97ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 1 printk messages dropped ** [ 661.720317] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 661.720326] binder: 21573:21578 ioctl 40046207 0 returned -16 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 661.724075] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 1 printk messages dropped ** [ 661.796700] binder: BINDER_SET_CONTEXT_MGR already set [ 661.796709] binder: 21593:21601 ioctl 40046207 0 returned -16 18:08:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 661.796829] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 661.894604] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 661.993736] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 662.055947] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 662.142309] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 662.142319] binder: 21672:21675 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 662.220442] binder: BINDER_SET_CONTEXT_MGR already set 18:08:53 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 662.313383] binder: BINDER_SET_CONTEXT_MGR already set [ 662.313392] binder: 21708:21716 ioctl 40046207 0 returned -16 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 662.313494] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 662.313512] binder: 21708:21716 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 662.359560] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 662.359569] binder: 21727:21734 ioctl 40046207 0 returned -16 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 662.562192] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 662.640048] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 662.693127] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 662.693136] binder: 21793:21795 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 662.781146] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 662.873129] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 662.873142] binder: 21833:21840 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 662.996905] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 662.996913] binder: 21863:21868 ioctl 40046207 0 returned -16 [ 662.997030] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 1 printk messages dropped ** [ 663.134134] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 663.209044] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 663.256189] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 663.350953] binder: BINDER_SET_CONTEXT_MGR already set 18:08:54 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:54 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:54 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:54 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 663.441403] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 663.441412] binder: 21982:21988 ioctl 40046207 0 returned -16 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 663.515814] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 663.567509] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 663.567528] binder: 22021:22028 ioctl 40046207 0 returned -16 [ 663.567740] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 1 printk messages dropped ** [ 663.633490] binder: BINDER_SET_CONTEXT_MGR already set [ 663.633499] binder: 22037:22044 ioctl 40046207 0 returned -16 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 663.633610] binder_alloc: 23734: binder_alloc_buf, no vma [ 663.633629] binder: 22037:22044 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 663.686148] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 663.686157] binder: 22063:22064 ioctl 40046207 0 returned -16 [ 663.686258] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 1 printk messages dropped ** [ 663.750002] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 663.750010] binder: 22077:22081 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 663.816473] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 663.816483] binder: 22098:22103 ioctl 40046207 0 returned -16 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 663.879901] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 663.983042] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 664.027373] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 664.027382] binder: 22152:22160 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 664.166343] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 664.251227] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:55 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:55 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 664.251237] binder: 22216:22220 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 664.314686] binder: BINDER_SET_CONTEXT_MGR already set 18:08:55 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 664.374852] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 664.448625] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 664.527248] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 664.657774] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 664.776844] binder: BINDER_SET_CONTEXT_MGR already set [ 664.776854] binder: 22351:22354 ioctl 40046207 0 returned -16 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 664.776964] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 664.835591] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 664.835600] binder: 22365:22371 ioctl 40046207 0 returned -16 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 2 printk messages dropped ** [ 664.928432] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 665.034068] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 665.109753] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 665.109762] binder: 22431:22437 ioctl 40046207 0 returned -16 [ 665.110250] binder_alloc: 23734: binder_alloc_buf, no vma [ 665.110270] binder: 22431:22437 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 665.181734] binder: BINDER_SET_CONTEXT_MGR already set [ 665.181745] binder: 22453:22458 ioctl 40046207 0 returned -16 [ 665.181862] binder_alloc: 23734: binder_alloc_buf, no vma [ 665.181882] binder: 22453:22458 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 665.235344] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 665.235354] binder: 22468:22477 ioctl 40046207 0 returned -16 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 665.293859] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:56 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:56 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:56 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 665.368759] binder: BINDER_SET_CONTEXT_MGR already set 18:08:56 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 665.368769] binder: 22501:22507 ioctl 40046207 0 returned -16 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 665.434852] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 665.493828] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 665.493837] binder: 22546:22548 ioctl 40046207 0 returned -16 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 2 printk messages dropped ** [ 665.591986] binder: BINDER_SET_CONTEXT_MGR already set [ 665.591997] binder: 22563:22575 ioctl 40046207 0 returned -16 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 665.684028] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 665.758404] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 665.845965] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 665.845974] binder: 22623:22628 ioctl 40046207 0 returned -16 [ 665.846077] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 665.927031] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 665.927042] binder: 22653:22660 ioctl 40046207 0 returned -16 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 665.927143] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 666.004109] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 666.004118] binder: 22673:22679 ioctl 40046207 0 returned -16 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 666.114017] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 666.197179] binder: BINDER_SET_CONTEXT_MGR already set 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:57 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 666.197189] binder: 22717:22724 ioctl 40046207 0 returned -16 18:08:57 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:57 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 666.324121] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 7 printk messages dropped ** [ 666.475862] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 666.475871] binder: 22795:22802 ioctl 40046207 0 returned -16 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 666.476060] binder_alloc: 23734: binder_alloc_buf, no vma [ 666.476080] binder: 22795:22802 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 666.591342] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 666.636444] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 666.741458] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 666.831774] binder: BINDER_SET_CONTEXT_MGR already set [ 666.831783] binder: 22888:22891 ioctl 40046207 0 returned -16 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 666.831954] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 666.831973] binder: 22888:22891 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 666.915057] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 666.915067] binder: 22907:22913 ioctl 40046207 0 returned -16 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 666.987403] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 667.048926] binder: BINDER_SET_CONTEXT_MGR already set [ 667.048936] binder: 22946:22953 ioctl 40046207 0 returned -16 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 667.118951] binder: BINDER_SET_CONTEXT_MGR already set [ 667.118960] binder: 22969:22972 ioctl 40046207 0 returned -16 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 667.120077] binder_alloc: 23734: binder_alloc_buf, no vma 18:08:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:58 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:58 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 5 printk messages dropped ** [ 667.351746] binder: BINDER_SET_CONTEXT_MGR already set 18:08:58 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 667.351755] binder: 23012:23027 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 667.406165] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 667.406175] binder: 23047:23052 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 667.508217] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 667.595872] binder: BINDER_SET_CONTEXT_MGR already set [ 667.595881] binder: 23096:23100 ioctl 40046207 0 returned -16 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 667.595984] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 667.669349] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 667.754243] binder: BINDER_SET_CONTEXT_MGR already set [ 667.754253] binder: 23135:23149 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 667.863668] binder: BINDER_SET_CONTEXT_MGR already set [ 667.863677] binder: 23163:23167 ioctl 40046207 0 returned -16 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 667.864113] binder_alloc: 23734: binder_alloc_buf, no vma [ 667.864133] binder: 23163:23167 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 667.976379] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 668.040925] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 668.040934] binder: 23211:23214 ioctl 40046207 0 returned -16 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 668.119134] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 668.178362] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 668.248941] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 668.248951] binder: 23263:23270 ioctl 40046207 0 returned -16 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 668.314449] binder: BINDER_SET_CONTEXT_MGR already set ** 3 printk messages dropped ** [ 668.378292] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:08:59 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:08:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:08:59 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 668.456605] binder: BINDER_SET_CONTEXT_MGR already set 18:08:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 668.456726] binder: 23313:23321 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 668.537236] binder: BINDER_SET_CONTEXT_MGR already set 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 668.537247] binder: 23334:23347 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 668.537366] binder: 23334:23347 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 7 printk messages dropped ** [ 668.699174] binder: 23390:23392 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 668.750628] binder: 23401:23404 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 668.812046] binder: BINDER_SET_CONTEXT_MGR already set 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 668.812056] binder: 23419:23424 ioctl 40046207 0 returned -16 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 1 printk messages dropped ** [ 668.812198] binder: 23419:23424 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 668.916234] binder: 23437:23443 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 669.054316] binder: 23454:23459 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 6 printk messages dropped ** [ 669.240378] binder_alloc: 23734: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 669.301936] binder_alloc: 23734: binder_alloc_buf, no vma [ 669.301958] binder: 23531:23538 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 669.361267] binder: BINDER_SET_CONTEXT_MGR already set [ 669.361277] binder: 23546:23553 ioctl 40046207 0 returned -16 [ 669.361519] binder_alloc: 23734: binder_alloc_buf, no vma [ 669.361539] binder: 23546:23553 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 669.445909] binder: BINDER_SET_CONTEXT_MGR already set [ 669.445920] binder: 23569:23586 