 17021, target dead [ 680.896538] binder: BINDER_SET_CONTEXT_MGR already set [ 680.896547] binder: 13682:13683 ioctl 40046207 0 returned -16 [ 680.897411] binder: 13682:13683 unknown command 0 [ 680.897420] binder: 13682:13683 ioctl c0306201 20000040 returned -22 [ 680.897602] binder: undelivered death notification, 0000000000000000 [ 680.930118] binder: release 13681:13687 transaction 17026 out, still active [ 680.930124] binder: unexpected work type, 4, not freed [ 680.930126] binder: undelivered TRANSACTION_COMPLETE [ 680.961742] binder: send failed reply for transaction 17026, target dead [ 681.022340] binder: release 13697:13698 transaction 17030 out, still active [ 681.022346] binder: unexpected work type, 4, not freed [ 681.022349] binder: undelivered TRANSACTION_COMPLETE [ 681.042710] binder: BINDER_SET_CONTEXT_MGR already set [ 681.042720] binder: 13701:13703 ioctl 40046207 0 returned -16 [ 681.044825] binder: 13701:13703 unknown command 0 [ 681.044833] binder: 13701:13703 ioctl c0306201 20000040 returned -22 [ 681.046627] binder: undelivered death notification, 0000000000000000 [ 681.061522] binder: send failed reply for transaction 17030, target dead [ 681.123782] binder: BINDER_SET_CONTEXT_MGR already set [ 681.123792] binder: 13718:13719 ioctl 40046207 0 returned -16 [ 681.134310] binder: release 13712:13716 transaction 17035 out, still active [ 681.134316] binder: unexpected work type, 4, not freed [ 681.134319] binder: undelivered TRANSACTION_COMPLETE [ 681.140984] binder: 13718:13719 unknown command 0 [ 681.140997] binder: 13718:13719 ioctl c0306201 20000040 returned -22 [ 681.141404] binder: undelivered death notification, 0000000000000000 [ 681.158810] binder: send failed reply for transaction 17035, target dead [ 681.218013] binder: release 13731:13736 transaction 17040 out, still active [ 681.218018] binder: unexpected work type, 4, not freed [ 681.218021] binder: undelivered TRANSACTION_COMPLETE [ 681.251409] binder: send failed reply for transaction 17040, target dead [ 681.300475] binder: BINDER_SET_CONTEXT_MGR already set [ 681.300484] binder: 13740:13748 ioctl 40046207 0 returned -16 [ 681.301317] binder: 13740:13748 unknown command 0 [ 681.301326] binder: 13740:13748 ioctl c0306201 20000040 returned -22 [ 681.301570] binder: undelivered death notification, 0000000000000000 [ 681.331375] binder: release 13745:13752 transaction 17045 out, still active [ 681.331381] binder: unexpected work type, 4, not freed [ 681.331384] binder: undelivered TRANSACTION_COMPLETE [ 681.364364] binder: send failed reply for transaction 17045, target dead [ 681.425517] binder: release 13760:13768 transaction 17049 out, still active [ 681.425522] binder: unexpected work type, 4, not freed [ 681.425525] binder: undelivered TRANSACTION_COMPLETE [ 681.434780] binder: BINDER_SET_CONTEXT_MGR already set [ 681.434789] binder: 13763:13770 ioctl 40046207 0 returned -16 [ 681.435917] binder: 13763:13770 unknown command 0 [ 681.435925] binder: 13763:13770 ioctl c0306201 20000040 returned -22 [ 681.436384] binder: undelivered death notification, 0000000000000000 [ 681.455721] binder: send failed reply for transaction 17049, target dead [ 681.531311] binder: release 13781:13782 transaction 17054 out, still active [ 681.531316] binder: unexpected work type, 4, not freed [ 681.531319] binder: undelivered TRANSACTION_COMPLETE [ 681.541858] binder: send failed reply for transaction 17054, target dead [ 681.597502] binder: BINDER_SET_CONTEXT_MGR already set [ 681.597515] binder: 13788:13794 ioctl 40046207 0 returned -16 [ 681.600241] binder: 13788:13794 unknown command 0 [ 681.600251] binder: 13788:13794 ioctl c0306201 20000040 returned -22 [ 681.600378] binder: undelivered death notification, 0000000000000000 [ 681.621819] binder: release 13797:13798 transaction 17059 out, still active [ 681.621825] binder: unexpected work type, 4, not freed [ 681.621828] binder: undelivered TRANSACTION_COMPLETE [ 681.652711] binder: send failed reply for transaction 17059, target dead [ 681.720431] binder: release 13806:13807 transaction 17063 out, still active [ 681.720437] binder: unexpected work type, 4, not freed [ 681.720440] binder: undelivered TRANSACTION_COMPLETE [ 681.725081] binder: BINDER_SET_CONTEXT_MGR already set [ 681.725090] binder: 13809:13814 ioctl 40046207 0 returned -16 [ 681.727209] binder: 13809:13814 unknown command 0 [ 681.727218] binder: 13809:13814 ioctl c0306201 20000040 returned -22 [ 681.727625] binder: undelivered death notification, 0000000000000000 [ 681.748795] binder: send failed reply for transaction 17063, target dead [ 681.824594] binder: release 13822:13826 transaction 17068 out, still active [ 681.824600] binder: unexpected work type, 4, not freed [ 681.824602] binder: undelivered TRANSACTION_COMPLETE [ 681.858779] binder: send failed reply for transaction 17068, target dead [ 681.907500] binder: BINDER_SET_CONTEXT_MGR already set [ 681.907510] binder: 13833:13836 ioctl 40046207 0 returned -16 [ 681.912988] binder: 13833:13836 unknown command 0 [ 681.912996] binder: 13833:13836 ioctl c0306201 20000040 returned -22 [ 681.913186] binder: undelivered death notification, 0000000000000000 [ 681.973189] binder: release 13845:13848 transaction 17073 out, still active [ 681.973194] binder: unexpected work type, 4, not freed [ 681.973197] binder: undelivered TRANSACTION_COMPLETE [ 681.999731] binder: send failed reply for transaction 17073, target dead [ 682.082571] binder: BINDER_SET_CONTEXT_MGR already set [ 682.082581] binder: 13853:13860 ioctl 40046207 0 returned -16 [ 682.089236] binder: 13868:13868 unknown command 0 [ 682.089244] binder: 13868:13868 ioctl c0306201 20000040 returned -22 [ 682.089588] binder: undelivered death notification, 0000000000000000 [ 682.120415] binder: release 13861:13866 transaction 17078 out, still active [ 682.120421] binder: unexpected work type, 4, not freed [ 682.120424] binder: undelivered TRANSACTION_COMPLETE [ 682.140828] binder: send failed reply for transaction 17078, target dead [ 682.218560] binder: BINDER_SET_CONTEXT_MGR already set [ 682.218571] binder: 13879:13883 ioctl 40046207 0 returned -16 [ 682.222781] binder: 13879:13883 unknown command 0 [ 682.222795] binder: 13879:13883 ioctl c0306201 20000040 returned -22 [ 682.223058] binder: undelivered death notification, 0000000000000000 [ 682.243860] binder: release 13876:13884 transaction 17083 out, still active [ 682.243866] binder: unexpected work type, 4, not freed [ 682.243869] binder: undelivered TRANSACTION_COMPLETE [ 682.254073] binder: send failed reply for transaction 17083, target dead [ 682.344668] binder: release 13896:13900 transaction 17087 out, still active [ 682.344673] binder: unexpected work type, 4, not freed [ 682.344676] binder: undelivered TRANSACTION_COMPLETE [ 682.375253] binder: send failed reply for transaction 17087, target dead [ 682.377342] binder: BINDER_SET_CONTEXT_MGR already set [ 682.377351] binder: 13901:13907 ioctl 40046207 0 returned -16 [ 682.381482] binder: 13901:13907 unknown command 0 [ 682.381542] binder: 13901:13907 ioctl c0306201 20000040 returned -22 [ 682.382136] binder: undelivered death notification, 0000000000000000 [ 682.450744] binder: release 13915:13919 transaction 17092 out, still active [ 682.450750] binder: unexpected work type, 4, not freed [ 682.450753] binder: undelivered TRANSACTION_COMPLETE [ 682.454556] binder: send failed reply for transaction 17092, target dead [ 682.524526] binder: BINDER_SET_CONTEXT_MGR already set [ 682.524544] binder: 13922:13929 ioctl 40046207 0 returned -16 [ 682.529901] binder: 13922:13929 unknown command 0 [ 682.529911] binder: 13922:13929 ioctl c0306201 20000040 returned -22 [ 682.530164] binder: undelivered death notification, 0000000000000000 [ 682.537525] binder: release 13925:13930 transaction 17097 out, still active [ 682.537531] binder: unexpected work type, 4, not freed [ 682.537533] binder: undelivered TRANSACTION_COMPLETE [ 682.541440] binder: send failed reply for transaction 17097, target dead [ 682.629056] binder: release 13938:13948 transaction 17101 out, still active [ 682.629062] binder: unexpected work type, 4, not freed [ 682.629064] binder: undelivered TRANSACTION_COMPLETE [ 682.657656] binder: send failed reply for transaction 17101, target dead [ 682.703147] binder: BINDER_SET_CONTEXT_MGR already set [ 682.703156] binder: 13951:13954 ioctl 40046207 0 returned -16 [ 682.704186] binder: 13951:13954 unknown command 0 [ 682.704194] binder: 13951:13954 ioctl c0306201 20000040 returned -22 [ 682.704398] binder: undelivered death notification, 0000000000000000 [ 682.731264] binder: release 13959:13962 transaction 17106 out, still active [ 682.731269] binder: unexpected work type, 4, not freed [ 682.731272] binder: undelivered TRANSACTION_COMPLETE [ 682.756352] binder: send failed reply for transaction 17106, target dead [ 682.842161] binder: BINDER_SET_CONTEXT_MGR already set [ 682.842171] binder: 13972:13983 ioctl 40046207 0 returned -16 [ 682.844071] binder: release 13974:13976 transaction 17110 out, still active [ 682.844080] binder: unexpected work type, 4, not freed [ 682.844084] binder: undelivered TRANSACTION_COMPLETE [ 682.844857] binder: 13972:13983 unknown command 0 [ 682.844866] binder: 13972:13983 ioctl c0306201 20000040 returned -22 [ 682.845202] binder: undelivered death notification, 0000000000000000 [ 682.878093] binder: send failed reply for transaction 17110, target dead [ 682.939293] binder: BINDER_SET_CONTEXT_MGR already set [ 682.939302] binder: 13995:13996 ioctl 40046207 0 returned -16 [ 682.941728] binder: 13995:13996 unknown command 0 [ 682.941737] binder: 13995:13996 ioctl c0306201 20000040 returned -22 [ 682.941918] binder: undelivered death notification, 0000000000000000 [ 682.949931] binder: release 13994:14000 transaction 17116 out, still active [ 682.949937] binder: unexpected work type, 4, not freed [ 682.949940] binder: undelivered TRANSACTION_COMPLETE [ 682.984773] binder: send failed reply for transaction 17116, target dead [ 683.036007] binder: release 14009:14010 transaction 17120 out, still active [ 683.036013] binder: unexpected work type, 4, not freed [ 683.036016] binder: undelivered TRANSACTION_COMPLETE [ 683.051915] binder: send failed reply for transaction 17120, target dead [ 683.080894] binder: BINDER_SET_CONTEXT_MGR already set [ 683.080903] binder: 14013:14017 ioctl 40046207 0 returned -16 [ 683.083532] binder: 14013:14017 unknown command 0 [ 683.083541] binder: 14013:14017 ioctl c0306201 20000040 returned -22 [ 683.083873] binder: undelivered death notification, 0000000000000000 [ 683.145785] binder: release 14024:14027 transaction 17125 out, still active [ 683.145790] binder: unexpected work type, 4, not freed [ 683.145793] binder: undelivered TRANSACTION_COMPLETE [ 683.162470] binder: send failed reply for transaction 17125, target dead [ 683.244849] binder: BINDER_SET_CONTEXT_MGR already set [ 683.244867] binder: 14032:14039 ioctl 40046207 0 returned -16 [ 683.250342] binder: 14032:14039 unknown command 0 [ 683.250351] binder: 14032:14039 ioctl c0306201 20000040 returned -22 [ 683.251566] binder: undelivered death notification, 0000000000000000 [ 683.252728] binder: release 14034:14044 transaction 17130 out, still active [ 683.252733] binder: unexpected work type, 4, not freed [ 683.252736] binder: undelivered TRANSACTION_COMPLETE [ 683.269496] binder: send failed reply for transaction 17130, target dead [ 683.297297] binder: release 14047:14048 transaction 17134 out, still active [ 683.297302] binder: unexpected work type, 4, not freed [ 683.297305] binder: undelivered TRANSACTION_COMPLETE [ 683.318535] binder: send failed reply for transaction 17134, target dead [ 683.398557] binder: release 14056:14062 transaction 17138 out, still active [ 683.398563] binder: unexpected work type, 4, not freed [ 683.398566] binder: undelivered TRANSACTION_COMPLETE [ 683.413800] binder: send failed reply for transaction 17138, target dead [ 683.458362] binder: BINDER_SET_CONTEXT_MGR already set [ 683.458372] binder: 14065:14066 ioctl 40046207 0 returned -16 [ 683.459788] binder: 14065:14066 unknown command 0 [ 683.459796] binder: 14065:14066 ioctl c0306201 20000040 returned -22 [ 683.461056] binder: undelivered death notification, 0000000000000000 [ 683.499974] binder: release 14071:14080 transaction 17143 out, still active [ 683.499980] binder: unexpected work type, 4, not freed [ 683.499983] binder: undelivered TRANSACTION_COMPLETE [ 683.517980] binder: send failed reply for transaction 17143, target dead [ 683.588934] binder: release 14084:14088 transaction 17147 out, still active [ 683.588939] binder: unexpected work type, 4, not freed [ 683.588942] binder: undelivered TRANSACTION_COMPLETE [ 683.596802] binder: BINDER_SET_CONTEXT_MGR already set [ 683.596812] binder: 