ioctl 40046207 0 returned -16 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 669.446020] binder_alloc: 23734: binder_alloc_buf, no vma [ 669.446042] binder: 23569:23586 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 669.510711] binder: BINDER_SET_CONTEXT_MGR already set 18:09:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 669.510721] binder: 23591:23597 ioctl 40046207 0 returned -16 [ 669.513457] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 669.513477] binder: 23591:23597 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:00 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:00 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 669.570252] binder: BINDER_SET_CONTEXT_MGR already set [ 669.570261] binder: 23617:23623 ioctl 40046207 0 returned -16 [ 669.570492] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 669.570513] binder: 23617:23623 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 669.669871] binder: BINDER_SET_CONTEXT_MGR already set [ 669.669882] binder: 23633:23644 ioctl 40046207 0 returned -16 [ 669.669996] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 669.670015] binder: 23633:23644 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 669.755163] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 669.755172] binder: 23659:23662 ioctl 40046207 0 returned -16 [ 669.755278] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 669.755309] binder: 23659:23662 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 669.859417] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 669.931614] binder: BINDER_SET_CONTEXT_MGR already set [ 669.931625] binder: 23703:23718 ioctl 40046207 0 returned -16 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 2 printk messages dropped ** [ 670.015822] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 670.015831] binder: 23727:23738 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 670.082580] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 670.082589] binder: 23750:23758 ioctl 40046207 0 returned -16 [ 670.083470] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 670.083489] binder: 23750:23758 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 670.298780] binder: 23795:23798 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 670.330994] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 670.343452] binder: 23816:23817 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 670.424351] binder: BINDER_SET_CONTEXT_MGR already set 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 670.424470] binder: 23832:23842 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 670.507035] binder: 23854:23861 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:01 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 670.596528] binder: 23881:23889 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 670.656654] binder: 23906:23909 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 670.717174] binder: 23923:23928 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 670.790011] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 670.790031] binder: 23946:23948 transaction failed 29189/-3, size 72-1008042246168 line 3136 ** 2 printk messages dropped ** [ 670.861347] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 670.933203] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 671.013912] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 671.093327] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 1 printk messages dropped ** [ 671.194092] binder: BINDER_SET_CONTEXT_MGR already set 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 5 printk messages dropped ** [ 671.354550] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 671.410210] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 671.484081] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 671.562182] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 671.562201] binder: 24137:24142 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:02 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 671.629096] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:02 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:02 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 671.899094] binder: BINDER_SET_CONTEXT_MGR already set 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 672.041343] binder: BINDER_SET_CONTEXT_MGR already set 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 672.041378] binder: 24267:24270 ioctl 40046207 0 returned -16 ** 1 printk messages dropped ** [ 672.044705] binder: 24267:24270 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 7 printk messages dropped ** [ 672.226518] binder: 24314:24319 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 672.346003] binder: 24332:24355 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 672.405978] binder: BINDER_SET_CONTEXT_MGR already set [ 672.405987] binder: 24359:24368 ioctl 40046207 0 returned -16 [ 672.406243] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 672.406263] binder: 24359:24368 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 672.499525] binder: BINDER_SET_CONTEXT_MGR already set 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 672.499535] binder: 24385:24388 ioctl 40046207 0 returned -16 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 1 printk messages dropped ** [ 672.499666] binder: 24385:24388 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 672.540777] binder: 24394:24400 transaction failed 29189/-3, size 72-1008042246168 line 3136 ** 3 printk messages dropped ** [ 672.602687] binder: 24411:24415 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 672.662989] binder: 24423:24429 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 672.790912] binder: 24453:24458 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 672.832748] binder: 24471:24473 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:03 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:03 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 672.894309] binder: 24487:24493 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 672.987835] binder: 24508:24512 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 673.054229] binder: BINDER_SET_CONTEXT_MGR already set 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 673.054371] binder: 24520:24521 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 673.222249] binder: 24533:24558 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 673.279145] binder: 24568:24572 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 2 printk messages dropped ** [ 673.352565] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 673.426263] binder_alloc: 23734: binder_alloc_buf, no vma [ 673.426283] binder: 24607:24613 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 673.600976] binder: BINDER_SET_CONTEXT_MGR already set 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 5 printk messages dropped ** [ 673.681970] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 673.738779] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 673.867012] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 673.867031] binder: 24714:24719 transaction failed 29189/-3, size 72-1008042246168 line 3136 ** 2 printk messages dropped ** [ 673.912680] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:04 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 673.912698] binder: 24726:24728 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 674.042129] binder: BINDER_SET_CONTEXT_MGR already set [ 674.042138] binder: 24746:24756 ioctl 40046207 0 returned -16 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 674.042241] binder_alloc: 23734: binder_alloc_buf, no vma [ 674.042262] binder: 24746:24756 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 674.074622] binder: BINDER_SET_CONTEXT_MGR already set [ 674.074631] binder: 24766:24773 ioctl 40046207 0 returned -16 [ 674.076924] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 674.076944] binder: 24766:24773 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 674.152387] binder: BINDER_SET_CONTEXT_MGR already set [ 674.152498] binder: 24778:24789 ioctl 40046207 0 returned -16 [ 674.152621] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:04 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:04 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.152639] binder: 24778:24789 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 674.224601] binder: BINDER_SET_CONTEXT_MGR already set [ 674.224613] binder: 24802:24809 ioctl 40046207 0 returned -16 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.225917] binder_alloc: 23734: binder_alloc_buf, no vma [ 674.225939] binder: 24802:24809 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.290218] binder: BINDER_SET_CONTEXT_MGR already set 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.290227] binder: 24820:24827 ioctl 40046207 0 returned -16 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 674.291418] binder_alloc: 23734: binder_alloc_buf, no vma [ 674.291438] binder: 24820:24827 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.356117] binder: BINDER_SET_CONTEXT_MGR already set [ 674.356126] binder: 24841:24844 ioctl 40046207 0 returned -16 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 674.356811] binder_alloc: 23734: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 674.485651] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 674.548506] binder_alloc: 23734: binder_alloc_buf, no vma ** 3 printk messages dropped ** [ 674.649825] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 674.649847] binder: 24901:24911 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 5 printk messages dropped ** [ 674.805773] binder: 24954:24958 ioctl 40046207 0 returned -16 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 674.832926] binder: 24960:24965 ioctl 40046207 0 returned -16 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 674.833037] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 674.907118] binder: 24988:24990 ioctl 40046207 0 returned -16 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 674.962019] binder: 25000:25003 ioctl 40046207 0 returned -16 [ 674.962116] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:05 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:05 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 675.030639] binder: 25010:25013 ioctl 40046207 0 returned -16 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 675.031522] binder_alloc: 23734: binder_alloc_buf, no vma ** 2 printk messages dropped ** [ 675.141527] binder: 25044:25049 ioctl 40046207 0 returned -16 [ 675.141625] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 675.141644] binder: 25044:25049 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 1 printk messages dropped ** [ 675.184492] binder: 25054:25061 ioctl 40046207 0 returned -16 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 675.184600] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 675.248499] binder: 25069:25073 ioctl 40046207 0 returned -16 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 675.248609] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 675.314052] binder: 25092:25096 ioctl 40046207 0 returned -16 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 675.382947] binder: 25107:25115 ioctl 40046207 0 returned -16 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 675.451353] binder: 25126:25133 ioctl 40046207 0 returned -16 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 675.532233] binder: 25136:25141 ioctl 40046207 0 returned -16 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 675.532347] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 675.572306] binder: 25162:25164 ioctl 40046207 0 returned -16 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 675.644144] binder: 25179:25183 ioctl 40046207 0 returned -16 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 675.748614] binder: 25187:25210 ioctl 40046207 0 returned -16 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 675.822785] binder: BINDER_SET_CONTEXT_MGR already set [ 675.822795] binder: 25218:25236 ioctl 40046207 0 returned -16 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 675.822893] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 675.877060] binder: BINDER_SET_CONTEXT_MGR already set 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 675.877069] binder: 25247:25249 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 675.960919] binder: BINDER_SET_CONTEXT_MGR already set 18:09:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:06 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:06 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:06 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:06 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 675.960929] binder: 25260:25266 ioctl 40046207 0 returned -16 [ 675.962243] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 1 printk messages dropped ** [ 676.042178] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 676.042188] binder: 25280:25285 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 676.083037] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 676.083046] binder: 25302:25306 ioctl 40046207 0 returned -16 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 676.136766] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 676.224304] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 676.224314] binder: 25337:25345 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 676.277058] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 676.277067] binder: 25358:25360 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 676.364350] binder: BINDER_SET_CONTEXT_MGR already set [ 676.364359] binder: 25376:25382 ioctl 40046207 0 returned -16 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 676.364467] binder_alloc: 23734: binder_alloc_buf, no vma [ 676.364486] binder: 25376:25382 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 676.424855] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 676.485434] binder: BINDER_SET_CONTEXT_MGR already set [ 676.485443] binder: 25410:25416 ioctl 