14085:14091 ioctl 40046207 0 returned -16 [ 683.599890] binder: 14085:14091 unknown command 0 [ 683.599899] binder: 14085:14091 ioctl c0306201 20000040 returned -22 [ 683.600157] binder: undelivered death notification, 0000000000000000 [ 683.602199] binder: send failed reply for transaction 17147, target dead [ 683.723866] binder: release 14100:14104 transaction 17152 out, still active [ 683.723872] binder: unexpected work type, 4, not freed [ 683.723875] binder: undelivered TRANSACTION_COMPLETE [ 683.739797] binder: BINDER_SET_CONTEXT_MGR already set [ 683.739806] binder: 14111:14115 ioctl 40046207 0 returned -16 [ 683.742267] binder: 14111:14115 unknown command 0 [ 683.742275] binder: 14111:14115 ioctl c0306201 20000040 returned -22 [ 683.743486] binder: undelivered death notification, 0000000000000000 [ 683.759563] binder: send failed reply for transaction 17152, target dead [ 683.821898] binder: release 14126:14127 transaction 17157 out, still active [ 683.821903] binder: unexpected work type, 4, not freed [ 683.821907] binder: undelivered TRANSACTION_COMPLETE [ 683.844600] binder: send failed reply for transaction 17157, target dead [ 683.867761] binder: BINDER_SET_CONTEXT_MGR already set [ 683.867771] binder: 14130:14134 ioctl 40046207 0 returned -16 [ 683.870310] binder: 14130:14134 unknown command 0 [ 683.870319] binder: 14130:14134 ioctl c0306201 20000040 returned -22 [ 683.870508] binder: undelivered death notification, 0000000000000000 [ 683.879104] binder: release 14135:14141 transaction 17162 out, still active [ 683.879111] binder: unexpected work type, 4, not freed [ 683.879113] binder: undelivered TRANSACTION_COMPLETE [ 683.940236] binder: send failed reply for transaction 17162, target dead [ 683.960153] binder: release 14145:14147 transaction 17166 out, still active [ 683.960158] binder: unexpected work type, 4, not freed [ 683.960161] binder: undelivered TRANSACTION_COMPLETE [ 683.981355] binder: send failed reply for transaction 17166, target dead [ 684.056754] binder: release 14154:14163 transaction 17170 out, still active [ 684.056770] binder: unexpected work type, 4, not freed [ 684.056773] binder: undelivered TRANSACTION_COMPLETE [ 684.100566] binder: BINDER_SET_CONTEXT_MGR already set [ 684.100577] binder: 14157:14164 ioctl 40046207 0 returned -16 [ 684.105231] binder: 14157:14164 unknown command 0 [ 684.105240] binder: 14157:14164 ioctl c0306201 20000040 returned -22 [ 684.105543] binder: undelivered death notification, 0000000000000000 [ 684.113567] binder: send failed reply for transaction 17170, target dead [ 684.156903] binder: release 14173:14177 transaction 17175 out, still active [ 684.156909] binder: unexpected work type, 4, not freed [ 684.156912] binder: undelivered TRANSACTION_COMPLETE [ 684.212342] binder: send failed reply for transaction 17175, target dead [ 684.256661] binder: release 14184:14187 transaction 17179 out, still active [ 684.256667] binder: unexpected work type, 4, not freed [ 684.256670] binder: undelivered TRANSACTION_COMPLETE [ 684.266184] binder: BINDER_SET_CONTEXT_MGR already set [ 684.266194] binder: 14183:14190 ioctl 40046207 0 returned -16 [ 684.266981] binder: 14183:14190 unknown command 0 [ 684.266991] binder: 14183:14190 ioctl c0306201 20000040 returned -22 [ 684.267188] binder: undelivered death notification, 0000000000000000 [ 684.301227] binder: send failed reply for transaction 17179, target dead [ 684.382170] binder: release 14202:14204 transaction 17184 out, still active [ 684.382177] binder: unexpected work type, 4, not freed [ 684.382180] binder: undelivered TRANSACTION_COMPLETE [ 684.383948] binder: BINDER_SET_CONTEXT_MGR already set [ 684.383957] binder: 14205:14208 ioctl 40046207 0 returned -16 [ 684.388731] binder: 14205:14208 unknown command 0 [ 684.388750] binder: 14205:14208 ioctl c0306201 20000040 returned -22 [ 684.389618] binder: undelivered death notification, 0000000000000000 [ 684.410619] binder: send failed reply for transaction 17184, target dead [ 684.529581] binder: release 14222:14226 transaction 17189 out, still active [ 684.529587] binder: unexpected work type, 4, not freed [ 684.529589] binder: undelivered TRANSACTION_COMPLETE [ 684.556472] binder: send failed reply for transaction 17189, target dead [ 684.567245] binder: BINDER_SET_CONTEXT_MGR already set [ 684.567275] binder: 14229:14235 ioctl 40046207 0 returned -16 [ 684.572769] binder: 14229:14235 unknown command 0 [ 684.572779] binder: 14229:14235 ioctl c0306201 20000040 returned -22 [ 684.572974] binder: undelivered death notification, 0000000000000000 [ 684.641982] binder: release 14240:14249 transaction 17194 out, still active [ 684.641988] binder: unexpected work type, 4, not freed [ 684.641991] binder: undelivered TRANSACTION_COMPLETE [ 684.646115] binder: BINDER_SET_CONTEXT_MGR already set [ 684.646125] binder: 14243:14250 ioctl 40046207 0 returned -16 [ 684.650036] binder: 14243:14250 unknown command 0 [ 684.650046] binder: 14243:14250 ioctl c0306201 20000040 returned -22 [ 684.650309] binder: undelivered death notification, 0000000000000000 [ 684.654465] binder: send failed reply for transaction 17194, target dead [ 684.743351] binder: release 14264:14266 transaction 17199 out, still active [ 684.743360] binder: unexpected work type, 4, not freed [ 684.743363] binder: undelivered TRANSACTION_COMPLETE [ 684.763207] binder: send failed reply for transaction 17199, target dead [ 684.812072] binder: BINDER_SET_CONTEXT_MGR already set [ 684.812083] binder: 14271:14274 ioctl 40046207 0 returned -16 [ 684.813364] binder: 14271:14274 unknown command 0 [ 684.813372] binder: 14271:14274 ioctl c0306201 20000040 returned -22 [ 684.813568] binder: undelivered death notification, 0000000000000000 [ 684.867893] binder: release 14280:14286 transaction 17204 out, still active [ 684.867898] binder: unexpected work type, 4, not freed [ 684.867901] binder: undelivered TRANSACTION_COMPLETE [ 684.908238] binder: send failed reply for transaction 17204, target dead [ 684.960756] binder: BINDER_SET_CONTEXT_MGR already set [ 684.960765] binder: 14299:14304 ioctl 40046207 0 returned -16 [ 684.963628] binder: 14299:14304 unknown command 0 [ 684.963637] binder: 14299:14304 ioctl c0306201 20000040 returned -22 [ 684.963891] binder: undelivered death notification, 0000000000000000 [ 684.987914] binder: release 14302:14307 transaction 17209 out, still active [ 684.987923] binder: unexpected work type, 4, not freed [ 684.987930] binder: undelivered TRANSACTION_COMPLETE [ 685.006080] binder: send failed reply for transaction 17209, target dead [ 685.080918] binder: release 14314:14318 transaction 17213 out, still active [ 685.080923] binder: unexpected work type, 4, not freed [ 685.080926] binder: undelivered TRANSACTION_COMPLETE [ 685.099677] binder: send failed reply for transaction 17213, target dead [ 685.138903] binder: BINDER_SET_CONTEXT_MGR already set [ 685.138912] binder: 14321:14330 ioctl 40046207 0 returned -16 [ 685.143630] binder: 14321:14330 unknown command 0 [ 685.143640] binder: 14321:14330 ioctl c0306201 20000040 returned -22 [ 685.144691] binder: undelivered death notification, 0000000000000000 [ 685.186535] binder: release 14328:14332 transaction 17218 out, still active [ 685.186541] binder: unexpected work type, 4, not freed [ 685.186544] binder: undelivered TRANSACTION_COMPLETE [ 685.202149] binder: send failed reply for transaction 17218, target dead [ 685.265674] binder: release 14346:14351 transaction 17222 out, still active [ 685.265709] binder: unexpected work type, 4, not freed [ 685.265712] binder: undelivered TRANSACTION_COMPLETE [ 685.270622] binder: BINDER_SET_CONTEXT_MGR already set [ 685.270632] binder: 14348:14349 ioctl 40046207 0 returned -16 [ 685.271404] binder: 14348:14349 unknown command 0 [ 685.271413] binder: 14348:14349 ioctl c0306201 20000040 returned -22 [ 685.276142] binder: undelivered death notification, 0000000000000000 [ 685.276270] binder: send failed reply for transaction 17222, target dead [ 685.352499] binder: release 14360:14362 transaction 17227 out, still active [ 685.352505] binder: unexpected work type, 4, not freed [ 685.352508] binder: undelivered TRANSACTION_COMPLETE [ 685.382618] binder: send failed reply for transaction 17227, target dead [ 685.393865] binder: BINDER_SET_CONTEXT_MGR already set [ 685.393875] binder: 14366:14370 ioctl 40046207 0 returned -16 [ 685.395546] binder: 14366:14370 unknown command 0 [ 685.395556] binder: 14366:14370 ioctl c0306201 20000040 returned -22 [ 685.402818] binder: undelivered death notification, 0000000000000000 [ 685.437406] binder: release 14378:14379 transaction 17232 out, still active [ 685.437412] binder: unexpected work type, 4, not freed [ 685.437415] binder: undelivered TRANSACTION_COMPLETE [ 685.475770] binder: send failed reply for transaction 17232, target dead [ 685.554743] binder: BINDER_SET_CONTEXT_MGR already set [ 685.554753] binder: 14384:14392 ioctl 40046207 0 returned -16 [ 685.556619] binder: 14384:14392 unknown command 0 [ 685.556629] binder: 14384:14392 ioctl c0306201 20000040 returned -22 [ 685.556826] binder: undelivered death notification, 0000000000000000 [ 685.589928] binder: release 14393:14395 transaction 17237 out, still active [ 685.589934] binder: unexpected work type, 4, not freed [ 685.589937] binder: undelivered TRANSACTION_COMPLETE [ 685.632173] binder: send failed reply for transaction 17237, target dead [ 685.708674] binder: release 14409:14413 transaction 17241 out, still active [ 685.708679] binder: unexpected work type, 4, not freed [ 685.708682] binder: undelivered TRANSACTION_COMPLETE [ 685.721860] binder: send failed reply for transaction 17241, target dead [ 685.752664] binder: BINDER_SET_CONTEXT_MGR already set [ 685.752675] binder: 14407:14424 ioctl 40046207 0 returned -16 [ 685.753422] binder: 14407:14424 unknown command 0 [ 685.753430] binder: 14407:14424 ioctl c0306201 20000040 returned -22 [ 685.754837] binder: undelivered death notification, 0000000000000000 [ 685.773058] binder: release 14429:14430 transaction 17246 out, still active [ 685.773063] binder: unexpected work type, 4, not freed [ 685.773066] binder: undelivered TRANSACTION_COMPLETE [ 685.802460] binder: send failed reply for transaction 17246, target dead [ 685.858301] binder: release 14441:14443 transaction 17250 out, still active [ 685.858307] binder: unexpected work type, 4, not freed [ 685.858310] binder: undelivered TRANSACTION_COMPLETE [ 685.881577] binder: send failed reply for transaction 17250, target dead [ 685.906574] binder: BINDER_SET_CONTEXT_MGR already set [ 685.906583] binder: 14442:14448 ioctl 40046207 0 returned -16 [ 685.909245] binder: 14442:14448 unknown command 0 [ 685.909254] binder: 14442:14448 ioctl c0306201 20000040 returned -22 [ 685.911040] binder: undelivered death notification, 0000000000000000 [ 685.993020] binder: release 14458:14465 transaction 17255 out, still active [ 685.993025] binder: unexpected work type, 4, not freed [ 685.993028] binder: undelivered TRANSACTION_COMPLETE [ 686.009717] binder: send failed reply for transaction 17255, target dead [ 686.051010] binder: BINDER_SET_CONTEXT_MGR already set [ 686.051022] binder: 14469:14471 ioctl 40046207 0 returned -16 [ 686.056157] binder: 14469:14471 unknown command 0 [ 686.056166] binder: 14469:14471 ioctl c0306201 20000040 returned -22 [ 686.056438] binder: undelivered death notification, 0000000000000000 [ 686.067289] binder: release 14477:14480 transaction 17260 out, still active [ 686.067294] binder: unexpected work type, 4, not freed [ 686.067297] binder: undelivered TRANSACTION_COMPLETE [ 686.104941] binder: send failed reply for transaction 17260, target dead [ 686.170026] binder: release 14487:14492 transaction 17264 out, still active [ 686.170032] binder: unexpected work type, 4, not freed [ 686.170035] binder: undelivered TRANSACTION_COMPLETE [ 686.178918] binder: BINDER_SET_CONTEXT_MGR already set [ 686.178929] binder: 14490:14497 ioctl 40046207 0 returned -16 [ 686.180124] binder: 14490:14497 unknown command 0 [ 686.180132] binder: 14490:14497 ioctl c0306201 20000040 returned -22 [ 686.180390] binder: undelivered death notification, 0000000000000000 [ 686.181845] binder: send failed reply for transaction 17264, target dead [ 686.250850] binder: release 14503:14504 transaction 17269 out, still active [ 686.250856] binder: unexpected work type, 4, not freed [ 686.250859] binder: undelivered TRANSACTION_COMPLETE [ 686.259726] binder: send failed reply for transaction 17269, target dead [ 686.312901] binder: BINDER_SET_CONTEXT_MGR already set [ 686.312911] binder: 14512:14517 ioctl 40046207 0 returned -16 [ 686.317597] binder: 14512:14517 unknown command 0 [ 686.317606] binder: 14512:14517 ioctl c0306201 20000040 returned -22 [ 686.317863] binder: undelivered death