40046207 0 returned -16 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 676.586581] binder: BINDER_SET_CONTEXT_MGR already set [ 676.586591] binder: 25428:25444 ioctl 40046207 0 returned -16 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 676.586700] binder_alloc: 23734: binder_alloc_buf, no vma [ 676.586720] binder: 25428:25444 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 676.657964] binder: BINDER_SET_CONTEXT_MGR already set [ 676.657973] binder: 25459:25460 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 676.741770] binder: BINDER_SET_CONTEXT_MGR already set [ 676.741779] binder: 25473:25477 ioctl 40046207 0 returned -16 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 676.741962] binder_alloc: 23734: binder_alloc_buf, no vma [ 676.741981] binder: 25473:25477 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 676.795739] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:07 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:07 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:07 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 676.795750] binder: 25486:25494 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 676.949373] binder: BINDER_SET_CONTEXT_MGR already set 18:09:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 676.949386] binder: 25526:25532 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 677.086074] binder: BINDER_SET_CONTEXT_MGR already set [ 677.086083] binder: 25557:25571 ioctl 40046207 0 returned -16 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 2 printk messages dropped ** [ 677.119333] binder: BINDER_SET_CONTEXT_MGR already set [ 677.119402] binder: 25574:25578 ioctl 40046207 0 returned -16 [ 677.119561] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 1 printk messages dropped ** [ 677.319291] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 677.319310] binder: 25608:25610 ioctl 40046207 0 returned -16 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 677.398096] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 677.534268] binder: BINDER_SET_CONTEXT_MGR already set [ 677.534278] binder: 25648:25656 ioctl 40046207 0 returned -16 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 677.610383] binder: BINDER_SET_CONTEXT_MGR already set [ 677.610393] binder: 25686:25693 ioctl 40046207 0 returned -16 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 677.677118] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 677.787011] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) [ 677.787020] binder: 25732:25742 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 677.911194] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 677.911204] binder: 25764:25769 ioctl 40046207 0 returned -16 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 678.000603] binder: BINDER_SET_CONTEXT_MGR already set [ 678.000612] binder: 25784:25788 ioctl 40046207 0 returned -16 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 678.000730] binder_alloc: 23734: binder_alloc_buf, no vma ** 1 printk messages dropped ** [ 678.090544] binder: BINDER_SET_CONTEXT_MGR already set 18:09:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:08 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:08 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 678.090554] binder: 25803:25809 ioctl 40046207 0 returned -16 [ 678.090764] binder_alloc: 23734: binder_alloc_buf, no vma [ 678.090784] binder: 25803:25809 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 678.139493] binder: BINDER_SET_CONTEXT_MGR already set [ 678.139504] binder: 25817:25823 ioctl 40046207 0 returned -16 [ 678.139603] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:08 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 678.139622] binder: 25817:25823 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.188908] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.188971] binder: 25830:25833 ioctl 40046207 0 returned -16 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 678.270789] binder: BINDER_SET_CONTEXT_MGR already set [ 678.270808] binder: 25847:25856 ioctl 40046207 0 returned -16 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.271612] binder_alloc: 23734: binder_alloc_buf, no vma [ 678.271633] binder: 25847:25856 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 4 printk messages dropped ** [ 678.405218] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 678.405228] binder: 25884:25886 ioctl 40046207 0 returned -16 ** 2 printk messages dropped ** [ 678.501358] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) [ 678.501367] binder: 25899:25917 ioctl 40046207 0 returned -16 [ 678.501666] binder_alloc: 23734: binder_alloc_buf, no vma 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.501687] binder: 25899:25917 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 678.596745] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 2 printk messages dropped ** [ 678.596910] binder: 25938:25944 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.673497] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 2 printk messages dropped ** [ 678.673646] binder: 25956:25963 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 3 printk messages dropped ** [ 678.728568] binder: 25975:25979 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) [ 678.793326] binder: BINDER_SET_CONTEXT_MGR already set 18:09:09 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 2 printk messages dropped ** [ 678.793471] binder: 25997:26002 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:09 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 678.842324] binder: 26014:26016 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) ** 3 printk messages dropped ** [ 678.908246] binder: 26031:26034 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) ** 3 printk messages dropped ** [ 679.098399] binder: 26064:26079 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 679.191295] binder: 26094:26096 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 679.246817] binder: 26110:26111 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) [ 679.318294] binder: BINDER_SET_CONTEXT_MGR already set 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 2 printk messages dropped ** [ 679.318487] binder: 26135:26137 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 679.400106] binder: 26151:26156 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 679.454975] binder: 26167:26174 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) [ 679.518663] binder: BINDER_SET_CONTEXT_MGR already set [ 679.518673] binder: 26184:26191 ioctl 40046207 0 returned -16 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_group_source_req(r1, 0x0, 0x31, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0xd) fcntl$setstatus(r0, 0x4, 0x42803) ** 1 printk messages dropped ** [ 679.519116] binder: 26184:26191 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 3 printk messages dropped ** [ 679.600783] binder: 26210:26218 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 4: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) 18:09:10 executing program 3: r0 = gettid() sched_rr_get_interval(0x0, &(0x7f0000001300)) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x999, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000040)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76ce", 0x1b) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x5, 0xb, 0x10, "2ded4e01a5ed29c4eeb6903d7d5ddc5e6b23abe76a7a844c0f48f70bcb02215c81ce7eeead2bc27f46e7d79247394e6f39ed214c2eff04e1287b45bace050f53", "9386a7e996ac958905e27ade4d6c4643c5c52c22e4e2344b8076d0702ca0543fd4ef51b7cee8cfcb4a2293d4e35dac94baf8daa94cbfefacaf3d76a636875f55", "c3eeb18b757ca997ac852af7fd918bf171863876d521218f25a6759cb40b35f4", [0x9, 0x100000000]}) bind(r3, &(0x7f0000001180)=@nl=@unspec, 0x80) fchdir(r2) sched_rr_get_interval(r0, &(0x7f0000000140)) r6 = memfd_create(&(0x7f00000000c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000080)={{0x3, 0x3, 0x401, 0x0, 0x40}, 0x68d41ccc, 0x0, 0xc4b}) getrlimit(0x9, &(0x7f0000000340)) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$packet(r6, &(0x7f0000000100)={0x11, 0x19, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) set_tid_address(&(0x7f0000001200)) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) chroot(&(0x7f000009a000)='./file0\x00') ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000001500)=0x200) getegid() r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKALIGNOFF(r5, 0x127a, &(0x7f0000000280)) getdents64(r7, &(0x7f0000002580)=""/4096, 0x258) fstatfs(r4, &(0x7f00000002c0)=""/111) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001280)='/proc/self/net/pfkey\x00', 0x103800, 0x0) fchmod(r5, 0x48) 18:09:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000004800000000000000180000b4ea000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852af1d900000010200000000000000000006cdb84bea425dfc962730000000000000000000000000000000000000000852a62730000001000000097ff28d6c9b02a440000000000"], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="020000000000000018000000000000003000000000000000"]], 0x0, 0x0, 0x0}) 18:09:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) connect(0xffffffffffffffff, &(0x7f00000000c0)=@hci, 0x80) ** 3 printk messages dropped ** [ 679.677196] binder: 26224:26232 transaction failed 29189/-3, size 72-1008042246168 line 3136 18:09:10 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) ** 116 printk messages dropped ** [ 682.158555] binder: BINDER_SET_CONTEXT_MGR already set [ 682.158565] binder: 26874:26877 ioctl 40046207 0 returned -16 [ 682.158682] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.158703] binder: 26874:26877 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.283214] binder: BINDER_SET_CONTEXT_MGR already set [ 682.283224] binder: 26887:26910 ioctl 40046207 0 returned -16 [ 682.283345] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.283365] binder: 26887:26910 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.389019] binder: BINDER_SET_CONTEXT_MGR already set [ 682.389029] binder: 26927:26932 ioctl 40046207 0 returned -16 [ 682.389148] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.389167] binder: 26927:26932 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.460823] binder: BINDER_SET_CONTEXT_MGR already set [ 682.460832] binder: 26948:26955 ioctl 40046207 0 returned -16 [ 682.460938] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.460956] binder: 26948:26955 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.521343] binder: BINDER_SET_CONTEXT_MGR already set [ 682.521353] binder: 26970:26974 ioctl 40046207 0 returned -16 [ 682.521468] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.521487] binder: 26970:26974 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.597504] binder: BINDER_SET_CONTEXT_MGR already set [ 682.597513] binder: 26986:26989 ioctl 40046207 0 returned -16 [ 682.597619] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.597638] binder: 26986:26989 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.726919] binder: BINDER_SET_CONTEXT_MGR already set [ 682.726928] binder: 27024:27028 ioctl 40046207 0 returned -16 [ 682.727030] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.727048] binder: 27024:27028 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.810496] binder: BINDER_SET_CONTEXT_MGR already set [ 682.810505] binder: 27041:27044 ioctl 40046207 0 returned -16 [ 682.810621] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.810640] binder: 27041:27044 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.846506] binder: BINDER_SET_CONTEXT_MGR already set [ 682.846516] binder: 27058:27060 ioctl 40046207 0 returned -16 [ 682.846633] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.846651] binder: 27058:27060 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 682.922773] binder: BINDER_SET_CONTEXT_MGR already set [ 682.922784] binder: 27075:27079 ioctl 40046207 0 returned -16 [ 682.924059] binder_alloc: 23734: binder_alloc_buf, no vma [ 682.924079] binder: 27075:27079 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.042525] binder: BINDER_SET_CONTEXT_MGR already set [ 683.042534] binder: 27087:27110 ioctl 40046207 0 returned -16 [ 683.042636] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.042656] binder: 27087:27110 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.103647] binder: BINDER_SET_CONTEXT_MGR already set [ 683.103656] binder: 27111:27122 ioctl 40046207 0 returned -16 [ 683.103759] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.103778] binder: 27111:27122 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.244861] binder: BINDER_SET_CONTEXT_MGR already set [ 683.244870] binder: 27143:27166 ioctl 40046207 0 returned -16 [ 683.244970] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.244989] binder: 27143:27166 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.306900] binder: BINDER_SET_CONTEXT_MGR already set [ 683.306911] binder: 27174:27185 ioctl 40046207 0 returned -16 [ 683.307027] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.307045] binder: 27174:27185 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.412141] binder: BINDER_SET_CONTEXT_MGR already set [ 683.412150] binder: 27199:27211 ioctl 40046207 0 returned -16 [ 683.412255] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.412274] binder: 27199:27211 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.496622] binder: BINDER_SET_CONTEXT_MGR already set [ 683.496631] binder: 27223:27227 ioctl 40046207 0 returned -16 [ 683.496741] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.496761] binder: 27223:27227 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.556000] binder: BINDER_SET_CONTEXT_MGR already set [ 683.556009] binder: 27245:27246 ioctl 40046207 0 returned -16 [ 683.556115] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.556134] binder: 27245:27246 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.618662] binder: BINDER_SET_CONTEXT_MGR already set [ 683.618672] binder: 27263:27272 ioctl 40046207 0 returned -16 [ 683.618786] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.618817] binder: 27263:27272 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.685180] binder: BINDER_SET_CONTEXT_MGR already set [ 683.685189] binder: 27287:27293 ioctl 40046207 0 returned -16 [ 683.686312] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.686332] binder: 27287:27293 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.776535] binder: BINDER_SET_CONTEXT_MGR already set [ 683.776545] binder: 27303:27313 ioctl 40046207 0 returned -16 [ 683.776646] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.776667] binder: 27303:27313 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.835194] binder: BINDER_SET_CONTEXT_MGR already set [ 683.835204] binder: 27320:27329 ioctl 40046207 0 returned -16 [ 683.835514] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.835534] binder: 27320:27329 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.912334] binder: BINDER_SET_CONTEXT_MGR already set [ 683.912343] binder: 27338:27345 ioctl 40046207 0 returned -16 [ 683.912456] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.912476] binder: 27338:27345 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 683.956738] binder: BINDER_SET_CONTEXT_MGR already set [ 683.956748] binder: 27355:27359 ioctl 40046207 0 returned -16 [ 683.956847] binder_alloc: 23734: binder_alloc_buf, no vma [ 683.956866] binder: 27355:27359 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.017581] binder: BINDER_SET_CONTEXT_MGR already set [ 684.017592] binder: 27368:27377 ioctl 40046207 0 returned -16 [ 684.017710] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.017729] binder: 27368:27377 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.095968] binder: BINDER_SET_CONTEXT_MGR already set [ 684.095978] binder: 27380:27387 ioctl 40046207 0 returned -16 [ 684.096078] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.096097] binder: 27380:27387 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.184144] binder: BINDER_SET_CONTEXT_MGR already set [ 684.184153] binder: 27404:27409 ioctl 40046207 0 returned -16 [ 684.184471] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.184490] binder: 27404:27409 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.251258] binder: BINDER_SET_CONTEXT_MGR already set [ 684.251268] binder: 27425:27434 ioctl 40046207 0 returned -16 [ 684.251384] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.251404] binder: 27425:27434 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.378428] binder: BINDER_SET_CONTEXT_MGR already set [ 684.378437] binder: 27449:27468 ioctl 40046207 0 returned -16 [ 684.378967] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.379007] binder: 27449:27468 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.461173] binder: BINDER_SET_CONTEXT_MGR already set [ 684.461183] binder: 27485:27490 ioctl 40046207 0 returned -16 [ 684.461382] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.461402] binder: 27485:27490 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.542138] binder: BINDER_SET_CONTEXT_MGR already set [ 684.542148] binder: 27498:27512 ioctl 40046207 0 returned -16 [ 684.542363] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.542383] binder: 27498:27512 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.629959] binder: BINDER_SET_CONTEXT_MGR already set [ 684.629969] binder: 27522:27535 ioctl 40046207 0 returned -16 [ 684.630073] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.630093] binder: 27522:27535 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.717723] binder: BINDER_SET_CONTEXT_MGR already set [ 684.717732] binder: 27557:27561 ioctl 40046207 0 returned -16 [ 684.733754] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.733779] binder: 27557:27561 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.833131] binder: BINDER_SET_CONTEXT_MGR already set [ 684.833141] binder: 27583:27589 ioctl 40046207 0 returned -16 [ 684.833242] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.833260] binder: 27583:27589 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.901256] binder: BINDER_SET_CONTEXT_MGR already set [ 684.901266] binder: 27601:27609 ioctl 40046207 0 returned -16 [ 684.902102] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.902122] binder: 27601:27609 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 684.952862] binder: BINDER_SET_CONTEXT_MGR already set [ 684.952871] binder: 27623:27625 ioctl 40046207 0 returned -16 [ 684.952972] binder_alloc: 23734: binder_alloc_buf, no vma [ 684.952991] binder: 27623:27625 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.006959] binder: BINDER_SET_CONTEXT_MGR already set [ 685.006969] binder: 27637:27639 ioctl 40046207 0 returned -16 [ 685.009136] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.009157] binder: 27637:27639 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.082029] binder: BINDER_SET_CONTEXT_MGR already set [ 685.082038] binder: 27655:27662 ioctl 40046207 0 returned -16 [ 685.082149] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.082170] binder: 27655:27662 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.123026] binder: BINDER_SET_CONTEXT_MGR already set [ 685.123035] binder: 27669:27675 ioctl 40046207 0 returned -16 [ 685.123150] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.123171] binder: 27669:27675 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.199965] binder: BINDER_SET_CONTEXT_MGR already set [ 685.199975] binder: 27689:27695 ioctl 40046207 0 returned -16 [ 685.200091] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.200112] binder: 27689:27695 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.277935] binder: BINDER_SET_CONTEXT_MGR already set [ 685.277946] binder: 27705:27712 ioctl 40046207 0 returned -16 [ 685.278054] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.278076] binder: 27705:27712 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.348141] binder: BINDER_SET_CONTEXT_MGR already set [ 685.348150] binder: 27725:27729 ioctl 40046207 0 returned -16 [ 685.349241] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.349260] binder: 27725:27729 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.427537] binder: BINDER_SET_CONTEXT_MGR already set [ 685.427547] binder: 27746:27753 ioctl 40046207 0 returned -16 [ 685.427669] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.427689] binder: 27746:27753 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.548316] binder: BINDER_SET_CONTEXT_MGR already set [ 685.548331] binder: 27772:27775 ioctl 40046207 0 returned -16 [ 685.548453] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.548499] binder: 27772:27775 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.611299] binder: BINDER_SET_CONTEXT_MGR already set [ 685.611309] binder: 27791:27795 ioctl 40046207 0 returned -16 [ 685.611501] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.611521] binder: 27791:27795 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.668389] binder: BINDER_SET_CONTEXT_MGR already set [ 685.668398] binder: 27807:27811 ioctl 40046207 0 returned -16 [ 685.668541] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.668560] binder: 27807:27811 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.735092] binder: BINDER_SET_CONTEXT_MGR already set [ 685.735101] binder: 27822:27826 ioctl 40046207 0 returned -16 [ 685.735191] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.735210] binder: 27822:27826 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.786893] binder: BINDER_SET_CONTEXT_MGR already set [ 685.786902] binder: 27837:27842 ioctl 40046207 0 returned -16 [ 685.787014] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.787033] binder: 27837:27842 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.865479] binder: BINDER_SET_CONTEXT_MGR already set [ 685.865497] binder: 27854:27862 ioctl 40046207 0 returned -16 [ 685.870008] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.870028] binder: 27854:27862 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 685.926638] binder: BINDER_SET_CONTEXT_MGR already set [ 685.926746] binder: 27874:27878 ioctl 40046207 0 returned -16 [ 685.926856] binder_alloc: 23734: binder_alloc_buf, no vma [ 685.926875] binder: 27874:27878 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.023954] binder: BINDER_SET_CONTEXT_MGR already set [ 686.023964] binder: 27893:27902 ioctl 40046207 0 returned -16 [ 686.024114] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.024134] binder: 27893:27902 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.050228] binder: BINDER_SET_CONTEXT_MGR already set [ 686.050237] binder: 27912:27916 ioctl 40046207 0 returned -16 [ 686.050355] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.050373] binder: 27912:27916 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.113479] binder: BINDER_SET_CONTEXT_MGR already set [ 686.113489] binder: 27923:27928 ioctl 40046207 0 returned -16 [ 686.114737] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.114757] binder: 27923:27928 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.172818] binder: BINDER_SET_CONTEXT_MGR already set [ 686.172828] binder: 27940:27942 ioctl 40046207 0 returned -16 [ 686.174115] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.174136] binder: 27940:27942 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.231590] binder: BINDER_SET_CONTEXT_MGR already set [ 686.231600] binder: 27952:27958 ioctl 40046207 0 returned -16 [ 686.231711] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.231731] binder: 27952:27958 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.318727] binder: BINDER_SET_CONTEXT_MGR already set [ 686.318736] binder: 27979:27980 ioctl 40046207 0 returned -16 [ 686.318842] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.318863] binder: 27979:27980 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.376488] binder: BINDER_SET_CONTEXT_MGR already set [ 686.376497] binder: 27998:28000 ioctl 40046207 0 returned -16 [ 686.376616] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.376636] binder: 27998:28000 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.459300] binder: BINDER_SET_CONTEXT_MGR already set [ 686.459309] binder: 28010:28014 ioctl 40046207 0 returned -16 [ 686.459609] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.459629] binder: 28010:28014 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.562330] binder: BINDER_SET_CONTEXT_MGR already set [ 686.562339] binder: 28027:28035 ioctl 40046207 0 returned -16 [ 686.562454] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.562475] binder: 28027:28035 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.631808] binder: BINDER_SET_CONTEXT_MGR already set [ 686.631818] binder: 28055:28062 ioctl 40046207 0 returned -16 [ 686.631921] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.631941] binder: 28055:28062 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.671437] binder: BINDER_SET_CONTEXT_MGR already set [ 686.671447] binder: 28071:28075 ioctl 40046207 0 returned -16 [ 686.671671] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.671691] binder: 28071:28075 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.743086] binder: BINDER_SET_CONTEXT_MGR already set [ 686.743095] binder: 28089:28090 ioctl 40046207 0 returned -16 [ 686.743202] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.743218] binder: 28089:28090 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.847603] binder: BINDER_SET_CONTEXT_MGR already set [ 686.847614] binder: 28114:28120 ioctl 40046207 0 returned -16 [ 686.847728] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.847748] binder: 28114:28120 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.912717] binder: BINDER_SET_CONTEXT_MGR already set [ 686.912726] binder: 28130:28139 ioctl 40046207 0 returned -16 [ 686.913087] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.913108] binder: 28130:28139 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 686.982224] binder: BINDER_SET_CONTEXT_MGR already set [ 686.982234] binder: 28147:28151 ioctl 40046207 0 returned -16 [ 686.982447] binder_alloc: 23734: binder_alloc_buf, no vma [ 686.982786] binder: 28147:28151 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.073220] binder: BINDER_SET_CONTEXT_MGR already set [ 687.073229] binder: 28170:28178 ioctl 40046207 0 returned -16 [ 687.073341] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.073362] binder: 28170:28178 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.170086] binder: BINDER_SET_CONTEXT_MGR already set [ 687.170096] binder: 28187:28202 ioctl 40046207 0 returned -16 [ 687.170367] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.170387] binder: 28187:28202 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.270147] binder: BINDER_SET_CONTEXT_MGR already set [ 687.270158] binder: 28216:28226 ioctl 40046207 0 returned -16 [ 687.270326] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.270345] binder: 28216:28226 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.325449] binder: BINDER_SET_CONTEXT_MGR already set [ 687.325461] binder: 28237:28244 ioctl 40046207 0 returned -16 [ 687.326077] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.326097] binder: 28237:28244 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.396048] binder: BINDER_SET_CONTEXT_MGR already set [ 687.396057] binder: 28253:28259 ioctl 40046207 0 returned -16 [ 687.396167] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.396185] binder: 28253:28259 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.436816] binder: BINDER_SET_CONTEXT_MGR already set [ 687.436825] binder: 28267:28271 ioctl 40046207 0 returned -16 [ 687.436927] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.436946] binder: 28267:28271 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.538879] binder: BINDER_SET_CONTEXT_MGR already set [ 687.538888] binder: 28281:28294 ioctl 40046207 0 returned -16 [ 687.539471] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.539491] binder: 28281:28294 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.634699] binder: BINDER_SET_CONTEXT_MGR already set [ 687.634708] binder: 28311:28317 ioctl 40046207 0 returned -16 [ 