notification, 0000000000000000 [ 686.339999] binder: release 14514:14519 transaction 17274 out, still active [ 686.340005] binder: unexpected work type, 4, not freed [ 686.340007] binder: undelivered TRANSACTION_COMPLETE [ 686.376868] binder: send failed reply for transaction 17274, target dead [ 686.439063] binder: BINDER_SET_CONTEXT_MGR already set [ 686.439073] binder: 14531:14538 ioctl 40046207 0 returned -16 [ 686.441462] binder: release 14532:14536 transaction 17278 out, still active [ 686.441485] binder: unexpected work type, 4, not freed [ 686.441489] binder: undelivered TRANSACTION_COMPLETE [ 686.449320] binder: 14531:14538 unknown command 0 [ 686.449331] binder: 14531:14538 ioctl c0306201 20000040 returned -22 [ 686.449538] binder: undelivered death notification, 0000000000000000 [ 686.486389] binder: send failed reply for transaction 17278, target dead [ 686.547403] binder: BINDER_SET_CONTEXT_MGR already set [ 686.547412] binder: 14542:14544 ioctl 40046207 0 returned -16 [ 686.548157] binder: 14542:14544 unknown command 0 [ 686.548166] binder: 14542:14544 ioctl c0306201 20000040 returned -22 [ 686.548359] binder: undelivered death notification, 0000000000000000 [ 686.595944] binder: release 14553:14560 transaction 17284 out, still active [ 686.595950] binder: unexpected work type, 4, not freed [ 686.595953] binder: undelivered TRANSACTION_COMPLETE [ 686.627337] binder: send failed reply for transaction 17284, target dead [ 686.669279] binder: BINDER_SET_CONTEXT_MGR already set [ 686.669290] binder: 14568:14571 ioctl 40046207 0 returned -16 [ 686.670206] binder: 14568:14571 unknown command 0 [ 686.670214] binder: 14568:14571 ioctl c0306201 20000040 returned -22 [ 686.670449] binder: undelivered death notification, 0000000000000000 [ 686.683313] binder: release 14573:14574 transaction 17289 out, still active [ 686.683318] binder: unexpected work type, 4, not freed [ 686.683321] binder: undelivered TRANSACTION_COMPLETE [ 686.703961] binder: send failed reply for transaction 17289, target dead [ 686.781443] binder: release 14586:14590 transaction 17293 out, still active [ 686.781448] binder: unexpected work type, 4, not freed [ 686.781451] binder: undelivered TRANSACTION_COMPLETE [ 686.805946] binder: send failed reply for transaction 17293, target dead [ 686.842144] binder: BINDER_SET_CONTEXT_MGR already set [ 686.842153] binder: 14596:14599 ioctl 40046207 0 returned -16 [ 686.844811] binder: 14596:14599 unknown command 0 [ 686.844820] binder: 14596:14599 ioctl c0306201 20000040 returned -22 [ 686.845069] binder: undelivered death notification, 0000000000000000 [ 686.895706] binder: release 14600:14605 transaction 17298 out, still active [ 686.895712] binder: unexpected work type, 4, not freed [ 686.895715] binder: undelivered TRANSACTION_COMPLETE [ 686.916716] binder: send failed reply for transaction 17298, target dead [ 686.933466] binder: BINDER_SET_CONTEXT_MGR already set [ 686.933475] binder: 14609:14611 ioctl 40046207 0 returned -16 [ 686.934213] binder: 14609:14611 unknown command 0 [ 686.934221] binder: 14609:14611 ioctl c0306201 20000040 returned -22 [ 686.934600] binder: undelivered death notification, 0000000000000000 [ 687.006582] binder: release 14614:14623 transaction 17303 out, still active [ 687.006587] binder: unexpected work type, 4, not freed [ 687.006590] binder: undelivered TRANSACTION_COMPLETE [ 687.021069] binder: send failed reply for transaction 17303, target dead [ 687.061755] binder: BINDER_SET_CONTEXT_MGR already set [ 687.061774] binder: 14627:14632 ioctl 40046207 0 returned -16 [ 687.062883] binder: 14627:14632 unknown command 0 [ 687.062899] binder: 14627:14632 ioctl c0306201 20000040 returned -22 [ 687.063202] binder: undelivered death notification, 0000000000000000 [ 687.086821] binder: release 14640:14642 transaction 17308 out, still active [ 687.086826] binder: unexpected work type, 4, not freed [ 687.086829] binder: undelivered TRANSACTION_COMPLETE [ 687.095503] binder: send failed reply for transaction 17308, target dead [ 687.162258] binder: release 14645:14648 transaction 17312 out, still active [ 687.162264] binder: unexpected work type, 4, not freed [ 687.162266] binder: undelivered TRANSACTION_COMPLETE [ 687.189558] binder: BINDER_SET_CONTEXT_MGR already set [ 687.189567] binder: 14651:14656 ioctl 40046207 0 returned -16 [ 687.191577] binder: 14651:14656 unknown command 0 [ 687.191586] binder: 14651:14656 ioctl c0306201 20000040 returned -22 [ 687.193918] binder: undelivered death notification, 0000000000000000 [ 687.201718] binder: send failed reply for transaction 17312, target dead [ 687.305013] binder: BINDER_SET_CONTEXT_MGR already set [ 687.305022] binder: 14669:14677 ioctl 40046207 0 returned -16 [ 687.318507] binder: 14669:14677 unknown command 0 [ 687.318517] binder: 14669:14677 ioctl c0306201 20000040 returned -22 [ 687.318811] binder: undelivered death notification, 0000000000000000 [ 687.322429] binder: release 14672:14678 transaction 17318 out, still active [ 687.322434] binder: unexpected work type, 4, not freed [ 687.322437] binder: undelivered TRANSACTION_COMPLETE [ 687.370419] binder: send failed reply for transaction 17318, target dead [ 687.441114] binder: release 14689:14697 transaction 17322 out, still active [ 687.441120] binder: unexpected work type, 4, not freed [ 687.441123] binder: undelivered TRANSACTION_COMPLETE [ 687.451338] binder: BINDER_SET_CONTEXT_MGR already set [ 687.451348] binder: 14690:14698 ioctl 40046207 0 returned -16 [ 687.452278] binder: 14690:14698 unknown command 0 [ 687.452286] binder: 14690:14698 ioctl c0306201 20000040 returned -22 [ 687.452482] binder: undelivered death notification, 0000000000000000 [ 687.484999] binder: send failed reply for transaction 17322, target dead [ 687.517764] binder: release 14704:14706 transaction 17327 out, still active [ 687.517769] binder: unexpected work type, 4, not freed [ 687.517772] binder: undelivered TRANSACTION_COMPLETE [ 687.560086] binder: send failed reply for transaction 17327, target dead [ 687.598069] binder: BINDER_SET_CONTEXT_MGR already set [ 687.598079] binder: 14711:14716 ioctl 40046207 0 returned -16 [ 687.604222] binder: 14711:14716 unknown command 0 [ 687.604232] binder: 14711:14716 ioctl c0306201 20000040 returned -22 [ 687.604472] binder: undelivered death notification, 0000000000000000 [ 687.615771] binder: release 14717:14722 transaction 17332 out, still active [ 687.615777] binder: unexpected work type, 4, not freed [ 687.615780] binder: undelivered TRANSACTION_COMPLETE [ 687.656840] binder: send failed reply for transaction 17332, target dead [ 687.697454] binder: release 14731:14734 transaction 17336 out, still active [ 687.697460] binder: unexpected work type, 4, not freed [ 687.697463] binder: undelivered TRANSACTION_COMPLETE [ 687.740004] binder: send failed reply for transaction 17336, target dead [ 687.783083] binder: BINDER_SET_CONTEXT_MGR already set [ 687.783094] binder: 14739:14741 ioctl 40046207 0 returned -16 [ 687.783951] binder: 14739:14741 unknown command 0 [ 687.783959] binder: 14739:14741 ioctl c0306201 20000040 returned -22 [ 687.784256] binder: undelivered death notification, 0000000000000000 [ 687.866550] binder: release 14752:14757 transaction 17341 out, still active [ 687.866556] binder: unexpected work type, 4, not freed [ 687.866559] binder: undelivered TRANSACTION_COMPLETE [ 687.893257] binder: send failed reply for transaction 17341, target dead [ 687.916647] binder: BINDER_SET_CONTEXT_MGR already set [ 687.916657] binder: 14761:14767 ioctl 40046207 0 returned -16 [ 687.919076] binder: 14761:14767 unknown command 0 [ 687.919085] binder: 14761:14767 ioctl c0306201 20000040 returned -22 [ 687.919373] binder: undelivered death notification, 0000000000000000 [ 687.979019] binder: release 14770:14773 transaction 17346 out, still active [ 687.979024] binder: unexpected work type, 4, not freed [ 687.979028] binder: undelivered TRANSACTION_COMPLETE [ 688.007211] binder: send failed reply for transaction 17346, target dead [ 688.073040] binder: release 14787:14790 transaction 17350 out, still active [ 688.073046] binder: unexpected work type, 4, not freed [ 688.073048] binder: undelivered TRANSACTION_COMPLETE [ 688.088603] binder: BINDER_SET_CONTEXT_MGR already set [ 688.088613] binder: 14781:14788 ioctl 40046207 0 returned -16 [ 688.090200] binder: 14781:14788 unknown command 0 [ 688.090209] binder: 14781:14788 ioctl c0306201 20000040 returned -22 [ 688.095893] binder: undelivered death notification, 0000000000000000 [ 688.146303] binder: send failed reply for transaction 17350, target dead [ 688.218682] binder: release 14805:14809 transaction 17355 out, still active [ 688.218687] binder: unexpected work type, 4, not freed [ 688.218691] binder: undelivered TRANSACTION_COMPLETE [ 688.252675] binder: send failed reply for transaction 17355, target dead [ 688.262114] binder: BINDER_SET_CONTEXT_MGR already set [ 688.262124] binder: 14812:14815 ioctl 40046207 0 returned -16 [ 688.263007] binder: 14812:14815 unknown command 0 [ 688.263016] binder: 14812:14815 ioctl c0306201 20000040 returned -22 [ 688.263221] binder: undelivered death notification, 0000000000000000 [ 688.333048] binder: release 14824:14828 transaction 17360 out, still active [ 688.333054] binder: unexpected work type, 4, not freed [ 688.333057] binder: undelivered TRANSACTION_COMPLETE [ 688.360260] binder: send failed reply for transaction 17360, target dead [ 688.393071] binder: release 14837:14838 transaction 17364 out, still active [ 688.393076] binder: unexpected work type, 4, not freed [ 688.393079] binder: undelivered TRANSACTION_COMPLETE [ 688.402202] binder: send failed reply for transaction 17364, target dead [ 688.473146] binder: BINDER_SET_CONTEXT_MGR already set [ 688.473157] binder: 14835:14836 ioctl 40046207 0 returned -16 [ 688.473983] binder: 14835:14836 unknown command 0 [ 688.473992] binder: 14835:14836 ioctl c0306201 20000040 returned -22 [ 688.474193] binder: undelivered death notification, 0000000000000000 [ 688.542325] binder: release 14854:14855 transaction 17369 out, still active [ 688.542333] binder: unexpected work type, 4, not freed [ 688.542336] binder: undelivered TRANSACTION_COMPLETE [ 688.551321] binder: send failed reply for transaction 17369, target dead [ 688.588205] binder: release 14867:14870 transaction 17373 out, still active [ 688.588211] binder: unexpected work type, 4, not freed [ 688.588214] binder: undelivered TRANSACTION_COMPLETE [ 688.603401] binder: BINDER_SET_CONTEXT_MGR already set [ 688.603411] binder: 14869:14872 ioctl 40046207 0 returned -16 [ 688.604767] binder: 14869:14872 unknown command 0 [ 688.604776] binder: 14869:14872 ioctl c0306201 20000040 returned -22 [ 688.611076] binder: undelivered death notification, 0000000000000000 [ 688.652078] binder: send failed reply for transaction 17373, target dead [ 688.712926] binder: release 14883:14887 transaction 17378 out, still active [ 688.712938] binder: unexpected work type, 4, not freed [ 688.712941] binder: undelivered TRANSACTION_COMPLETE [ 688.739292] binder: BINDER_SET_CONTEXT_MGR already set [ 688.739303] binder: 14890:14894 ioctl 40046207 0 returned -16 [ 688.743685] binder: 14890:14894 unknown command 0 [ 688.743695] binder: 14890:14894 ioctl c0306201 20000040 returned -22 [ 688.743905] binder: undelivered death notification, 0000000000000000 [ 688.772966] binder: send failed reply for transaction 17378, target dead [ 688.854253] binder: release 14904:14906 transaction 17383 out, still active [ 688.854259] binder: unexpected work type, 4, not freed [ 688.854262] binder: undelivered TRANSACTION_COMPLETE [ 688.873928] binder: BINDER_SET_CONTEXT_MGR already set [ 688.873937] binder: 14903:14910 ioctl 40046207 0 returned -16 [ 688.883522] binder: send failed reply for transaction 17383, target dead [ 688.883967] binder: 14903:14910 unknown command 0 [ 688.883977] binder: 14903:14910 ioctl c0306201 20000040 returned -22 [ 688.884220] binder: undelivered death notification, 0000000000000000 [ 689.277840] binder: release 14918:14925 transaction 17388 out, still active [ 689.277845] binder: unexpected work type, 4, not freed [ 689.277848] binder: undelivered TRANSACTION_COMPLETE [ 689.282215] binder: send failed reply for transaction 17388, target dead [ 689.412055] binder: BINDER_SET_CONTEXT_MGR already set [ 689.412065] binder: 14932:14934 ioctl 40046207 0 returned -16 [ 689.416942] binder: 14932:14934 unknown command 0 [ 689.416952] binder: 14932:14934 ioctl c0306201 20000040 returned -22 [ 689.417268] binder: undelivered death notification, 0000000000000000 [ 689.484059] binder: BINDER_SET_CONTEXT_MGR already set [ 689.484069] binder: 14940:14945 ioctl 40046207 0 returned -16 [ 689.487903] binder: 14940:14945 unknown command 0 [ 689.487912] binder: 14940:14945 