687.634822] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.634841] binder: 28311:28317 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.675128] binder: BINDER_SET_CONTEXT_MGR already set [ 687.675138] binder: 28332:28337 ioctl 40046207 0 returned -16 [ 687.675255] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.675276] binder: 28332:28337 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.731237] binder: BINDER_SET_CONTEXT_MGR already set [ 687.731246] binder: 28341:28343 ioctl 40046207 0 returned -16 [ 687.731356] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.731375] binder: 28341:28343 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.791119] binder: BINDER_SET_CONTEXT_MGR already set [ 687.791128] binder: 28359:28366 ioctl 40046207 0 returned -16 [ 687.791216] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.791233] binder: 28359:28366 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.862922] binder: BINDER_SET_CONTEXT_MGR already set [ 687.862932] binder: 28384:28386 ioctl 40046207 0 returned -16 [ 687.874990] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.875020] binder: 28384:28386 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.892547] binder: BINDER_SET_CONTEXT_MGR already set [ 687.892556] binder: 28394:28396 ioctl 40046207 0 returned -16 [ 687.892657] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.892676] binder: 28394:28396 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 687.991387] binder: BINDER_SET_CONTEXT_MGR already set [ 687.991397] binder: 28415:28417 ioctl 40046207 0 returned -16 [ 687.991527] binder_alloc: 23734: binder_alloc_buf, no vma [ 687.991547] binder: 28415:28417 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.114348] binder: BINDER_SET_CONTEXT_MGR already set [ 688.114357] binder: 28437:28451 ioctl 40046207 0 returned -16 [ 688.114458] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.114478] binder: 28437:28451 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.204841] binder: BINDER_SET_CONTEXT_MGR already set [ 688.204850] binder: 28463:28474 ioctl 40046207 0 returned -16 [ 688.204965] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.204985] binder: 28463:28474 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.316450] binder: BINDER_SET_CONTEXT_MGR already set [ 688.316458] binder: 28492:28495 ioctl 40046207 0 returned -16 [ 688.316562] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.316579] binder: 28492:28495 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.360708] binder: BINDER_SET_CONTEXT_MGR already set [ 688.360717] binder: 28507:28514 ioctl 40046207 0 returned -16 [ 688.361586] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.361605] binder: 28507:28514 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.426535] binder: BINDER_SET_CONTEXT_MGR already set [ 688.426545] binder: 28525:28532 ioctl 40046207 0 returned -16 [ 688.426663] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.426683] binder: 28525:28532 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.507748] binder: BINDER_SET_CONTEXT_MGR already set [ 688.507757] binder: 28549:28550 ioctl 40046207 0 returned -16 [ 688.507877] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.507895] binder: 28549:28550 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.539717] binder: BINDER_SET_CONTEXT_MGR already set [ 688.539727] binder: 28557:28562 ioctl 40046207 0 returned -16 [ 688.539831] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.539851] binder: 28557:28562 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.651202] binder: BINDER_SET_CONTEXT_MGR already set [ 688.651211] binder: 28576:28579 ioctl 40046207 0 returned -16 [ 688.651324] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.651344] binder: 28576:28579 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.696450] binder: BINDER_SET_CONTEXT_MGR already set [ 688.696459] binder: 28594:28604 ioctl 40046207 0 returned -16 [ 688.696576] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.696594] binder: 28594:28604 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.758096] binder: BINDER_SET_CONTEXT_MGR already set [ 688.758106] binder: 28614:28616 ioctl 40046207 0 returned -16 [ 688.758782] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.758811] binder: 28614:28616 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.830306] binder: BINDER_SET_CONTEXT_MGR already set [ 688.830315] binder: 28631:28632 ioctl 40046207 0 returned -16 [ 688.830420] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.830439] binder: 28631:28632 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 688.958092] binder: BINDER_SET_CONTEXT_MGR already set [ 688.958104] binder: 28668:28672 ioctl 40046207 0 returned -16 [ 688.958409] binder_alloc: 23734: binder_alloc_buf, no vma [ 688.958428] binder: 28668:28672 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.067424] binder: BINDER_SET_CONTEXT_MGR already set [ 689.067433] binder: 28691:28700 ioctl 40046207 0 returned -16 [ 689.067528] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.067549] binder: 28691:28700 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.128564] binder: BINDER_SET_CONTEXT_MGR already set [ 689.128574] binder: 28715:28720 ioctl 40046207 0 returned -16 [ 689.128691] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.128711] binder: 28715:28720 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.189478] binder: BINDER_SET_CONTEXT_MGR already set [ 689.189488] binder: 28728:28735 ioctl 40046207 0 returned -16 [ 689.189832] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.189852] binder: 28728:28735 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.256419] binder: BINDER_SET_CONTEXT_MGR already set [ 689.256428] binder: 28748:28751 ioctl 40046207 0 returned -16 [ 689.256955] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.256973] binder: 28748:28751 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.318173] binder: BINDER_SET_CONTEXT_MGR already set [ 689.318181] binder: 28768:28772 ioctl 40046207 0 returned -16 [ 689.318273] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.318291] binder: 28768:28772 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.368696] binder: BINDER_SET_CONTEXT_MGR already set [ 689.368704] binder: 28779:28788 ioctl 40046207 0 returned -16 [ 689.368818] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.368837] binder: 28779:28788 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.433499] binder: BINDER_SET_CONTEXT_MGR already set [ 689.433509] binder: 28801:28803 ioctl 40046207 0 returned -16 [ 689.434607] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.434627] binder: 28801:28803 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.608500] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.608522] binder: 28826:28830 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.652284] binder: BINDER_SET_CONTEXT_MGR already set [ 689.652292] binder: 28850:28852 ioctl 40046207 0 returned -16 [ 689.652488] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.652506] binder: 28850:28852 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.734428] binder: BINDER_SET_CONTEXT_MGR already set [ 689.734437] binder: 28864:28874 ioctl 40046207 0 returned -16 [ 689.734541] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.734561] binder: 28864:28874 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.831542] binder: BINDER_SET_CONTEXT_MGR already set [ 689.831554] binder: 28887:28888 ioctl 40046207 0 returned -16 [ 689.831664] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.831684] binder: 28887:28888 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.871811] binder: BINDER_SET_CONTEXT_MGR already set [ 689.871821] binder: 28903:28915 ioctl 40046207 0 returned -16 [ 689.872052] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.872073] binder: 28903:28915 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 689.953559] binder: BINDER_SET_CONTEXT_MGR already set [ 689.953569] binder: 28920:28928 ioctl 40046207 0 returned -16 [ 689.953842] binder_alloc: 23734: binder_alloc_buf, no vma [ 689.953861] binder: 28920:28928 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.019545] binder: BINDER_SET_CONTEXT_MGR already set [ 690.019554] binder: 28943:28945 ioctl 40046207 0 returned -16 [ 690.019676] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.019695] binder: 28943:28945 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.071459] binder: BINDER_SET_CONTEXT_MGR already set [ 690.071468] binder: 28957:28963 ioctl 40046207 0 returned -16 [ 690.071584] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.071606] binder: 28957:28963 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.138134] binder: BINDER_SET_CONTEXT_MGR already set [ 690.138144] binder: 28967:28973 ioctl 40046207 0 returned -16 [ 690.138243] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.138263] binder: 28967:28973 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.182724] binder: BINDER_SET_CONTEXT_MGR already set [ 690.182733] binder: 28986:28991 ioctl 40046207 0 returned -16 [ 690.183239] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.183258] binder: 28986:28991 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.262056] binder: BINDER_SET_CONTEXT_MGR already set [ 690.262065] binder: 29004:29011 ioctl 40046207 0 returned -16 [ 690.262184] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.262203] binder: 29004:29011 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.300648] binder: BINDER_SET_CONTEXT_MGR already set [ 690.300657] binder: 29019:29023 ioctl 40046207 0 returned -16 [ 690.300770] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.300788] binder: 29019:29023 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.395042] binder: BINDER_SET_CONTEXT_MGR already set [ 690.395053] binder: 29032:29037 ioctl 40046207 0 returned -16 [ 690.395155] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.395174] binder: 29032:29037 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.439951] binder: BINDER_SET_CONTEXT_MGR already set [ 690.439961] binder: 29052:29056 ioctl 40046207 0 returned -16 [ 690.440576] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.440595] binder: 29052:29056 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.551605] binder: BINDER_SET_CONTEXT_MGR already set [ 690.551614] binder: 29079:29080 ioctl 40046207 0 returned -16 [ 690.551725] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.551741] binder: 29079:29080 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.603500] binder: BINDER_SET_CONTEXT_MGR already set [ 690.603509] binder: 29095:29098 ioctl 40046207 0 returned -16 [ 690.603607] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.603627] binder: 29095:29098 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.670636] binder: BINDER_SET_CONTEXT_MGR already set [ 690.670647] binder: 29118:29121 ioctl 40046207 0 returned -16 [ 690.670761] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.670781] binder: 29118:29121 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.820144] binder: BINDER_SET_CONTEXT_MGR already set [ 690.820153] binder: 29146:29162 ioctl 40046207 0 returned -16 [ 690.827549] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.827571] binder: 29146:29162 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.882979] binder: BINDER_SET_CONTEXT_MGR already set [ 690.882989] binder: 29179:29186 ioctl 40046207 0 returned -16 [ 690.883109] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.883129] binder: 29179:29186 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 690.968649] binder: BINDER_SET_CONTEXT_MGR already set [ 690.968659] binder: 29201:29207 ioctl 40046207 0 returned -16 [ 690.968765] binder_alloc: 23734: binder_alloc_buf, no vma [ 690.968786] binder: 29201:29207 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.031517] binder: BINDER_SET_CONTEXT_MGR already set [ 691.031526] binder: 29223:29227 ioctl 40046207 0 returned -16 [ 691.031637] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.031654] binder: 29223:29227 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.113085] binder: BINDER_SET_CONTEXT_MGR already set [ 691.113094] binder: 29249:29250 ioctl 40046207 0 returned -16 [ 691.113198] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.113218] binder: 29249:29250 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.188415] binder: BINDER_SET_CONTEXT_MGR already set [ 691.188425] binder: 29261:29265 ioctl 40046207 0 returned -16 [ 691.188529] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.188549] binder: 29261:29265 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.275319] binder: BINDER_SET_CONTEXT_MGR already set [ 691.275328] binder: 29283:29291 ioctl 40046207 0 returned -16 [ 691.275489] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.275508] binder: 29283:29291 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.378711] binder: BINDER_SET_CONTEXT_MGR already set [ 691.378722] binder: 29314:29318 ioctl 40046207 0 returned -16 [ 691.378834] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.378854] binder: 29314:29318 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.424610] binder: BINDER_SET_CONTEXT_MGR already set [ 691.424619] binder: 29326:29338 ioctl 40046207 0 returned -16 [ 691.424740] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.424761] binder: 29326:29338 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.509892] binder: BINDER_SET_CONTEXT_MGR already set [ 691.509901] binder: 29346:29355 ioctl 40046207 0 returned -16 [ 691.510012] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.510031] binder: 29346:29355 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.585804] binder: BINDER_SET_CONTEXT_MGR already set [ 691.585814] binder: 29373:29381 ioctl 40046207 0 returned -16 [ 691.585930] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.585950] binder: 29373:29381 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.686785] binder: BINDER_SET_CONTEXT_MGR already set [ 691.686794] binder: 29398:29409 ioctl 40046207 0 returned -16 [ 691.687065] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.687086] binder: 29398:29409 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.772331] binder: BINDER_SET_CONTEXT_MGR already set [ 691.772339] binder: 29425:29430 ioctl 40046207 0 returned -16 [ 691.772455] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.772475] binder: 29425:29430 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.900385] binder: BINDER_SET_CONTEXT_MGR already set [ 691.900395] binder: 29462:29472 ioctl 40046207 0 returned -16 [ 691.900654] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.900674] binder: 29462:29472 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 691.985217] binder: BINDER_SET_CONTEXT_MGR already set [ 691.985227] binder: 29485:29499 ioctl 40046207 0 returned -16 [ 691.985324] binder_alloc: 23734: binder_alloc_buf, no vma [ 691.985343] binder: 29485:29499 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.078467] binder: BINDER_SET_CONTEXT_MGR already set [ 692.078476] binder: 29517:29526 ioctl 40046207 0 returned -16 [ 692.082409] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.082430] binder: 29517:29526 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.168535] binder: BINDER_SET_CONTEXT_MGR already set [ 692.168544] binder: 29549:29552 ioctl 40046207 0 returned -16 [ 692.168635] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.168654] binder: 29549:29552 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.234649] binder: BINDER_SET_CONTEXT_MGR already set [ 692.234660] binder: 29560:29564 ioctl 40046207 0 returned -16 [ 692.234787] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.234806] binder: 29560:29564 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.282278] binder: BINDER_SET_CONTEXT_MGR already set [ 692.282287] binder: 29574:29578 ioctl 40046207 0 returned -16 [ 692.282407] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.282427] binder: 29574:29578 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.328092] binder: BINDER_SET_CONTEXT_MGR already set [ 692.328101] binder: 29591:29595 ioctl 40046207 0 returned -16 [ 692.328656] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.328681] binder: 29591:29595 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.417566] binder: BINDER_SET_CONTEXT_MGR already set [ 692.417575] binder: 29610:29619 ioctl 40046207 0 returned -16 [ 692.418149] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.418168] binder: 29610:29619 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.467138] binder: BINDER_SET_CONTEXT_MGR already set [ 692.467147] binder: 29628:29630 ioctl 40046207 0 returned -16 [ 692.467250] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.467269] binder: 29628:29630 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.555079] binder: BINDER_SET_CONTEXT_MGR already set [ 692.555088] binder: 29649:29653 ioctl 40046207 0 returned -16 [ 692.555206] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.555226] binder: 29649:29653 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.637079] binder: BINDER_SET_CONTEXT_MGR already set [ 692.637089] binder: 29664:29677 ioctl 40046207 0 returned -16 [ 692.637394] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.637415] binder: 29664:29677 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.708522] binder: BINDER_SET_CONTEXT_MGR already set [ 692.708530] binder: 29688:29691 ioctl 40046207 0 returned -16 [ 692.708631] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.708650] binder: 29688:29691 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.787645] binder: BINDER_SET_CONTEXT_MGR already set [ 692.787655] binder: 29712:29721 ioctl 40046207 0 returned -16 [ 692.787875] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.787896] binder: 29712:29721 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.830197] binder: BINDER_SET_CONTEXT_MGR already set [ 692.830206] binder: 29728:29730 ioctl 40046207 0 returned -16 [ 692.830329] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.830349] binder: 29728:29730 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 692.901501] binder: BINDER_SET_CONTEXT_MGR already set [ 692.901510] binder: 29750:29754 ioctl 40046207 0 returned -16 [ 692.901612] binder_alloc: 23734: binder_alloc_buf, no vma [ 692.901632] binder: 29750:29754 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.010126] binder: BINDER_SET_CONTEXT_MGR already set [ 693.010137] binder: 29764:29773 ioctl 40046207 0 returned -16 [ 693.010273] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.010293] binder: 29764:29773 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.074283] binder: BINDER_SET_CONTEXT_MGR already set [ 693.074293] binder: 29786:29796 ioctl 40046207 0 returned -16 [ 693.074431] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.074451] binder: 29786:29796 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.146026] binder: BINDER_SET_CONTEXT_MGR already set [ 693.146036] binder: 29813:29815 ioctl 40046207 0 returned -16 [ 693.146255] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.146274] binder: 29813:29815 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.199561] binder: BINDER_SET_CONTEXT_MGR already set [ 693.199571] binder: 29826:29828 ioctl 40046207 0 returned -16 [ 693.199687] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.199705] binder: 29826:29828 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.254153] binder: BINDER_SET_CONTEXT_MGR already set [ 693.254162] binder: 29837:29840 ioctl 40046207 0 returned -16 [ 693.254956] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.254977] binder: 29837:29840 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.346660] binder: BINDER_SET_CONTEXT_MGR already set [ 693.346669] binder: 29863:29871 ioctl 40046207 0 returned -16 [ 693.346775] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.346795] binder: 29863:29871 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.406730] binder: BINDER_SET_CONTEXT_MGR already set [ 693.406740] binder: 29877:29883 ioctl 40046207 0 returned -16 [ 693.406996] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.407015] binder: 29877:29883 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.518637] binder: BINDER_SET_CONTEXT_MGR already set [ 693.518645] binder: 29889:29907 ioctl 40046207 0 returned -16 [ 693.518997] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.519198] binder: 29889:29907 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.612328] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.612348] binder: 29919:29924 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.658697] binder: BINDER_SET_CONTEXT_MGR already set [ 693.658706] binder: 29944:29953 ioctl 40046207 0 returned -16 [ 693.658814] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.658835] binder: 29944:29953 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.743784] binder: BINDER_SET_CONTEXT_MGR already set [ 693.743793] binder: 29960:29965 ioctl 40046207 0 returned -16 [ 693.743940] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.743959] binder: 29960:29965 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.792841] binder: BINDER_SET_CONTEXT_MGR already set [ 693.792849] binder: 29981:29985 ioctl 40046207 0 returned -16 [ 693.792965] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.792984] binder: 29981:29985 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.877183] binder: BINDER_SET_CONTEXT_MGR already set [ 693.877192] binder: 30000:30007 ioctl 40046207 0 returned -16 [ 693.877456] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.877476] binder: 30000:30007 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 693.946188] binder: BINDER_SET_CONTEXT_MGR already set [ 693.946199] binder: 30021:30027 ioctl 40046207 0 returned -16 [ 693.946316] binder_alloc: 23734: binder_alloc_buf, no vma [ 693.946336] binder: 30021:30027 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.020053] binder: BINDER_SET_CONTEXT_MGR already set [ 694.020062] binder: 30038:30048 ioctl 40046207 0 returned -16 [ 694.022322] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.022340] binder: 30038:30048 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.140759] binder: BINDER_SET_CONTEXT_MGR already set [ 694.140768] binder: 30056:30080 ioctl 40046207 0 returned -16 [ 694.140865] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.140884] binder: 30056:30080 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.208368] binder: BINDER_SET_CONTEXT_MGR already set [ 694.208377] binder: 30089:30093 ioctl 40046207 0 returned -16 [ 694.208527] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.208547] binder: 30089:30093 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.290594] binder: BINDER_SET_CONTEXT_MGR already set [ 694.290604] binder: 30112:30120 ioctl 40046207 0 returned -16 [ 694.290718] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.290736] binder: 30112:30120 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.447757] binder: BINDER_SET_CONTEXT_MGR already set [ 694.447766] binder: 30145:30152 ioctl 40046207 0 returned -16 [ 694.447865] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.447885] binder: 30145:30152 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.570477] binder: BINDER_SET_CONTEXT_MGR already set [ 694.570487] binder: 30173:30179 ioctl 40046207 0 returned -16 [ 694.570603] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.570622] binder: 30173:30179 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.677808] binder: BINDER_SET_CONTEXT_MGR already set [ 694.677823] binder: 30195:30206 ioctl 40046207 0 returned -16 [ 694.677930] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.677950] binder: 30195:30206 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.726592] binder: BINDER_SET_CONTEXT_MGR already set [ 694.726601] binder: 30219:30221 ioctl 40046207 0 returned -16 [ 694.726714] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.726734] binder: 30219:30221 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.798772] binder: BINDER_SET_CONTEXT_MGR already set [ 694.798782] binder: 30241:30242 ioctl 40046207 0 returned -16 [ 694.798884] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.798903] binder: 30241:30242 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 694.903148] binder: BINDER_SET_CONTEXT_MGR already set [ 694.903157] binder: 30253:30263 ioctl 40046207 0 returned -16 [ 694.909621] binder_alloc: 23734: binder_alloc_buf, no vma [ 694.909641] binder: 30253:30263 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.064659] binder: BINDER_SET_CONTEXT_MGR already set [ 695.064668] binder: 30292:30297 ioctl 40046207 0 returned -16 [ 695.064787] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.064806] binder: 30292:30297 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.126519] binder: BINDER_SET_CONTEXT_MGR already set [ 695.126530] binder: 30312:30313 ioctl 40046207 0 returned -16 [ 695.126650] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.126668] binder: 30312:30313 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.238792] binder: BINDER_SET_CONTEXT_MGR already set [ 695.238810] binder: 30332:30339 ioctl 40046207 0 returned -16 [ 695.238919] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.238939] binder: 30332:30339 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.299005] binder: BINDER_SET_CONTEXT_MGR already set [ 695.299014] binder: 30350:30358 ioctl 40046207 0 returned -16 [ 695.299469] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.299494] binder: 30350:30358 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.371492] binder: BINDER_SET_CONTEXT_MGR already set [ 695.371501] binder: 30372:30380 ioctl 40046207 0 returned -16 [ 695.371606] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.371626] binder: 30372:30380 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.441614] binder: BINDER_SET_CONTEXT_MGR already set [ 695.441623] binder: 30391:30396 ioctl 40046207 0 returned -16 [ 695.441736] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.441756] binder: 30391:30396 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.507186] binder: BINDER_SET_CONTEXT_MGR already set [ 695.507195] binder: 30410:30420 ioctl 40046207 0 returned -16 [ 695.507320] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.507339] binder: 30410:30420 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.564990] binder: BINDER_SET_CONTEXT_MGR already set [ 695.564999] binder: 30427:30428 ioctl 40046207 0 returned -16 [ 695.565099] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.565117] binder: 30427:30428 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.635454] binder: BINDER_SET_CONTEXT_MGR already set [ 695.635464] binder: 30444:30446 ioctl 40046207 0 returned -16 [ 695.635578] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.635598] binder: 30444:30446 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.710115] binder: BINDER_SET_CONTEXT_MGR already set [ 695.710125] binder: 30463:30467 ioctl 40046207 0 returned -16 [ 695.710238] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.710257] binder: 30463:30467 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.790248] binder: BINDER_SET_CONTEXT_MGR already set [ 695.790257] binder: 30491:30498 ioctl 40046207 0 returned -16 [ 695.790417] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.790437] binder: 30491:30498 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.857498] binder: BINDER_SET_CONTEXT_MGR already set [ 695.857507] binder: 30505:30510 ioctl 40046207 0 returned -16 [ 695.858216] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.858236] binder: 30505:30510 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 695.947068] binder: BINDER_SET_CONTEXT_MGR already set [ 695.947077] binder: 30519:30529 ioctl 40046207 0 returned -16 [ 695.947214] binder_alloc: 23734: binder_alloc_buf, no vma [ 695.947235] binder: 30519:30529 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.050667] binder: BINDER_SET_CONTEXT_MGR already set [ 696.050677] binder: 30552:30554 ioctl 40046207 0 returned -16 [ 696.050772] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.050792] binder: 30552:30554 