ioctl c0306201 20000040 returned -22 [ 689.488180] binder: undelivered death notification, 0000000000000000 [ 689.488969] binder: release 14941:14948 transaction 17394 out, still active [ 689.488974] binder: unexpected work type, 4, not freed [ 689.488977] binder: undelivered TRANSACTION_COMPLETE [ 689.503362] binder: send failed reply for transaction 17394, target dead [ 689.579104] binder: BINDER_SET_CONTEXT_MGR already set [ 689.579116] binder: 14962:14964 ioctl 40046207 0 returned -16 [ 689.582399] binder: 14962:14964 unknown command 0 [ 689.582408] binder: 14962:14964 ioctl c0306201 20000040 returned -22 [ 689.582601] binder: undelivered death notification, 0000000000000000 [ 689.631105] binder: release 14967:14970 transaction 17399 out, still active [ 689.631110] binder: unexpected work type, 4, not freed [ 689.631113] binder: undelivered TRANSACTION_COMPLETE [ 689.664129] binder: send failed reply for transaction 17399, target dead [ 689.741418] binder: BINDER_SET_CONTEXT_MGR already set [ 689.741430] binder: 14977:14978 ioctl 40046207 0 returned -16 [ 689.742192] binder: 14977:14978 unknown command 0 [ 689.742200] binder: 14977:14978 ioctl c0306201 20000040 returned -22 [ 689.744309] binder: undelivered death notification, 0000000000000000 [ 689.746162] binder: release 14981:14990 transaction 17404 out, still active [ 689.746167] binder: unexpected work type, 4, not freed [ 689.746170] binder: undelivered TRANSACTION_COMPLETE [ 689.792481] binder: send failed reply for transaction 17404, target dead [ 689.869876] binder: release 14997:15006 transaction 17408 out, still active [ 689.869913] binder: unexpected work type, 4, not freed [ 689.869916] binder: undelivered TRANSACTION_COMPLETE [ 689.877414] binder: BINDER_SET_CONTEXT_MGR already set [ 689.877423] binder: 15001:15012 ioctl 40046207 0 returned -16 [ 689.895888] binder: 15001:15012 unknown command 0 [ 689.895898] binder: 15001:15012 ioctl c0306201 20000040 returned -22 [ 689.896082] binder: undelivered death notification, 0000000000000000 [ 689.902562] binder: send failed reply for transaction 17408, target dead [ 689.966708] binder: release 15016:15020 transaction 17413 out, still active [ 689.966713] binder: unexpected work type, 4, not freed [ 689.966716] binder: undelivered TRANSACTION_COMPLETE [ 690.010400] binder: send failed reply for transaction 17413, target dead [ 690.039538] binder: BINDER_SET_CONTEXT_MGR already set [ 690.039548] binder: 15026:15029 ioctl 40046207 0 returned -16 [ 690.040612] binder: 15026:15029 unknown command 0 [ 690.040620] binder: 15026:15029 ioctl c0306201 20000040 returned -22 [ 690.040895] binder: undelivered death notification, 0000000000000000 [ 690.072262] binder: release 15033:15035 transaction 17418 out, still active [ 690.072268] binder: unexpected work type, 4, not freed [ 690.072270] binder: undelivered TRANSACTION_COMPLETE [ 690.089607] binder: send failed reply for transaction 17418, target dead [ 690.187177] binder: release 15046:15051 transaction 17422 out, still active [ 690.187183] binder: unexpected work type, 4, not freed [ 690.187186] binder: undelivered TRANSACTION_COMPLETE [ 690.190078] binder: BINDER_SET_CONTEXT_MGR already set [ 690.190088] binder: 15049:15055 ioctl 40046207 0 returned -16 [ 690.191549] binder: 15049:15055 unknown command 0 [ 690.191557] binder: 15049:15055 ioctl c0306201 20000040 returned -22 [ 690.191807] binder: undelivered death notification, 0000000000000000 [ 690.236434] binder: send failed reply for transaction 17422, target dead [ 690.311383] binder: release 15068:15071 transaction 17427 out, still active [ 690.311391] binder: unexpected work type, 4, not freed [ 690.311397] binder: undelivered TRANSACTION_COMPLETE [ 690.342655] binder: BINDER_SET_CONTEXT_MGR already set [ 690.342667] binder: 15070:15074 ioctl 40046207 0 returned -16 [ 690.348765] binder: 15070:15074 unknown command 0 [ 690.348773] binder: 15070:15074 ioctl c0306201 20000040 returned -22 [ 690.349022] binder: undelivered death notification, 0000000000000000 [ 690.357068] binder: send failed reply for transaction 17427, target dead [ 690.406559] binder: release 15087:15089 transaction 17432 out, still active [ 690.406565] binder: unexpected work type, 4, not freed [ 690.406567] binder: undelivered TRANSACTION_COMPLETE [ 690.440754] binder: send failed reply for transaction 17432, target dead [ 690.511199] binder: BINDER_SET_CONTEXT_MGR already set [ 690.511209] binder: 15100:15102 ioctl 40046207 0 returned -16 [ 690.511903] binder: release 15097:15107 transaction 17436 out, still active [ 690.511908] binder: unexpected work type, 4, not freed [ 690.511911] binder: undelivered TRANSACTION_COMPLETE [ 690.512088] binder: 15100:15102 unknown command 0 [ 690.512096] binder: 15100:15102 ioctl c0306201 20000040 returned -22 [ 690.512400] binder: undelivered death notification, 0000000000000000 [ 690.544165] binder: send failed reply for transaction 17436, target dead [ 690.580805] binder: BINDER_SET_CONTEXT_MGR already set [ 690.580814] binder: 15114:15115 ioctl 40046207 0 returned -16 [ 690.581823] binder: 15114:15115 unknown command 0 [ 690.581831] binder: 15114:15115 ioctl c0306201 20000040 returned -22 [ 690.583715] binder: undelivered death notification, 0000000000000000 [ 690.642756] binder: release 15121:15126 transaction 17442 out, still active [ 690.642762] binder: unexpected work type, 4, not freed [ 690.642765] binder: undelivered TRANSACTION_COMPLETE [ 690.671044] binder: send failed reply for transaction 17442, target dead [ 690.722422] binder: BINDER_SET_CONTEXT_MGR already set [ 690.722431] binder: 15130:15133 ioctl 40046207 0 returned -16 [ 690.723168] binder: 15130:15133 unknown command 0 [ 690.723176] binder: 15130:15133 ioctl c0306201 20000040 returned -22 [ 690.723468] binder: undelivered death notification, 0000000000000000 [ 690.757141] binder: release 15140:15144 transaction 17447 out, still active [ 690.757147] binder: unexpected work type, 4, not freed [ 690.757149] binder: undelivered TRANSACTION_COMPLETE [ 690.780431] binder: send failed reply for transaction 17447, target dead [ 690.872525] binder: release 15153:15157 transaction 17451 out, still active [ 690.872534] binder: unexpected work type, 4, not freed [ 690.872537] binder: undelivered TRANSACTION_COMPLETE [ 690.891185] binder: BINDER_SET_CONTEXT_MGR already set [ 690.891195] binder: 15156:15159 ioctl 40046207 0 returned -16 [ 690.891940] binder: 15156:15159 unknown command 0 [ 690.891948] binder: 15156:15159 ioctl c0306201 20000040 returned -22 [ 690.892162] binder: undelivered death notification, 0000000000000000 [ 690.896081] binder: send failed reply for transaction 17451, target dead [ 690.962747] binder: release 15168:15173 transaction 17456 out, still active [ 690.962753] binder: unexpected work type, 4, not freed [ 690.962756] binder: undelivered TRANSACTION_COMPLETE [ 690.993445] binder: send failed reply for transaction 17456, target dead [ 691.068847] binder: BINDER_SET_CONTEXT_MGR already set [ 691.068856] binder: 15184:15188 ioctl 40046207 0 returned -16 [ 691.070070] binder: 15184:15188 unknown command 0 [ 691.070079] binder: 15184:15188 ioctl c0306201 20000040 returned -22 [ 691.070340] binder: undelivered death notification, 0000000000000000 [ 691.096948] binder: release 15185:15191 transaction 17461 out, still active [ 691.096954] binder: unexpected work type, 4, not freed [ 691.096956] binder: undelivered TRANSACTION_COMPLETE [ 691.124374] binder: send failed reply for transaction 17461, target dead [ 691.193502] binder: release 15200:15202 transaction 17465 out, still active [ 691.193508] binder: unexpected work type, 4, not freed [ 691.193511] binder: undelivered TRANSACTION_COMPLETE [ 691.218703] binder: send failed reply for transaction 17465, target dead [ 691.252643] binder: BINDER_SET_CONTEXT_MGR already set [ 691.252652] binder: 15211:15214 ioctl 40046207 0 returned -16 [ 691.253505] binder: 15211:15214 unknown command 0 [ 691.253514] binder: 15211:15214 ioctl c0306201 20000040 returned -22 [ 691.253930] binder: undelivered death notification, 0000000000000000 [ 691.313378] binder: release 15218:15224 transaction 17470 out, still active [ 691.313384] binder: unexpected work type, 4, not freed [ 691.313387] binder: undelivered TRANSACTION_COMPLETE [ 691.338187] binder: send failed reply for transaction 17470, target dead [ 691.397525] binder: BINDER_SET_CONTEXT_MGR already set [ 691.397535] binder: 15232:15237 ioctl 40046207 0 returned -16 [ 691.398514] binder: 15232:15237 unknown command 0 [ 691.398523] binder: 15232:15237 ioctl c0306201 20000040 returned -22 [ 691.398765] binder: undelivered death notification, 0000000000000000 [ 691.417375] binder: release 15234:15238 transaction 17475 out, still active [ 691.417381] binder: unexpected work type, 4, not freed [ 691.417384] binder: undelivered TRANSACTION_COMPLETE [ 691.429122] binder: send failed reply for transaction 17475, target dead [ 691.481814] binder: release 15246:15251 transaction 17479 out, still active [ 691.481819] binder: unexpected work type, 4, not freed [ 691.481822] binder: undelivered TRANSACTION_COMPLETE [ 691.503885] binder: send failed reply for transaction 17479, target dead [ 691.569182] binder: release 15262:15268 transaction 17483 out, still active [ 691.569188] binder: unexpected work type, 4, not freed [ 691.569190] binder: undelivered TRANSACTION_COMPLETE [ 691.590021] binder: send failed reply for transaction 17483, target dead [ 691.593150] binder: BINDER_SET_CONTEXT_MGR already set [ 691.593160] binder: 15265:15269 ioctl 40046207 0 returned -16 [ 691.612315] binder: 15265:15269 unknown command 0 [ 691.612326] binder: 15265:15269 ioctl c0306201 20000040 returned -22 [ 691.612539] binder: undelivered death notification, 0000000000000000 [ 691.702726] binder: release 15278:15281 transaction 17488 out, still active [ 691.702733] binder: unexpected work type, 4, not freed [ 691.702735] binder: undelivered TRANSACTION_COMPLETE [ 691.745193] binder: send failed reply for transaction 17488, target dead [ 691.777015] binder: BINDER_SET_CONTEXT_MGR already set [ 691.777024] binder: 15288:15292 ioctl 40046207 0 returned -16 [ 691.780099] binder: 15288:15292 unknown command 0 [ 691.780108] binder: 15288:15292 ioctl c0306201 20000040 returned -22 [ 691.787692] binder: undelivered death notification, 0000000000000000 [ 691.835405] binder: release 15296:15301 transaction 17493 out, still active [ 691.835411] binder: unexpected work type, 4, not freed [ 691.835414] binder: undelivered TRANSACTION_COMPLETE [ 691.868466] binder: send failed reply for transaction 17493, target dead [ 691.903522] binder: BINDER_SET_CONTEXT_MGR already set [ 691.903532] binder: 15310:15313 ioctl 40046207 0 returned -16 [ 691.904375] binder: 15310:15313 unknown command 0 [ 691.904391] binder: 15310:15313 ioctl c0306201 20000040 returned -22 [ 691.904656] binder: undelivered death notification, 0000000000000000 [ 691.931967] binder: release 15316:15320 transaction 17498 out, still active [ 691.931973] binder: unexpected work type, 4, not freed [ 691.931975] binder: undelivered TRANSACTION_COMPLETE [ 691.964603] binder: send failed reply for transaction 17498, target dead [ 692.038718] binder: BINDER_SET_CONTEXT_MGR already set [ 692.038728] binder: 15332:15334 ioctl 40046207 0 returned -16 [ 692.043906] binder: release 15333:15337 transaction 17502 out, still active [ 692.043911] binder: unexpected work type, 4, not freed [ 692.043914] binder: undelivered TRANSACTION_COMPLETE [ 692.051627] binder: 15332:15334 unknown command 0 [ 692.051636] binder: 15332:15334 ioctl c0306201 20000040 returned -22 [ 692.051881] binder: undelivered death notification, 0000000000000000 [ 692.058043] binder: send failed reply for transaction 17502, target dead [ 692.135664] binder: BINDER_SET_CONTEXT_MGR already set [ 692.135674] binder: 15349:15352 ioctl 40046207 0 returned -16 [ 692.139722] binder: release 15351:15353 transaction 17508 out, still active [ 692.139728] binder: unexpected work type, 4, not freed [ 692.139731] binder: undelivered TRANSACTION_COMPLETE [ 692.139817] binder: 15349:15352 unknown command 0 [ 692.139826] binder: 15349:15352 ioctl c0306201 20000040 returned -22 [ 692.140060] binder: undelivered death notification, 0000000000000000 [ 692.168354] binder: send failed reply for transaction 17508, target dead [ 692.284861] binder: BINDER_SET_CONTEXT_MGR already set [ 692.284871] binder: 15366:15369 ioctl 40046207 0 returned -16 [ 692.286917] binder: 15366:15369 unknown command 0 [ 692.286927] binder: 15366:15369 ioctl c0306201 20000040 returned -22 [ 692.287180] binder: undelivered death notification, 0000000000000000 [ 692.289549] binder: release 15364:15374 transaction 17513 out, still active [ 692.289554] binder: unexpected work type, 4, not freed [ 692.289557] binder: undelivered TRANSACTION_COMPLETE [ 692.301661] binder: send failed reply for transaction 17513, target dead [ 692.416734] binder: release 15385:15391 transaction 17517 out, still active [ 692.416739] binder: unexpected work type, 4, not freed [ 692.416742] binder: undelivered TRANSACTION_COMPLETE [ 692.439592] binder: send failed reply for transaction 17517, target dead [ 692.489074] binder: BINDER_SET_CONTEXT_MGR already set [ 692.489084] binder: 15392:15396 ioctl 40046207 0 returned -16 [ 692.489942] binder: 15392:15396 unknown command 0 [ 692.489950] binder: 15392:15396 ioctl c0306201 20000040 returned -22 [ 692.490144] binder: undelivered death notification, 0000000000000000 [ 692.496620] binder: release 15401:15404 transaction 17522 out, still active [ 692.496625] binder: unexpected work type, 4, not freed [ 692.496628] binder: undelivered TRANSACTION_COMPLETE [ 692.564998] binder: send failed reply for transaction 17522, target dead [ 692.592185] binder: release 15417:15419 transaction 17526 out, still active [ 692.592190] binder: unexpected work type, 4, not freed [ 692.592193] binder: undelivered TRANSACTION_COMPLETE [ 692.612086] binder: send failed reply for transaction 17526, target dead [ 692.650739] binder: BINDER_SET_CONTEXT_MGR already set [ 692.650751] binder: 15422:15428 ioctl 40046207 0 returned -16 [ 692.651683] binder: 15422:15428 unknown command 0 [ 692.651693] binder: 15422:15428 ioctl c0306201 20000040 returned -22 [ 692.652058] binder: undelivered death notification, 0000000000000000 [ 692.747533] binder: release 15434:15442 transaction 17531 out, still active [ 692.747538] binder: unexpected work type, 4, not freed [ 692.747541] binder: undelivered TRANSACTION_COMPLETE [ 692.768697] binder: send failed reply for transaction 17531, target dead [ 692.778964] binder: BINDER_SET_CONTEXT_MGR already set [ 692.778974] binder: 15443:15447 ioctl 40046207 0 returned -16 [ 692.779839] binder: 15443:15447 unknown command 0 [ 692.779848] binder: 15443:15447 ioctl c0306201 20000040 returned -22 [ 692.780093] binder: undelivered death notification, 0000000000000000 [ 692.866254] binder: release 15456:15458 transaction 17536 out, still active [ 692.866269] binder: unexpected work type, 4, not freed [ 692.866271] binder: undelivered TRANSACTION_COMPLETE [ 692.892302] binder: send failed reply for transaction 17536, target dead [ 692.937288] binder: BINDER_SET_CONTEXT_MGR already set [ 692.937297] binder: 15463:15470 ioctl 40046207 0 returned -16 [ 692.940282] binder: 15463:15470 unknown command 0 [ 692.940291] binder: 15463:15470 ioctl c0306201 20000040 returned -22 [ 692.949984] binder: undelivered death notification, 0000000000000000 [ 692.987877] binder: release 15475:15476 transaction 17541 out, still active [ 692.987883] binder: unexpected work type, 4, not freed [ 692.987886] binder: undelivered TRANSACTION_COMPLETE [ 693.025725] binder: send failed reply for transaction 17541, target dead [ 693.079542] binder: release 15489:15493 transaction 17545 out, still active [ 693.079548] binder: unexpected work type, 4, not freed [ 693.079551] binder: undelivered TRANSACTION_COMPLETE [ 693.080708] binder: BINDER_SET_CONTEXT_MGR already set [ 693.080718] binder: 15485:15487 ioctl 40046207 0 returned -16 [ 693.091083] binder: 15485:15487 unknown command 0 [ 693.091093] binder: 15485:15487 ioctl c0306201 20000040 returned -22 [ 693.093083] binder: undelivered death notification, 0000000000000000 [ 693.095066] binder: send failed reply for transaction 17545, target dead [ 693.197336] binder: release 15503:15506 transaction 17550 out, still active [ 693.197342] binder: unexpected work type, 4, not freed [ 693.197345] binder: undelivered TRANSACTION_COMPLETE [ 693.200802] binder: BINDER_SET_CONTEXT_MGR already set [ 693.200811] binder: 15500:15507 ioctl 40046207 0 returned -16 [ 693.201577] binder: 15500:15507 unknown command 0 [ 693.201586] binder: 15500:15507 ioctl c0306201 20000040 returned -22 [ 693.202870] binder: undelivered death notification, 0000000000000000 [ 693.234266] binder: send failed reply for transaction 17550, target dead [ 693.324704] binder: BINDER_SET_CONTEXT_MGR already set [ 693.324713] binder: 15519:15523 ioctl 40046207 0 returned -16 [ 693.329121] binder: release 15520:15522 transaction 17556 out, still active [ 693.329126] binder: unexpected work type, 4, not freed [ 693.329129] binder: undelivered TRANSACTION_COMPLETE [ 693.336336] binder: 15519:15523 unknown command 0 [ 693.336348] binder: 15519:15523 ioctl c0306201 20000040 returned -22 [ 693.339462] binder: undelivered death notification, 0000000000000000 [ 693.340371] binder: send failed reply for transaction 17556, target dead [ 693.399614] binder: release 15538:15541 transaction 17560 out, still active [ 693.399619] binder: unexpected work type, 4, not freed [ 693.399623] binder: undelivered TRANSACTION_COMPLETE [ 693.441387] binder: send failed reply for transaction 17560, target dead [ 693.495105] binder: BINDER_SET_CONTEXT_MGR already set [ 693.495551] binder: 15542:15556 ioctl 40046207 0 returned -16 [ 693.499214] binder: 15542:15556 unknown command 0 [ 693.499223] binder: 15542:15556 ioctl c0306201 20000040 returned -22 [ 693.499457] binder: undelivered death notification, 0000000000000000 [ 693.505514] binder: release 15554:15558 transaction 17565 out, still active [ 693.505519] binder: unexpected work type, 4, not freed [ 693.505522] binder: undelivered TRANSACTION_COMPLETE [ 693.531938] binder: send failed reply for transaction 17565, target dead [ 693.578885] binder: release 15564:15568 transaction 17569 out, still active [ 693.578890] binder: unexpected work type, 4, not freed [ 693.578893] binder: undelivered TRANSACTION_COMPLETE [ 693.637413] binder: send failed reply for transaction 17569, target dead [ 693.667937] binder: BINDER_SET_CONTEXT_MGR already set [ 693.667948] binder: 15574:15576 ioctl 40046207 0 returned -16 [ 693.671720] binder: 15574:15576 unknown command 0 [ 693.671729] binder: 15574:15576 ioctl c0306201 20000040 returned -22 [ 693.671977] binder: undelivered death notification, 0000000000000000 [ 693.714354] binder: release 15580:15586 transaction 17574 out, still active [ 693.714360] binder: unexpected work type, 4, not freed [ 693.714363] binder: undelivered TRANSACTION_COMPLETE [ 693.730334] binder: send failed reply for transaction 17574, target dead [ 693.798748] binder: BINDER_SET_CONTEXT_MGR already set [ 693.798772] binder: 15596:15601 ioctl 40046207 0 returned -16 [ 693.807421] binder: 15596:15606 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 693.807532] binder: 15596:15606 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 693.807538] binder: 15596:15606 unknown command 0 [ 693.807545] binder: 15596:15606 ioctl c0306201 20000040 returned -22 [ 693.809223] binder: release 15594:15602 transaction 17579 out, still active [ 693.809228] binder: unexpected work type, 4, not freed [ 693.809231] binder: undelivered TRANSACTION_COMPLETE [ 693.837020] binder: send failed reply for transaction 17579, target dead [ 693.890039] binder: release 15612:15617 transaction 17583 out, still active [ 693.890044] binder: unexpected work type, 4, not freed [ 693.890047] binder: undelivered TRANSACTION_COMPLETE [ 693.898996] binder: BINDER_SET_CONTEXT_MGR already set [ 693.899006] binder: 15615:15616 ioctl 40046207 0 returned -16 [ 693.902683] binder: 15615:15616 unknown command 0 [ 693.902691] binder: 15615:15616 ioctl c0306201 20000040 returned -22 [ 693.902899] binder: undelivered death notification, 0000000000000000 [ 693.941615] binder: send failed reply for transaction 17583, target dead [ 693.973550] binder: BINDER_SET_CONTEXT_MGR already set [ 693.973560] binder: 15627:15631 ioctl 40046207 0 returned -16 [ 693.974941] binder: 15627:15631 unknown command 0 [ 693.974949] binder: 15627:15631 ioctl c0306201 20000040 returned -22 [ 693.975864] binder: undelivered death notification, 0000000000000000 [ 694.020869] binder: release 15626:15635 transaction 17589 out, still active [ 694.020874] binder: unexpected work type, 4, not freed [ 694.020878] binder: undelivered TRANSACTION_COMPLETE [ 694.067213] binder: send failed reply for transaction 17589, target dead [ 694.097031] binder: BINDER_SET_CONTEXT_MGR already set [ 694.097042] binder: 15646:15648 ioctl 40046207 0 returned -16 [ 694.100134] binder: 15646:15648 unknown command 0 [ 694.100143] binder: 15646:15648 ioctl c0306201 20000040 returned -22 [ 694.100407] binder: undelivered death notification, 0000000000000000 [ 694.146734] binder: release 15650:15652 transaction 17594 out, still active [ 694.146740] binder: unexpected work type, 4, not freed [ 694.146743] binder: undelivered TRANSACTION_COMPLETE [ 694.163301] binder: send failed reply for transaction 17594, target dead [ 694.222693] binder: release 15660:15664 transaction 17598 out, still active [ 694.222699] binder: unexpected work type, 4, not freed [ 694.222703] binder: undelivered TRANSACTION_COMPLETE [ 694.235475] binder: send failed reply for transaction 17598, target dead [ 694.296218] binder: release 15671:15677 transaction 17602 out, still active [ 694.296224] binder: unexpected work type, 4, not freed [ 694.296227] binder: undelivered TRANSACTION_COMPLETE [ 694.315481] binder: BINDER_SET_CONTEXT_MGR already set [ 694.315491] binder: 15670:15679 ioctl 40046207 0 returned -16 [ 694.317356] binder: send failed reply for transaction 17602, target dead [ 694.318058] binder: 15670:15679 unknown command 0 [ 694.318067] binder: 15670:15679 ioctl c0306201 20000040 returned -22 [ 694.318287] binder: undelivered death notification, 0000000000000000 [ 694.392583] binder: release 15688:15692 transaction 17607 out, still active [ 694.392589] binder: unexpected work type, 4, not freed [ 694.392591] binder: undelivered TRANSACTION_COMPLETE [ 694.412592] binder: send failed reply for transaction 17607, target dead [ 694.439006] binder: BINDER_SET_CONTEXT_MGR already set [ 694.439017] binder: 15691:15695 ioctl 40046207 0 returned -16 [ 694.439893] binder: 15691:15695 unknown command 0 [ 694.439909] binder: 15691:15695 ioctl c0306201 20000040 returned -22 [ 694.440163] binder: undelivered death notification, 0000000000000000 [ 694.472582] binder: release 15696:15705 transaction 17612 out, still active [ 694.472587] binder: unexpected work type, 4, not freed [ 694.472590] binder: undelivered TRANSACTION_COMPLETE [ 694.502172] binder: send failed reply for transaction 17612, target dead [ 694.577642] binder: BINDER_SET_CONTEXT_MGR already set [ 694.577652] binder: 15714:15722 ioctl 40046207 0 returned -16 [ 694.579690] binder: 15714:15722 unknown command 0 [ 694.579699] binder: 15714:15722 ioctl c0306201 20000040 returned -22 [ 694.579941] binder: undelivered death notification, 0000000000000000 [ 694.621519] binder: release 15715:15721 transaction 17617 out, still active [ 694.621524] binder: unexpected work type, 4, not freed [ 694.621527] binder: undelivered TRANSACTION_COMPLETE [ 694.633712] binder: send failed reply for transaction 17617, target dead [ 694.695760] binder: release 15735:15739 transaction 17621 out, still active [ 694.695765] binder: unexpected work type, 4, not freed [ 694.695768] binder: undelivered TRANSACTION_COMPLETE [ 694.722256] binder: BINDER_SET_CONTEXT_MGR already set [ 694.722266] binder: 15741:15745 ioctl 40046207 0 returned -16 [ 694.726627] binder: 15741:15745 unknown command 0 [ 694.726636] binder: 15741:15745 ioctl c0306201 20000040 returned -22 [ 694.732289] binder: undelivered death notification, 0000000000000000 [ 694.740216] binder: send failed reply for transaction 17621, target dead [ 694.798313] binder: release 15752:15754 transaction 17626 out, still active [ 694.798319] binder: unexpected work type, 4, not freed [ 694.798322] binder: undelivered TRANSACTION_COMPLETE [ 694.827108] binder: send failed reply for transaction 17626, target dead [ 694.831927] binder: BINDER_SET_CONTEXT_MGR already set [ 694.831949] binder: 15757:15762 ioctl 40046207 0 returned -16 [ 694.840542] binder: 15757:15762 unknown command 0 [ 694.840552] binder: 15757:15762 ioctl c0306201 20000040 returned -22 [ 694.844348] binder: undelivered death notification, 0000000000000000 [ 694.925630] binder: release 15766:15775 transaction 17631 out, still active [ 694.925636] binder: unexpected work type, 4, not freed [ 694.925639] binder: undelivered TRANSACTION_COMPLETE [ 694.958400] binder: send failed reply for transaction 17631, target dead [ 695.003819] binder: BINDER_SET_CONTEXT_MGR already set [ 695.003829] binder: 15784:15790 ioctl 40046207 0 returned -16 [ 695.006717] binder: 15784:15790 unknown command 0 [ 695.006725] binder: 15784:15790 ioctl c0306201 20000040 returned -22 [ 695.007002] binder: undelivered death notification, 0000000000000000 [ 695.012241] binder: release 15786:15792 transaction 17636 out, still active [ 695.012247] binder: unexpected work type, 4, not freed [ 695.012250] binder: undelivered TRANSACTION_COMPLETE [ 695.060180] binder: send failed reply for transaction 17636, target dead [ 695.100138] binder: release 15802:15807 transaction 17640 out, still active [ 695.100144] binder: unexpected work type, 4, not freed [ 695.100147] binder: undelivered TRANSACTION_COMPLETE [ 695.114918] binder: send failed reply for transaction 17640, target dead [ 695.186392] binder: BINDER_SET_CONTEXT_MGR already set [ 695.186402] binder: 15805:15811 ioctl 40046207 0 returned -16 [ 695.187392] binder: 15805:15811 unknown command 0 [ 695.187409] binder: 15805:15811 ioctl c0306201 20000040 returned -22 [ 695.187610] binder: undelivered death notification, 0000000000000000 [ 695.211818] binder: release 15815:15822 transaction 17645 out, still active [ 695.211824] binder: unexpected work type, 4, not freed [ 695.211827] binder: undelivered TRANSACTION_COMPLETE [ 695.240068] binder: send failed reply for transaction 17645, target dead [ 695.300524] binder: release 15829:15832 transaction 17649 out, still active [ 695.300529] binder: unexpected work type, 4, not freed [ 695.300533] binder: undelivered TRANSACTION_COMPLETE [ 695.322566] binder: send failed reply for transaction 17649, target dead [ 695.328245] binder: BINDER_SET_CONTEXT_MGR already set [ 695.328254] binder: 15835:15839 ioctl 40046207 0 returned -16 [ 695.329075] binder: 15835:15839 unknown command 0 [ 695.329083] binder: 15835:15839 ioctl c0306201 20000040 returned -22 [ 695.329337] binder: undelivered death notification, 0000000000000000 [ 695.393320] binder: release 15841:15843 transaction 17654 out, still active [ 695.393326] binder: unexpected work type, 4, not freed [ 695.393329] binder: undelivered TRANSACTION_COMPLETE [ 695.408957] binder: send failed reply for transaction 17654, target dead [ 695.474855] binder: BINDER_SET_CONTEXT_MGR already set [ 695.474865] binder: 15854:15858 ioctl 40046207 0 returned -16 [ 695.491413] binder: 15854:15858 unknown command 0 [ 695.491431] binder: 15854:15858 ioctl c0306201 20000040 returned -22 [ 695.491629] binder: undelivered death notification, 0000000000000000 [ 695.515068] binder: release 15863:15865 transaction 17659 out, still active [ 695.515074] binder: unexpected work type, 4, not freed [ 695.515077] binder: undelivered TRANSACTION_COMPLETE [ 695.529195] binder: send failed reply for transaction 17659, target dead [ 695.616888] binder: release 15872:15877 transaction 17663 out, still active [ 695.616893] binder: unexpected work type, 4, not freed [ 695.616896] binder: undelivered TRANSACTION_COMPLETE [ 695.623354] binder: BINDER_SET_CONTEXT_MGR already set [ 695.623363] binder: 15879:15880 ioctl 40046207 0 returned -16 [ 695.627242] binder: 15879:15880 unknown command 0 [ 695.627251] binder: 15879:15880 ioctl c0306201 20000040 returned -22 [ 695.630169] binder: undelivered death notification, 0000000000000000 [ 695.638897] binder: send failed reply for transaction 17663, target dead [ 695.711293] binder: release 15890:15895 transaction 17668 out, still active [ 695.711299] binder: unexpected work type, 4, not freed [ 695.711302] binder: undelivered TRANSACTION_COMPLETE [ 695.746330] binder: send failed reply for transaction 17668, target dead [ 695.799118] binder: BINDER_SET_CONTEXT_MGR already set [ 695.799127] binder: 15902:15907 ioctl 40046207 0 returned -16 [ 695.801100] binder: 15902:15907 unknown command 0 [ 695.801108] binder: 15902:15907 ioctl c0306201 20000040 returned -22 [ 695.801360] binder: undelivered death notification, 0000000000000000 [ 695.846616] binder: release 15906:15915 transaction 17673 out, still active [ 695.846621] binder: unexpected work type, 4, not freed [ 695.846624] binder: undelivered TRANSACTION_COMPLETE [ 695.851391] binder: send failed reply for transaction 17673, target dead [ 695.902698] binder: release 15920:15923 transaction 17677 out, still active [ 695.902725] binder: unexpected work type, 4, not freed [ 695.902728] binder: undelivered TRANSACTION_COMPLETE [ 695.913236] binder: send failed reply for transaction 17677, target dead [ 695.960095] binder: BINDER_SET_CONTEXT_MGR already set [ 695.960104] binder: 15921:15929 ioctl 40046207 0 returned -16 [ 695.961082] binder: 15921:15929 unknown command 0 [ 695.961091] binder: 15921:15929 ioctl c0306201 20000040 returned -22 [ 695.961352] binder: undelivered death notification, 0000000000000000 [ 696.001673] binder: release 15932:15936 transaction 17682 out, still active [ 696.001678] binder: unexpected work type, 4, not freed [ 696.001681] binder: undelivered TRANSACTION_COMPLETE [ 696.022899] binder: send failed reply for transaction 17682, target dead [ 696.104630] binder: release 15945:15950 transaction 17686 out, still active [ 696.104636] binder: unexpected work type, 4, not freed [ 696.104639] binder: undelivered TRANSACTION_COMPLETE [ 696.115928] binder: BINDER_SET_CONTEXT_MGR already set [ 696.115938] binder: 15949:15954 ioctl 40046207 0 returned -16 [ 696.118139] binder: 15949:15954 unknown command 0 [ 696.118148] binder: 15949:15954 ioctl c0306201 20000040 returned -22 [ 696.118408] binder: undelivered death notification, 0000000000000000 [ 696.128785] binder: send failed reply for transaction 17686, target dead [ 696.201927] binder: release 15962:15964 transaction 17691 out, still active [ 696.201933] binder: unexpected work type, 4, not freed [ 696.201936] binder: undelivered TRANSACTION_COMPLETE [ 696.211144] binder: BINDER_SET_CONTEXT_MGR already set [ 696.211154] binder: 15965:15968 ioctl 40046207 0 returned -16 [ 696.214452] binder: 15965:15968 unknown command 0 [ 696.214467] binder: 15965:15968 ioctl c0306201 20000040 returned -22 [ 696.224417] binder: undelivered death notification, 0000000000000000 [ 696.232702] binder: send failed reply for transaction 17691, target dead [ 696.314677] binder: release 15980:15983 transaction 17696 out, still active [ 696.314683] binder: unexpected work type, 4, not freed [ 696.314686] binder: undelivered TRANSACTION_COMPLETE [ 696.332239] binder: BINDER_SET_CONTEXT_MGR already set [ 696.332248] binder: 15987:15988 ioctl 40046207 0 returned -16 [ 696.339093] binder: 15987:15988 unknown command 0 [ 696.339102] binder: 15987:15988 ioctl c0306201 20000040 returned -22 [ 696.339295] binder: undelivered death notification, 0000000000000000 [ 696.357005] binder: send failed reply for transaction 17696, target dead [ 696.437463] binder: release 15999:16005 transaction 17701 out, still active [ 696.437469] binder: unexpected work type, 4, not freed [ 696.437472] binder: undelivered TRANSACTION_COMPLETE [ 696.458705] binder: BINDER_SET_CONTEXT_MGR already set [ 696.458714] binder: 16001:16006 ioctl 40046207 0 returned -16 [ 696.459547] binder: 16001:16006 unknown command 0 [ 696.459557] binder: 16001:16006 ioctl c0306201 20000040 returned -22 [ 696.459756] binder: undelivered death notification, 0000000000000000 [ 696.473110] binder: send failed reply for transaction 17701, target dead [ 696.539373] binder: release 16016:16018 transaction 17706 out, still active [ 696.539379] binder: unexpected work type, 4, not freed [ 696.539381] binder: undelivered TRANSACTION_COMPLETE [ 696.568339] binder: BINDER_SET_CONTEXT_MGR already set [ 696.568350] binder: 16023:16029 ioctl 40046207 0 returned -16 [ 696.584731] binder: send failed reply for transaction 17706, target dead [ 696.584842] binder: 16023:16029 unknown command 0 [ 696.584852] binder: 16023:16029 ioctl c0306201 20000040 returned -22 [ 696.586464] binder: undelivered death notification, 0000000000000000 [ 696.661153] binder: release 16033:16041 transaction 17711 out, still active [ 696.661159] binder: unexpected work type, 4, not freed [ 696.661162] binder: undelivered TRANSACTION_COMPLETE [ 696.674474] binder: send failed reply for transaction 17711, target dead [ 696.721933] binder: release 16049:16053 transaction 17715 out, still active [ 696.721939] binder: unexpected work type, 4, not freed [ 696.721942] binder: undelivered TRANSACTION_COMPLETE [ 696.768794] binder: send failed reply for transaction 17715, target dead [ 696.782393] binder: BINDER_SET_CONTEXT_MGR already set [ 696.782402] binder: 16042:16048 ioctl 40046207 0 returned -16 [ 696.783210] binder: 16042:16048 unknown command 0 [ 696.783220] binder: 16042:16048 ioctl c0306201 20000040 returned -22 [ 696.783433] binder: undelivered death notification, 0000000000000000 [ 696.832359] binder: release 16064:16066 transaction 17720 out, still active [ 696.832364] binder: unexpected work type, 4, not freed [ 696.832367] binder: undelivered TRANSACTION_COMPLETE [ 696.862529] binder: send failed reply for transaction 17720, target dead [ 696.916816] binder: release 16074:16078 transaction 17724 out, still active [ 696.916821] binder: unexpected work type, 4, not freed [ 696.916824] binder: undelivered TRANSACTION_COMPLETE [ 696.923562] binder: send failed reply for transaction 17724, target dead [ 696.956737] binder: BINDER_SET_CONTEXT_MGR already set [ 696.956747] binder: 16081:16087 ioctl 40046207 0 returned -16 [ 696.962495] binder: 16081:16087 unknown command 0 [ 696.962504] binder: 16081:16087 ioctl c0306201 20000040 returned -22 [ 696.971929] binder: release 16085:16088 transaction 17729 out, still active [ 696.971935] binder: unexpected work type, 4, not freed [ 696.971937] binder: undelivered TRANSACTION_COMPLETE [ 696.972024] binder: undelivered death notification, 0000000000000000 [ 697.029075] binder: send failed reply for transaction 17729, target dead [ 697.095208] binder: BINDER_SET_CONTEXT_MGR already set [ 697.095219] binder: 16097:16104 ioctl 40046207 0 returned -16 [ 697.096306] binder: 16097:16104 unknown command 0 [ 697.096316] binder: 16097:16104 ioctl c0306201 20000040 returned -22 [ 697.099182] binder: undelivered death notification, 0000000000000000 [ 697.117697] binder: release 16107:16111 transaction 17734 out, still active [ 697.117703] binder: unexpected work type, 4, not freed [ 697.117706] binder: undelivered TRANSACTION_COMPLETE [ 697.150245] binder: send failed reply for transaction 17734, target dead [ 697.223192] binder: release 16118:16125 transaction 17738 out, still active [ 697.223198] binder: unexpected work type, 4, not freed [ 697.223201] binder: undelivered TRANSACTION_COMPLETE [ 697.236961] binder: BINDER_SET_CONTEXT_MGR already set [ 697.236972] binder: 16124:16130 ioctl 40046207 0 returned -16 [ 697.239700] binder: send failed reply for transaction 17738, target dead [ 697.243120] binder: 16124:16130 unknown command 0 [ 697.243130] binder: 16124:16130 ioctl c0306201 20000040 returned -22 [ 697.243339] binder: undelivered death notification, 0000000000000000 [ 697.349844] binder: release 16137:16142 transaction 17743 out, still active [ 697.349849] binder: unexpected work type, 4, not freed [ 697.349851] binder: undelivered TRANSACTION_COMPLETE [ 697.353842] binder: send failed reply for transaction 17743, target dead [ 697.355294] binder: BINDER_SET_CONTEXT_MGR already set [ 697.355309] binder: 16138:16145 ioctl 40046207 0 returned -16 [ 697.364362] binder: 16138:16145 unknown command 0 [ 697.364372] binder: 16138:16145 ioctl c0306201 20000040 returned -22 [ 697.364602] binder: undelivered death notification, 0000000000000000 [ 697.460707] binder: release 16154:16156 transaction 17748 out, still active [ 697.460712] binder: unexpected work type, 4, not freed [ 697.460715] binder: undelivered TRANSACTION_COMPLETE [ 697.465942] binder: send failed reply for transaction 17748, target dead [ 697.503395] binder: BINDER_SET_CONTEXT_MGR already set [ 697.503404] binder: 16162:16165 ioctl 40046207 0 returned -16 [ 697.504202] binder: 16162:16165 unknown command 0 [ 697.504211] binder: 16162:16165 ioctl c0306201 20000040 returned -22 [ 697.504449] binder: undelivered death notification, 0000000000000000 [ 697.523929] binder: release 16168:16175 transaction 17753 out, still active [ 697.523934] binder: unexpected work type, 4, not freed [ 697.523937] binder: undelivered TRANSACTION_COMPLETE [ 697.533419] binder: send failed reply for transaction 17753, target dead [ 697.628503] binder: BINDER_SET_CONTEXT_MGR already set [ 697.628512] binder: 16179:16190 ioctl 40046207 0 returned -16 [ 697.633571] binder: 16179:16190 unknown command 0 [ 697.633580] binder: 16179:16190 ioctl c0306201 20000040 returned -22 [ 697.633780] binder: undelivered death notification, 0000000000000000 [ 697.634889] binder: release 16183:16193 transaction 17758 out, still active [ 697.634893] binder: unexpected work type, 4, not freed [ 697.634896] binder: undelivered TRANSACTION_COMPLETE [ 697.687070] binder: send failed reply for transaction 17758, target dead [ 697.711013] binder: BINDER_SET_CONTEXT_MGR already set [ 697.711029] binder: 16204:16205 ioctl 40046207 0 returned -16 [ 697.714417] binder: 16204:16205 unknown command 0 [ 697.714425] binder: 16204:16205 ioctl c0306201 20000040 returned -22 [ 697.722430] binder: undelivered death notification, 0000000000000000 [ 697.778010] binder: release 16206:16212 transaction 17763 out, still active [ 697.778016] binder: unexpected work type, 4, not freed [ 697.778018] binder: undelivered TRANSACTION_COMPLETE [ 697.797485] binder: send failed reply for transaction 17763, target dead [ 697.887932] binder: BINDER_SET_CONTEXT_MGR already set [ 697.887943] binder: 16217:16218 ioctl 40046207 0 returned -16 [ 697.888736] binder: 16217:16218 unknown command 0 [ 697.888745] binder: 16217:16218 ioctl c0306201 20000040 returned -22 [ 697.888987] binder: undelivered death notification, 0000000000000000 [ 697.913901] binder: release 16226:16232 transaction 17768 out, still active [ 697.913907] binder: unexpected work type, 4, not freed [ 697.913910] binder: undelivered TRANSACTION_COMPLETE [ 697.942072] binder: send failed reply for transaction 17768, target dead [ 697.998954] binder: BINDER_SET_CONTEXT_MGR already set [ 697.998964] binder: 16247:16249 ioctl 40046207 0 returned -16 [ 698.013190] binder: 16247:16249 unknown command 0 [ 698.013202] binder: 16247:16249 ioctl c0306201 20000040 returned -22 [ 698.013495] binder: undelivered death notification, 0000000000000000 [ 698.024425] binder: release 16246:16248 transaction 17773 out, still active [ 698.024431] binder: unexpected work type, 4, not freed [ 698.024434] binder: undelivered TRANSACTION_COMPLETE [ 698.053993] binder: send failed reply for transaction 17773, target dead [ 698.111795] binder: release 16262:16265 transaction 17777 out, still active [ 698.111800] binder: unexpected work type, 4, not freed [ 698.111803] binder: undelivered TRANSACTION_COMPLETE [ 698.164809] binder: send failed reply for transaction 17777, target dead [ 698.198612] binder: BINDER_SET_CONTEXT_MGR already set [ 698.198621] binder: 16267:16272 ioctl 40046207 0 returned -16 [ 698.199481] binder: 16267:16272 unknown command 0 [ 698.199489] binder: 16267:16272 ioctl c0306201 20000040 returned -22 [ 698.201322] binder: undelivered death notification, 0000000000000000 [ 698.236057] binder: release 16281:16285 transaction 17782 out, still active [ 698.236063] binder: unexpected work type, 4, not freed [ 698.236066] binder: undelivered TRANSACTION_COMPLETE [ 698.274949] binder: send failed reply for transaction 17782, target dead [ 698.328008] binder: BINDER_SET_CONTEXT_MGR already set [ 698.328017] binder: 16289:16291 ioctl 40046207 0 returned -16 [ 698.328815] binder: 16289:16291 unknown command 0 [ 698.328824] binder: 16289:16291 ioctl c0306201 20000040 returned -22 [ 698.329009] binder: undelivered death notification, 0000000000000000 [ 698.351639] binder: release 16294:16300 transaction 17787 out, still active [ 698.351645] binder: unexpected work type, 4, not freed [ 698.351647] binder: undelivered TRANSACTION_COMPLETE [ 698.392323] binder: send failed reply for transaction 17787, target dead [ 698.444692] binder: release 16310:16313 transaction 17791 out, still active [ 698.444698] binder: unexpected work type, 4, not freed [ 698.444701] binder: undelivered TRANSACTION_COMPLETE [ 698.466511] binder: BINDER_SET_CONTEXT_MGR already set [ 698.466521] binder: 16311:16315 ioctl 40046207 0 returned -16 [ 698.467445] binder: 16311:16315 unknown command 0 [ 698.467454] binder: 16311:16315 ioctl c0306201 20000040 returned -22 [ 698.467754] binder: undelivered death notification, 0000000000000000 [ 698.496584] binder: send failed reply for transaction 17791, target dead [ 698.552002] binder: release 16325:16328 transaction 17796 out, still active [ 698.552008] binder: unexpected work type, 4, not freed [ 698.552011] binder: undelivered TRANSACTION_COMPLETE [ 698.588315] binder: send failed reply for transaction 17796, target dead [ 698.611445] binder: BINDER_SET_CONTEXT_MGR already set [ 698.611455] binder: 16335:16338 ioctl 40046207 0 returned -16 [ 698.613122] binder: 16335:16338 unknown command 0 [ 698.613130] binder: 16335:16338 ioctl c0306201 20000040 returned -22 [ 698.614472] binder: undelivered death notification, 0000000000000000 [ 698.681177] binder: release 16342:16346 transaction 17801 out, still active [ 698.681182] binder: unexpected work type, 4, not freed [ 698.681185] binder: undelivered TRANSACTION_COMPLETE [ 698.709740] binder: send failed reply for transaction 17801, target dead [ 698.774262] binder: BINDER_SET_CONTEXT_MGR already set [ 698.774272] binder: 16356:16359 ioctl 40046207 0 returned -16 [ 698.775043] binder: 16356:16359 unknown command 0 [ 698.775051] binder: 16356:16359 ioctl c0306201 20000040 returned -22 [ 698.775330] binder: undelivered death notification, 0000000000000000 [ 698.809903] binder: release 16361:16367 transaction 17806 out, still active [ 698.809908] binder: unexpected work type, 4, not freed [ 698.809911] binder: undelivered TRANSACTION_COMPLETE [ 698.830055] binder: send failed reply for transaction 17806, target dead [ 698.900452] binder: BINDER_SET_CONTEXT_MGR already set [ 698.900464] binder: 16378:16381 ioctl 40046207 0 returned -16 [ 698.905241] binder: release 16375:16382 transaction 17810 out, still active [ 698.905247] binder: unexpected work type, 4, not freed [ 698.905249] binder: undelivered TRANSACTION_COMPLETE [ 698.906623] binder: 16378:16381 unknown command 0 [ 698.906631] binder: 16378:16381 ioctl c0306201 20000040 returned -22 [ 698.906861] binder: undelivered death notification, 0000000000000000 [ 698.922461] binder: send failed reply for transaction 17810, target dead [ 699.011227] binder: release 16390:16400 transaction 17815 out, still active [ 699.011233] binder: unexpected work type, 4, not freed [ 699.011235] binder: undelivered TRANSACTION_COMPLETE [ 699.051113] binder: BINDER_SET_CONTEXT_MGR already set [ 699.051123] binder: 16397:16402 ioctl 40046207 0 returned -16 [ 699.053870] binder: 16397:16402 unknown command 0 [ 699.053879] binder: 16397:16402 ioctl c0306201 20000040 returned -22 [ 699.054508] binder: undelivered death notification, 0000000000000000 [ 699.056298] binder: send failed reply for transaction 17815, target dead [ 699.132765] binder: release 16411:16416 transaction 17820 out, still active [ 699.132771] binder: unexpected work type, 4, not freed [ 699.132774] binder: undelivered TRANSACTION_COMPLETE [ 699.160149] binder: send failed reply for transaction 17820, target dead [ 699.207501] binder: BINDER_SET_CONTEXT_MGR already set [ 699.207511] binder: 16429:16433 ioctl 40046207 0 returned -16 [ 699.208331] binder: 16429:16433 unknown command 0 [ 699.208339] binder: 16429:16433 ioctl c0306201 20000040 returned -22 [ 699.208671] binder: undelivered death notification, 0000000000000000 [ 699.214222] binder: release 16427:16434 transaction 17825 out, still active [ 699.214227] binder: unexpected work type, 4, not freed [ 699.214230] binder: undelivered TRANSACTION_COMPLETE [ 699.268184] binder: send failed reply for transaction 17825, target dead [ 699.312331] binder: release 16444:16447 transaction 17829 out, still active [ 699.312337] binder: unexpected work type, 4, not freed [ 699.312340] binder: undelivered TRANSACTION_COMPLETE [ 699.342570] binder: send failed reply for transaction 17829, target dead [ 699.357238] binder: BINDER_SET_CONTEXT_MGR already set [ 699.357248] binder: 16449:16451 ioctl 40046207 0 returned -16 [ 699.358176] binder: 16449:16451 unknown command 0 [ 699.358184] binder: 16449:16451 ioctl c0306201 20000040 returned -22 [ 699.358434] binder: undelivered death notification, 0000000000000000 [ 699.436274] binder: release 16462:16467 transaction 17834 out, still active [ 699.436279] binder: unexpected work type, 4, not freed [ 699.436282] binder: undelivered TRANSACTION_COMPLETE [ 699.450899] binder: send failed reply for transaction 17834, target dead [ 699.485048] binder: BINDER_SET_CONTEXT_MGR already set [ 699.485057] binder: 16469:16471 ioctl 40046207 0 returned -16 [ 699.506260] binder: 16469:16475 unknown command 0 [ 699.506268] binder: 16469:16475 ioctl c0306201 20000040 returned -22 [ 699.509722] binder: undelivered death notification, 0000000000000000 [ 699.537408] binder: release 16472:16478 transaction 17839 out, still active [ 699.537413] binder: unexpected work type, 4, not freed [ 699.537416] binder: undelivered TRANSACTION_COMPLETE [ 699.555317] binder: send failed reply for transaction 17839, target dead [ 699.580404] binder: BINDER_SET_CONTEXT_MGR already set [ 699.580413] binder: 16485:16487 ioctl 40046207 0 returned -16 [ 699.584004] binder: 16485:16487 unknown command 0 [ 699.584012] binder: 16485:16487 ioctl c0306201 20000040 returned -22 [ 699.584251] binder: undelivered death notification, 0000000000000000 [ 699.656418] binder: release 16492:16499 transaction 17844 out, still active [ 699.656423] binder: unexpected work type, 4, not freed [ 699.656426] binder: undelivered TRANSACTION_COMPLETE [ 699.673648] binder: send failed reply for transaction 17844, target dead [ 699.714283] binder: BINDER_SET_CONTEXT_MGR already set [ 699.714293] binder: 16505:16512 ioctl 40046207 0 returned -16 [ 699.714912] binder: release 16508:16510 transaction 17848 out, still active [ 699.714917] binder: unexpected work type, 4, not freed [ 699.714919] binder: undelivered TRANSACTION_COMPLETE [ 699.720790] binder: 16505:16512 unknown command 0 [ 699.720799] binder: 16505:16512 ioctl c0306201 20000040 returned -22 [ 699.723879] binder: undelivered death notification, 0000000000000000 [ 699.767079] binder: send failed reply for transaction 17848, target dead [ 699.823197] binder: BINDER_SET_CONTEXT_MGR already set [ 699.823206] binder: 16527:16530 ioctl 40046207 0 returned -16 [ 699.825198] binder: 16527:16530 unknown command 0 [ 699.825212] binder: 16527:16530 ioctl c0306201 20000040 returned -22 [ 699.825926] binder: undelivered death notification, 0000000000000000 [ 699.831401] binder: release 16526:16529 transaction 17854 out, still active [ 699.831406] binder: unexpected work type, 4, not freed [ 699.831408] binder: undelivered TRANSACTION_COMPLETE [ 699.869464] binder: send failed reply for transaction 17854, target dead [ 699.926629] binder: release 16541:16544 transaction 17858 out, still active [ 699.926634] binder: unexpected work type, 4, not freed [ 699.926637] binder: undelivered TRANSACTION_COMPLETE [ 699.943789] binder: BINDER_SET_CONTEXT_MGR already set [ 699.943799] binder: 16545:16549 ioctl 40046207 0 returned -16 [ 699.946018] binder: 16545:16549 unknown command 0 [ 699.946027] binder: 16545:16549 ioctl c0306201 20000040 returned -22 [ 699.946229] binder: undelivered death notification, 0000000000000000 [ 699.983323] binder: send failed reply for transaction 17858, target dead [ 700.032441] binder: release 16557:16562 transaction 17863 out, still active [ 700.032446] binder: unexpected work type, 4, not freed [ 700.032449] binder: undelivered TRANSACTION_COMPLETE [ 700.077293] binder: BINDER_SET_CONTEXT_MGR already set [ 700.077303] binder: 16565:16568 ioctl 40046207 0 returned -16 [ 700.077668] binder: send failed reply for transaction 17863, target dead [ 700.078193] binder: 16565:16568 unknown command 0 [ 700.078201] binder: 16565:16568 ioctl c0306201 20000040 returned -22 [ 700.078398] binder: undelivered death notification, 0000000000000000 [ 700.158072] binder: release 16578:16582 transaction 17868 out, still active [ 700.158078] binder: unexpected work type, 4, not freed [ 700.158081] binder: undelivered TRANSACTION_COMPLETE [ 700.193472] binder: send failed reply for transaction 17868, target dead [ 700.218510] binder: BINDER_SET_CONTEXT_MGR already set [ 700.218520] binder: 16586:16592 ioctl 40046207 0 returned -16 [ 700.220618] binder: 16586:16592 unknown command 0 [ 700.220626] binder: 16586:16592 ioctl c0306201 20000040 returned -22 [ 700.220873] binder: undelivered death notification, 0000000000000000 [ 700.440400] binder_alloc: 16600: binder_alloc_buf, no vma [ 700.440444] binder: 16600:16601 transaction failed 29189/-3, size 24-8 line 3137 [ 700.440778] binder: undelivered TRANSACTION_ERROR: 29189 [ 700.505618] binder: BINDER_SET_CONTEXT_MGR already set [ 700.505628] binder: 16602:16608 ioctl 40046207 0 returned -16 [ 700.506400] binder: 16602:16608 unknown command 0 [ 700.506409] binder: 16602:16608 ioctl c0306201 20000040 returned -22 [ 700.510423] binder: undelivered death notification, 0000000000000000 [ 700.631205] binder: BINDER_SET_CONTEXT_MGR already set [ 700.631215] binder: 16613:16622 ioctl 40046207 0 returned -16 [ 700.636960] binder: 16613:16622 unknown command 0 [ 700.636970] binder: 16613:16622 ioctl c0306201 20000040 returned -22 [ 700.637484] binder: undelivered death notification, 0000000000000000 [ 700.638601] binder: release 16620:16623 transaction 17877 out, still active [ 700.638606] binder: unexpected work type, 4, not freed [ 700.638608] binder: undelivered TRANSACTION_COMPLETE [ 700.684469] binder: send failed reply for transaction 17877, target dead [ 700.806458] binder: BINDER_SET_CONTEXT_MGR already set [ 700.806469] binder: 16641:16642 ioctl 40046207 0 returned -16 [ 700.807205] binder: 16641:16642 unknown command 0 [ 700.807230] binder: 16641:16642 ioctl c0306201 20000040 returned -22 [ 700.807470] binder: undelivered death notification, 0000000000000000 [ 700.825896] binder: release 16635:16639 transaction 17882 out, still active [ 700.825910] binder: unexpected work type, 4, not freed [ 700.825913] binder: undelivered TRANSACTION_COMPLETE [ 700.858863] binder: send failed reply for transaction 17882, target dead [ 700.913345] binder: release 16653:16654 transaction 17886 out, still active [ 700.913351] binder: unexpected work type, 4, not freed [ 700.913354] binder: undelivered TRANSACTION_COMPLETE [ 700.940481] binder: send failed reply for transaction 17886, target dead [ 700.953058] binder: BINDER_SET_CONTEXT_MGR already set [ 700.953067] binder: 16656:16660 ioctl 40046207 0 returned -16 [ 700.953790] binder: 16656:16660 unknown command 0 [ 700.953798] binder: 16656:16660 ioctl c0306201 20000040 returned -22 [ 700.953980] binder: undelivered death notification, 0000000000000000 [ 701.033960] binder: release 16670:16673 transaction 17891 out, still active [ 701.033966] binder: unexpected work type, 4, not freed [ 701.033969] binder: undelivered TRANSACTION_COMPLETE [ 701.068726] binder: send failed reply for transaction 17891, target dead [ 701.088649] binder: BINDER_SET_CONTEXT_MGR already set [ 701.088658] binder: 16676:16681 ioctl 40046207 0 returned -16 [ 701.089614] binder: 16676:16681 unknown command 0 [ 701.089623] binder: 16676:16681 ioctl c0306201 20000040 returned -22 [ 701.089889] binder: undelivered death notification, 0000000000000000 [ 701.142239] binder: release 16688:16691 transaction 17896 out, still active [ 701.142244] binder: unexpected work type, 4, not freed [ 701.142247] binder: undelivered TRANSACTION_COMPLETE [ 701.175961] binder: send failed reply for transaction 17896, target dead [ 701.240103] binder: BINDER_SET_CONTEXT_MGR already set [ 701.240114] binder: 16698:16704 ioctl 40046207 0 returned -16 [ 701.241190] binder: 16698:16704 unknown command 0 [ 701.241198] binder: 16698:16704 ioctl c0306201 20000040 returned -22 [ 701.241443] binder: undelivered death notification, 0000000000000000 [ 701.276718] binder: release 16705:16708 transaction 17901 out, still active [ 701.276724] binder: unexpected work type, 4, not freed [ 701.276727] binder: undelivered TRANSACTION_COMPLETE [ 701.311566] binder: send failed reply for transaction 17901, target dead [ 701.405701] binder: release 16721:16727 transaction 17905 out, still active [ 701.405707] binder: unexpected work type, 4, not freed [ 701.405709] binder: undelivered TRANSACTION_COMPLETE [ 701.410528] binder: BINDER_SET_CONTEXT_MGR already set [ 701.410537] binder: 16720:16726 ioctl 40046207 0 returned -16 [ 701.412042] binder: 16720:16726 unknown command 0 [ 701.412051] binder: 16720:16726 ioctl c0306201 20000040 returned -22 [ 701.412298] binder: undelivered death notification, 0000000000000000 [ 701.435441] binder: send failed reply for transaction 17905, target dead [ 701.513277] binder: release 16736:16742 transaction 17910 out, still active [ 701.513282] binder: unexpected work type, 4, not freed [ 701.513285] binder: undelivered TRANSACTION_COMPLETE [ 701.537840] binder: send failed reply for transaction 17910, target dead [ 701.579336] binder: BINDER_SET_CONTEXT_MGR already set [ 701.579349] binder: 16749:16751 ioctl 40046207 0 returned -16 [ 701.584372] binder: 16749:16751 unknown command 0 [ 701.584382] binder: 16749:16751 ioctl c0306201 20000040 returned -22 [ 701.584640] binder: undelivered death notification, 0000000000000000 [ 701.597015] binder: release 16752:16757 transaction 17915 out, still active [ 701.597021] binder: unexpected work type, 4, not freed [ 701.597024] binder: undelivered TRANSACTION_COMPLETE [ 701.611979] binder: send failed reply for transaction 17915, target dead [ 701.695855] INFO: task init:14254 blocked for more than 140 seconds. [ 701.695861] Not tainted 4.4.174+ #4 [ 701.695863] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.695884] init D ffff8801d5a2f718 29280 14254 1 0x00000000 [ 701.695895] ffff8801d5a2f718 ffff8801d7630000 18b6d4f9f16bd924 ffff8801d7630000 [ 701.695904] 0000000000000000 ffff8801d7630800 ffff8801db71f180 ffff8801db71f1a8 [ 701.695914] ffff8801db71e898 ffff8800a09e8000 ffff8801d7630000 ffffed003ab45001 [ 701.695915] Call Trace: [ 701.695930] [] schedule+0x99/0x1d0 [ 701.695939] [] schedule_preempt_disabled+0x13/0x20 [ 701.695947] [] mutex_lock_nested+0x3c2/0xb80 [ 701.695956] [] ? tty_open+0x56a/0xf50 [ 701.695964] [] ? assoc_array_gc+0x1233/0x12e0 [ 701.695971] [] ? mutex_trylock+0x500/0x500 [ 701.695980] [] ? kmem_cache_alloc_trace+0x123/0x2d0 [ 701.695987] [] tty_open+0x56a/0xf50 [ 701.695994] [] ? tty_init_dev+0x420/0x420 [ 701.696003] [] ? chrdev_open+0xca/0x630 [ 701.696011] [] ? tty_init_dev+0x420/0x420 [ 701.696018] [] chrdev_open+0x230/0x630 [ 701.696026] [] ? cdev_put.part.0+0x50/0x50 [ 701.696036] [] do_dentry_open+0x38f/0xbd0 [ 701.696043] [] ? __inode_permission2+0x9e/0x250 [ 701.696051] [] ? cdev_put.part.0+0x50/0x50 [ 701.696058] [] vfs_open+0x10b/0x210 [ 701.696066] [] ? may_open.isra.0+0xe7/0x210 [ 701.696073] [] path_openat+0x136f/0x4470 [ 701.696081] [] ? kasan_kmalloc.part.0+0xc6/0xf0 [ 701.696089] [] ? may_open.isra.0+0x210/0x210 [ 701.696098] [] ? trace_hardirqs_on+0x10/0x10 [ 701.696106] [] do_filp_open+0x1a1/0x270 [ 701.696114] [] ? user_path_mountpoint_at+0x50/0x50 [ 701.696123] [] ? __alloc_fd+0x1ea/0x490 [ 701.696130] [] ? _raw_spin_unlock+0x2d/0x50 [ 701.696138] [] do_sys_open+0x2f8/0x600 [ 701.696144] [] ? filp_open+0x70/0x70 [ 701.696153] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 701.696160] [] SyS_open+0x2d/0x40 [ 701.696168] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 701.696174] 1 lock held by init/14254: [ 701.696191] #0: (tty_mutex){+.+.+.}, at: [] tty_open+0x56a/0xf50 [ 701.696196] Sending NMI to all CPUs: [ 701.697490] NMI backtrace for cpu 0 [ 701.697494] CPU: 0 PID: 2126 Comm: syz-executor.2 Not tainted 4.4.174+ #4 [ 701.697497] task: ffff8801d596af80 task.stack: ffff8800b7338000 [ 701.697501] RIP: 0010:[] [] __lock_acquire+0x7f1/0x4f50 [ 701.697504] RSP: 0018:ffff8800b733f9c0 EFLAGS: 00000046 [ 701.697507] RAX: dffffc0000000000 RBX: 000000000000001d RCX: 1ffff1003ab2d712 [ 701.697511] RDX: 1ffff1003ab2d710 RSI: 0000000000000001 RDI: ffff8801d596b880 [ 701.697514] RBP: ffff8800b733fb38 R08: 0000000000000001 R09: 1ffff1003ab2d70d [ 701.697518] R10: ffffffff82836880 R11: 0000000000000000 R12: ffff8801d596af80 [ 701.697521] R13: ffff8801d596b870 R14: 0000000000000000 R15: 0000000000000000 [ 701.697525] FS: 0000000000d2d940(0063) GS:ffff8801db600000(0000) knlGS:0000000000000000 [ 701.697528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.697531] CR2: 0000000000710934 CR3: 00000000a6c3e000 CR4: 00000000001606b0 [ 701.697533] Stack: [ 701.697537] ffff8801d596af80 ffffffff82ea73a0 0000000000000000 0000000000000000 [ 701.697540] 0000000000000002 ffff8800b733fa68 0000000000000246 ffff8800b733fa38 [ 701.697544] ffff8801d596b840 ffff8801d596b840 ffff8801d596b890 0000000000000000 [ 701.697546] Call Trace: [ 701.697549] [] ? trace_hardirqs_on+0x10/0x10 [ 701.697552] [] ? avc_has_perm+0x1d2/0x3a0 [ 701.697555] [] ? avc_has_perm+0xac/0x3a0 [ 701.697559] [] ? avc_has_perm_noaudit+0x300/0x300 [ 701.697562] [] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 701.697565] [] lock_acquire+0x15e/0x450 [ 701.697568] [] ? selinux_getprocattr+0x590/0x590 [ 701.697571] [] ? task_has_perm+0x1c3/0x330 [ 701.697574] [] task_has_perm+0x4a/0x330 [ 701.697578] [] ? selinux_getprocattr+0x590/0x590 [ 701.697580] [] selinux_task_wait+0x24/0x30 [ 701.697583] [] security_task_wait+0x73/0xb0 [ 701.697586] [] wait_consider_task+0x28b/0x35b0 [ 701.697589] [] ? retint_kernel+0x2d/0x2d [ 701.697593] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 701.697595] [] ? trace_hardirqs_on_thunk+0x17/0x19 [ 701.697599] [] ? complete_and_exit+0x40/0x40 [ 701.697601] [] ? do_wait+0x30c/0xa00 [ 701.697604] [] do_wait+0x350/0xa00 [ 701.697607] [] ? wait_consider_task+0x35b0/0x35b0 [ 701.697610] [] SyS_wait4+0x144/0x210 [ 701.697613] [] ? SyS_waitid+0x2d0/0x2d0 [ 701.697616] [] ? kill_orphaned_pgrp+0x310/0x310 [ 701.697620] [] ? lockdep_sys_exit_thunk+0x12/0x14 [ 701.697623] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 701.697630] Code: 85 31 00 00 48 8b 45 18 49 8d 7d 10 48 89 fa 48 c1 ea 03 49 89 45 08 48 b8 00 00 00 00 00 fc ff df 80 3c 02 00 0f 85 78 31 00 00 <48> 8b 84 24 88 00 00 00 49 89 45 10 49 8d 45 18 48 89 c2 48 89 [ 701.697633] NMI backtrace for cpu 1 [ 701.697637] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 701.697640] task: ffff8801da6f4740 task.stack: ffff8800001d0000 [ 701.697643] RIP: 0010:[] [] flat_send_IPI_mask+0xf7/0x1b0 [ 701.697646] RSP: 0018:ffff8800001d7c88 EFLAGS: 00000046 [ 701.697650] RAX: 0000000000000000 RBX: 0000000000000c00 RCX: 0000000000000000 [ 701.697653] RDX: 0000000000000c00 RSI: 0000000000000000 RDI: ffffffffff5fc300 [ 701.697657] RBP: ffff8800001d7cb8 R08: 0000000000000018 R09: 0000000000000000 [ 701.697660] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000246 [ 701.697664] R13: 0000000003000000 R14: ffffffff82e5f2e0 R15: 0000000000000002 [ 701.697668] FS: 0000000000000000(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 701.697672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 701.697675] CR2: 00007fec766bb460 CR3: 00000000b4e30000 CR4: 00000000001606b0 [ 701.697677] Stack: [ 701.697681] 0000000000000001 ffffffff82e5f2e0 ffffffff831a6ac0 fffffbfff0634c34 [ 701.697684] 000000000001b6c0 0000000000000008 ffff8800001d7cd8 ffffffff81092bee [ 701.697687] 0000000000000008 ffffffff82924260 ffff8800001d7d30 ffffffff81ab8252 [ 701.697689] Call Trace: [ 701.697693] [] nmi_raise_cpu_backtrace+0x5e/0x80 [ 701.697696] [] nmi_trigger_all_cpu_backtrace.cold+0xa1/0xae [ 701.697699] [] ? print_lock+0xa8/0xab [ 701.697702] [] ? irq_force_complete_move+0x330/0x330 [ 701.697706] [] arch_trigger_all_cpu_backtrace+0x14/0x20 [ 701.697708] [] watchdog.cold+0xd3/0xee [ 701.697711] [] ? watchdog+0xac/0xa00 [ 701.697715] [] ? reset_hung_task_detector+0x20/0x20 [ 701.697717] [] kthread+0x273/0x310 [ 701.697721] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.697723] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 701.697727] [] ? finish_task_switch+0x1e1/0x660 [ 701.697730] [] ? finish_task_switch+0x1b3/0x660 [ 701.697733] [] ? __schedule+0x7af/0x1ee0 [ 701.697736] [] ? __schedule+0x7a3/0x1ee0 [ 701.697739] [] ? __schedule+0x7af/0x1ee0 [ 701.697742] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.697745] [] ret_from_fork+0x55/0x80 [ 701.697748] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.697756] Code: 00 c3 5f ff 80 e6 10 75 e1 41 c1 e5 18 44 89 2c 25 10 c3 5f ff 44 89 fa 09 da 80 cf 04 41 83 ff 02 0f 44 d3 89 14 25 00 c3 5f ff <41> f7 c4 00 02 00 00 75 1e 4c 89 e7 57 9d 0f 1f 44 00 00 e8 f1 [ 701.697877] Kernel panic - not syncing: hung_task: blocked tasks [ 701.697885] CPU: 1 PID: 20 Comm: khungtaskd Not tainted 4.4.174+ #4 [ 701.697894] 0000000000000000 4403cf19b0b0d684 ffff8800001d7c60 ffffffff81aad1a1 [ 701.697903] ffff8801d7630000 ffffffff82872120 dffffc0000000000 0000000000000002 [ 701.697912] 00000000003ffcaf ffff8800001d7d40 ffffffff813a48c2 0000000041b58ab3 [ 701.697914] Call Trace: [ 701.697924] [] dump_stack+0xc1/0x120 [ 701.697933] [] panic+0x1b9/0x37b [ 701.697941] [] ? add_taint.cold+0x16/0x16 [ 701.697949] [] ? find_next_bit+0x44/0x50 [ 701.697958] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 701.697965] [] ? nmi_trigger_all_cpu_backtrace+0x3c6/0x490 [ 701.697972] [] watchdog.cold+0xe4/0xee [ 701.697979] [] ? watchdog+0xac/0xa00 [ 701.697986] [] ? reset_hung_task_detector+0x20/0x20 [ 701.697994] [] kthread+0x273/0x310 [ 701.698002] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.698008] [] ? _raw_spin_unlock_irq+0x39/0x60 [ 701.698015] [] ? finish_task_switch+0x1e1/0x660 [ 701.698020] [] ? finish_task_switch+0x1b3/0x660 [ 701.698028] [] ? __schedule+0x7af/0x1ee0 [ 701.698035] [] ? __schedule+0x7a3/0x1ee0 [ 701.698042] [] ? __schedule+0x7af/0x1ee0 [ 701.698050] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.698057] [] ret_from_fork+0x55/0x80 [ 701.698065] [] ? kthread_create_on_node+0x4c0/0x4c0 [ 701.698348] Kernel Offset: disabled [ 713.478737] Rebooting in 86400 seconds..