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.167819] binder: BINDER_SET_CONTEXT_MGR already set [ 696.167828] binder: 30582:30587 ioctl 40046207 0 returned -16 [ 696.168547] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.168567] binder: 30582:30587 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.243940] binder: BINDER_SET_CONTEXT_MGR already set [ 696.243949] binder: 30597:30606 ioctl 40046207 0 returned -16 [ 696.244292] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.244310] binder: 30597:30606 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.276315] binder: BINDER_SET_CONTEXT_MGR already set [ 696.276324] binder: 30614:30615 ioctl 40046207 0 returned -16 [ 696.276427] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.276445] binder: 30614:30615 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.341480] binder: BINDER_SET_CONTEXT_MGR already set [ 696.341489] binder: 30628:30630 ioctl 40046207 0 returned -16 [ 696.341607] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.341627] binder: 30628:30630 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.413184] binder: BINDER_SET_CONTEXT_MGR already set [ 696.413194] binder: 30638:30647 ioctl 40046207 0 returned -16 [ 696.414061] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.414081] binder: 30638:30647 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.485400] binder: BINDER_SET_CONTEXT_MGR already set [ 696.485409] binder: 30666:30670 ioctl 40046207 0 returned -16 [ 696.485523] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.485542] binder: 30666:30670 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.561256] binder: BINDER_SET_CONTEXT_MGR already set [ 696.561266] binder: 30680:30687 ioctl 40046207 0 returned -16 [ 696.561371] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.561390] binder: 30680:30687 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.674813] binder: BINDER_SET_CONTEXT_MGR already set [ 696.674822] binder: 30717:30722 ioctl 40046207 0 returned -16 [ 696.674992] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.675010] binder: 30717:30722 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.824262] binder: BINDER_SET_CONTEXT_MGR already set [ 696.824272] binder: 30752:30756 ioctl 40046207 0 returned -16 [ 696.824474] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.824493] binder: 30752:30756 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.890284] binder: BINDER_SET_CONTEXT_MGR already set [ 696.890293] binder: 30769:30781 ioctl 40046207 0 returned -16 [ 696.890397] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.890416] binder: 30769:30781 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 696.994648] binder: BINDER_SET_CONTEXT_MGR already set [ 696.994657] binder: 30792:30810 ioctl 40046207 0 returned -16 [ 696.994850] binder_alloc: 23734: binder_alloc_buf, no vma [ 696.994869] binder: 30792:30810 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.072578] binder: BINDER_SET_CONTEXT_MGR already set [ 697.072587] binder: 30822:30830 ioctl 40046207 0 returned -16 [ 697.072687] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.072706] binder: 30822:30830 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.195951] binder: BINDER_SET_CONTEXT_MGR already set [ 697.195960] binder: 30846:30858 ioctl 40046207 0 returned -16 [ 697.196261] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.196280] binder: 30846:30858 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.279141] binder: BINDER_SET_CONTEXT_MGR already set [ 697.279157] binder: 30873:30878 ioctl 40046207 0 returned -16 [ 697.279445] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.279463] binder: 30873:30878 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.421508] binder: BINDER_SET_CONTEXT_MGR already set [ 697.421517] binder: 30906:30908 ioctl 40046207 0 returned -16 [ 697.421849] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.421867] binder: 30906:30908 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.473632] binder: BINDER_SET_CONTEXT_MGR already set [ 697.473641] binder: 30917:30923 ioctl 40046207 0 returned -16 [ 697.474203] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.474223] binder: 30917:30923 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.548874] binder: BINDER_SET_CONTEXT_MGR already set [ 697.548883] binder: 30937:30941 ioctl 40046207 0 returned -16 [ 697.548983] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.549002] binder: 30937:30941 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.708946] binder: BINDER_SET_CONTEXT_MGR already set [ 697.708954] binder: 30956:30964 ioctl 40046207 0 returned -16 [ 697.709071] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.709092] binder: 30956:30964 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.787396] binder: BINDER_SET_CONTEXT_MGR already set [ 697.787404] binder: 30974:30986 ioctl 40046207 0 returned -16 [ 697.787522] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.787543] binder: 30974:30986 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.916817] binder: BINDER_SET_CONTEXT_MGR already set [ 697.916826] binder: 31012:31014 ioctl 40046207 0 returned -16 [ 697.916940] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.916958] binder: 31012:31014 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 697.969438] binder: BINDER_SET_CONTEXT_MGR already set [ 697.969447] binder: 31028:31030 ioctl 40046207 0 returned -16 [ 697.969552] binder_alloc: 23734: binder_alloc_buf, no vma [ 697.969572] binder: 31028:31030 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.026053] binder: BINDER_SET_CONTEXT_MGR already set [ 698.026063] binder: 31043:31044 ioctl 40046207 0 returned -16 [ 698.026173] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.026193] binder: 31043:31044 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.117687] binder: BINDER_SET_CONTEXT_MGR already set [ 698.117696] binder: 31060:31063 ioctl 40046207 0 returned -16 [ 698.117811] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.117830] binder: 31060:31063 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.162525] binder: BINDER_SET_CONTEXT_MGR already set [ 698.162535] binder: 31077:31079 ioctl 40046207 0 returned -16 [ 698.162640] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.162661] binder: 31077:31079 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.230056] binder: BINDER_SET_CONTEXT_MGR already set [ 698.230066] binder: 31094:31097 ioctl 40046207 0 returned -16 [ 698.230180] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.230200] binder: 31094:31097 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.282239] binder: BINDER_SET_CONTEXT_MGR already set [ 698.282248] binder: 31110:31115 ioctl 40046207 0 returned -16 [ 698.282416] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.282435] binder: 31110:31115 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.385449] binder: BINDER_SET_CONTEXT_MGR already set [ 698.385458] binder: 31133:31139 ioctl 40046207 0 returned -16 [ 698.385598] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.385617] binder: 31133:31139 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.538880] binder: BINDER_SET_CONTEXT_MGR already set [ 698.538889] binder: 31155:31181 ioctl 40046207 0 returned -16 [ 698.538996] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.539015] binder: 31155:31181 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.605208] binder: BINDER_SET_CONTEXT_MGR already set [ 698.605217] binder: 31189:31194 ioctl 40046207 0 returned -16 [ 698.605329] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.605348] binder: 31189:31194 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.757347] binder: BINDER_SET_CONTEXT_MGR already set [ 698.757357] binder: 31207:31218 ioctl 40046207 0 returned -16 [ 698.757458] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.757479] binder: 31207:31218 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.874147] binder: BINDER_SET_CONTEXT_MGR already set [ 698.874156] binder: 31254:31261 ioctl 40046207 0 returned -16 [ 698.874738] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.874758] binder: 31254:31261 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.937322] binder: BINDER_SET_CONTEXT_MGR already set [ 698.937333] binder: 31273:31278 ioctl 40046207 0 returned -16 [ 698.938235] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.938255] binder: 31273:31278 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 698.989684] binder: BINDER_SET_CONTEXT_MGR already set [ 698.989693] binder: 31286:31291 ioctl 40046207 0 returned -16 [ 698.989838] binder_alloc: 23734: binder_alloc_buf, no vma [ 698.989858] binder: 31286:31291 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.057220] binder: BINDER_SET_CONTEXT_MGR already set [ 699.057229] binder: 31303:31310 ioctl 40046207 0 returned -16 [ 699.057349] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.057369] binder: 31303:31310 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.120677] binder: BINDER_SET_CONTEXT_MGR already set [ 699.120686] binder: 31322:31328 ioctl 40046207 0 returned -16 [ 699.120786] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.120814] binder: 31322:31328 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.199287] binder: BINDER_SET_CONTEXT_MGR already set [ 699.199296] binder: 31347:31350 ioctl 40046207 0 returned -16 [ 699.199416] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.199435] binder: 31347:31350 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.317643] binder: BINDER_SET_CONTEXT_MGR already set [ 699.317652] binder: 31360:31381 ioctl 40046207 0 returned -16 [ 699.317764] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.317783] binder: 31360:31381 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.384896] binder: BINDER_SET_CONTEXT_MGR already set [ 699.384905] binder: 31392:31406 ioctl 40046207 0 returned -16 [ 699.385023] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.385042] binder: 31392:31406 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.460663] binder: BINDER_SET_CONTEXT_MGR already set [ 699.460672] binder: 31412:31422 ioctl 40046207 0 returned -16 [ 699.460786] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.460816] binder: 31412:31422 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.520537] binder: BINDER_SET_CONTEXT_MGR already set [ 699.520546] binder: 31430:31438 ioctl 40046207 0 returned -16 [ 699.520658] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.520677] binder: 31430:31438 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.634037] binder: BINDER_SET_CONTEXT_MGR already set [ 699.634046] binder: 31461:31468 ioctl 40046207 0 returned -16 [ 699.634163] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.634183] binder: 31461:31468 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.695091] binder: BINDER_SET_CONTEXT_MGR already set [ 699.695100] binder: 31481:31484 ioctl 40046207 0 returned -16 [ 699.695212] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.695230] binder: 31481:31484 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.768110] binder: BINDER_SET_CONTEXT_MGR already set [ 699.768118] binder: 31491:31495 ioctl 40046207 0 returned -16 [ 699.768218] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.768238] binder: 31491:31495 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.876782] binder: BINDER_SET_CONTEXT_MGR already set [ 699.876791] binder: 31510:31522 ioctl 40046207 0 returned -16 [ 699.876900] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.876989] binder: 31510:31522 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 699.930226] binder: BINDER_SET_CONTEXT_MGR already set [ 699.930236] binder: 31536:31540 ioctl 40046207 0 returned -16 [ 699.930351] binder_alloc: 23734: binder_alloc_buf, no vma [ 699.930371] binder: 31536:31540 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.019180] binder: BINDER_SET_CONTEXT_MGR already set [ 700.019190] binder: 31555:31563 ioctl 40046207 0 returned -16 [ 700.020254] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.020276] binder: 31555:31563 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.066467] binder: BINDER_SET_CONTEXT_MGR already set [ 700.066476] binder: 31577:31580 ioctl 40046207 0 returned -16 [ 700.066671] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.066690] binder: 31577:31580 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.143687] binder: BINDER_SET_CONTEXT_MGR already set [ 700.143697] binder: 31590:31598 ioctl 40046207 0 returned -16 [ 700.143992] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.144011] binder: 31590:31598 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.257926] binder: BINDER_SET_CONTEXT_MGR already set [ 700.257936] binder: 31609:31626 ioctl 40046207 0 returned -16 [ 700.258040] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.258060] binder: 31609:31626 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.304109] binder: BINDER_SET_CONTEXT_MGR already set [ 700.304118] binder: 31638:31641 ioctl 40046207 0 returned -16 [ 700.304294] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.304324] binder: 31638:31641 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.385044] binder: BINDER_SET_CONTEXT_MGR already set [ 700.385053] binder: 31652:31658 ioctl 40046207 0 returned -16 [ 700.385152] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.385172] binder: 31652:31658 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.585275] binder: BINDER_SET_CONTEXT_MGR already set [ 700.589291] binder: 31686:31700 ioctl 40046207 0 returned -16 [ 700.589422] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.589442] binder: 31686:31700 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.625980] binder: BINDER_SET_CONTEXT_MGR already set [ 700.625989] binder: 31717:31720 ioctl 40046207 0 returned -16 [ 700.626093] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.626112] binder: 31717:31720 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.701477] binder: BINDER_SET_CONTEXT_MGR already set [ 700.701486] binder: 31725:31730 ioctl 40046207 0 returned -16 [ 700.701591] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.701608] binder: 31725:31730 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.798781] binder: BINDER_SET_CONTEXT_MGR already set [ 700.798791] binder: 31741:31754 ioctl 40046207 0 returned -16 [ 700.799045] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.799466] binder: 31741:31754 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.868674] binder: BINDER_SET_CONTEXT_MGR already set [ 700.868771] binder: 31765:31776 ioctl 40046207 0 returned -16 [ 700.869140] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.869225] binder: 31765:31776 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 700.934782] binder: BINDER_SET_CONTEXT_MGR already set [ 700.934791] binder: 31786:31793 ioctl 40046207 0 returned -16 [ 700.934908] binder_alloc: 23734: binder_alloc_buf, no vma [ 700.934926] binder: 31786:31793 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.006576] binder: BINDER_SET_CONTEXT_MGR already set [ 701.006585] binder: 31801:31806 ioctl 40046207 0 returned -16 [ 701.006697] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.006717] binder: 31801:31806 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.063561] binder: BINDER_SET_CONTEXT_MGR already set [ 701.063571] binder: 31815:31822 ioctl 40046207 0 returned -16 [ 701.063691] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.063711] binder: 31815:31822 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.138198] binder: BINDER_SET_CONTEXT_MGR already set [ 701.138207] binder: 31830:31835 ioctl 40046207 0 returned -16 [ 701.138396] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.138416] binder: 31830:31835 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.189358] binder: BINDER_SET_CONTEXT_MGR already set [ 701.189368] binder: 31844:31853 ioctl 40046207 0 returned -16 [ 701.189486] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.189504] binder: 31844:31853 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.241969] binder: BINDER_SET_CONTEXT_MGR already set [ 701.241979] binder: 31859:31866 ioctl 40046207 0 returned -16 [ 701.242091] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.242110] binder: 31859:31866 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.313723] binder: BINDER_SET_CONTEXT_MGR already set [ 701.313733] binder: 31874:31885 ioctl 40046207 0 returned -16 [ 701.314032] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.314051] binder: 31874:31885 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.370106] binder: BINDER_SET_CONTEXT_MGR already set [ 701.370115] binder: 31891:31897 ioctl 40046207 0 returned -16 [ 701.370234] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.370254] binder: 31891:31897 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.426362] binder: BINDER_SET_CONTEXT_MGR already set [ 701.426372] binder: 31908:31913 ioctl 40046207 0 returned -16 [ 701.426883] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.426902] binder: 31908:31913 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.514188] binder: BINDER_SET_CONTEXT_MGR already set [ 701.514197] binder: 31927:31931 ioctl 40046207 0 returned -16 [ 701.514298] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.514317] binder: 31927:31931 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.579474] binder: BINDER_SET_CONTEXT_MGR already set [ 701.579482] binder: 31943:31948 ioctl 40046207 0 returned -16 [ 701.579680] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.579698] binder: 31943:31948 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.658834] binder: BINDER_SET_CONTEXT_MGR already set [ 701.658845] binder: 31964:31973 ioctl 40046207 0 returned -16 [ 701.658962] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.658983] binder: 31964:31973 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.718155] binder: BINDER_SET_CONTEXT_MGR already set [ 701.718165] binder: 31978:31986 ioctl 40046207 0 returned -16 [ 701.718261] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.718280] binder: 31978:31986 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.887710] binder: BINDER_SET_CONTEXT_MGR already set [ 701.887718] binder: 32005:32006 ioctl 40046207 0 returned -16 [ 701.887820] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.887840] binder: 32005:32006 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.917948] binder: BINDER_SET_CONTEXT_MGR already set [ 701.917957] binder: 32014:32021 ioctl 40046207 0 returned -16 [ 701.918058] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.918076] binder: 32014:32021 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 701.986391] binder: BINDER_SET_CONTEXT_MGR already set [ 701.986402] binder: 32030:32040 ioctl 40046207 0 returned -16 [ 701.986669] binder_alloc: 23734: binder_alloc_buf, no vma [ 701.986690] binder: 32030:32040 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.064208] binder: BINDER_SET_CONTEXT_MGR already set [ 702.064217] binder: 32053:32057 ioctl 40046207 0 returned -16 [ 702.064330] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.064349] binder: 32053:32057 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.164715] binder: BINDER_SET_CONTEXT_MGR already set [ 702.164725] binder: 32073:32076 ioctl 40046207 0 returned -16 [ 702.164855] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.164875] binder: 32073:32076 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.232664] binder: BINDER_SET_CONTEXT_MGR already set [ 702.232674] binder: 32095:32098 ioctl 40046207 0 returned -16 [ 702.232789] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.232819] binder: 32095:32098 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.328997] binder: BINDER_SET_CONTEXT_MGR already set [ 702.329008] binder: 32117:32120 ioctl 40046207 0 returned -16 [ 702.329126] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.329146] binder: 32117:32120 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.471504] binder: BINDER_SET_CONTEXT_MGR already set [ 702.471514] binder: 32147:32158 ioctl 40046207 0 returned -16 [ 702.471614] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.471634] binder: 32147:32158 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.557269] binder: BINDER_SET_CONTEXT_MGR already set [ 702.557286] binder: 32174:32183 ioctl 40046207 0 returned -16 [ 702.557945] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.557964] binder: 32174:32183 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.646489] binder: BINDER_SET_CONTEXT_MGR already set [ 702.646499] binder: 32205:32210 ioctl 40046207 0 returned -16 [ 702.646617] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.646637] binder: 32205:32210 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.730344] binder: BINDER_SET_CONTEXT_MGR already set [ 702.730354] binder: 32225:32229 ioctl 40046207 0 returned -16 [ 702.730472] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.730493] binder: 32225:32229 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.860994] binder: BINDER_SET_CONTEXT_MGR already set [ 702.861080] binder: 32262:32263 ioctl 40046207 0 returned -16 [ 702.861190] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.861209] binder: 32262:32263 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 702.961667] binder: BINDER_SET_CONTEXT_MGR already set [ 702.961676] binder: 32281:32283 ioctl 40046207 0 returned -16 [ 702.961776] binder_alloc: 23734: binder_alloc_buf, no vma [ 702.961794] binder: 32281:32283 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.014414] binder: BINDER_SET_CONTEXT_MGR already set [ 703.014422] binder: 32300:32305 ioctl 40046207 0 returned -16 [ 703.014514] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.014532] binder: 32300:32305 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.101527] binder: BINDER_SET_CONTEXT_MGR already set [ 703.101535] binder: 32321:32324 ioctl 40046207 0 returned -16 [ 703.101650] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.101669] binder: 32321:32324 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.188467] binder: BINDER_SET_CONTEXT_MGR already set [ 703.188476] binder: 32338:32343 ioctl 40046207 0 returned -16 [ 703.188589] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.188608] binder: 32338:32343 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.241175] binder: BINDER_SET_CONTEXT_MGR already set [ 703.241185] binder: 32360:32361 ioctl 40046207 0 returned -16 [ 703.241296] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.241314] binder: 32360:32361 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.378660] binder: BINDER_SET_CONTEXT_MGR already set [ 703.378670] binder: 32369:32399 ioctl 40046207 0 returned -16 [ 703.378770] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.378790] binder: 32369:32399 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.447440] binder: BINDER_SET_CONTEXT_MGR already set [ 703.447451] binder: 32406:32414 ioctl 40046207 0 returned -16 [ 703.447555] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.447574] binder: 32406:32414 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.531332] binder: BINDER_SET_CONTEXT_MGR already set [ 703.531342] binder: 32430:32434 ioctl 40046207 0 returned -16 [ 703.531456] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.531475] binder: 32430:32434 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.599424] binder: BINDER_SET_CONTEXT_MGR already set [ 703.599434] binder: 32447:32453 ioctl 40046207 0 returned -16 [ 703.607668] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.607691] binder: 32447:32453 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.737832] binder: BINDER_SET_CONTEXT_MGR already set [ 703.737842] binder: 32479:32489 ioctl 40046207 0 returned -16 [ 703.738953] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.738972] binder: 32479:32489 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.828189] binder: BINDER_SET_CONTEXT_MGR already set [ 703.828198] binder: 32501:32503 ioctl 40046207 0 returned -16 [ 703.828313] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.828333] binder: 32501:32503 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.882768] binder: BINDER_SET_CONTEXT_MGR already set [ 703.882777] binder: 32521:32528 ioctl 40046207 0 returned -16 [ 703.882892] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.882910] binder: 32521:32528 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 703.952417] binder: BINDER_SET_CONTEXT_MGR already set [ 703.952426] binder: 32535:32543 ioctl 40046207 0 returned -16 [ 703.952517] binder_alloc: 23734: binder_alloc_buf, no vma [ 703.952535] binder: 32535:32543 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.076147] binder: BINDER_SET_CONTEXT_MGR already set [ 704.076158] binder: 32572:32577 ioctl 40046207 0 returned -16 [ 704.076528] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.076550] binder: 32572:32577 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.117661] binder: BINDER_SET_CONTEXT_MGR already set [ 704.117672] binder: 32583:32587 ioctl 40046207 0 returned -16 [ 704.117797] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.117852] binder: 32583:32587 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.212647] binder: BINDER_SET_CONTEXT_MGR already set [ 704.212658] binder: 32602:32617 ioctl 40046207 0 returned -16 [ 704.212759] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.212778] binder: 32602:32617 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.305129] binder: BINDER_SET_CONTEXT_MGR already set [ 704.305139] binder: 32630:32639 ioctl 40046207 0 returned -16 [ 704.305262] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.305426] binder: 32630:32639 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.358181] binder: BINDER_SET_CONTEXT_MGR already set [ 704.358190] binder: 32650:32654 ioctl 40046207 0 returned -16 [ 704.358293] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.358311] binder: 32650:32654 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.460555] binder: BINDER_SET_CONTEXT_MGR already set [ 704.460565] binder: 32669:32672 ioctl 40046207 0 returned -16 [ 704.460684] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.460703] binder: 32669:32672 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.517932] binder: BINDER_SET_CONTEXT_MGR already set [ 704.517941] binder: 32682:32685 ioctl 40046207 0 returned -16 [ 704.518044] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.518063] binder: 32682:32685 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.604959] binder: BINDER_SET_CONTEXT_MGR already set [ 704.604971] binder: 32709:32713 ioctl 40046207 0 returned -16 [ 704.605957] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.606087] binder: 32709:32713 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.681604] binder: BINDER_SET_CONTEXT_MGR already set [ 704.681707] binder: 32722:32730 ioctl 40046207 0 returned -16 [ 704.681946] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.681966] binder: 32722:32730 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.735006] binder: BINDER_SET_CONTEXT_MGR already set [ 704.735014] binder: 32738:32748 ioctl 40046207 0 returned -16 [ 704.735123] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.735143] binder: 32738:32748 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.808252] binder: BINDER_SET_CONTEXT_MGR already set [ 704.808261] binder: 32760:32762 ioctl 40046207 0 returned -16 [ 704.808375] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.808396] binder: 32760:32762 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.852195] binder: BINDER_SET_CONTEXT_MGR already set [ 704.852204] binder: 308:310 ioctl 40046207 0 returned -16 [ 704.852338] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.852357] binder: 308:310 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.932448] binder: BINDER_SET_CONTEXT_MGR already set [ 704.932458] binder: 321:325 ioctl 40046207 0 returned -16 [ 704.932560] binder_alloc: 23734: binder_alloc_buf, no vma [ 704.932580] binder: 321:325 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 704.999896] binder: BINDER_SET_CONTEXT_MGR already set [ 704.999905] binder: 342:345 ioctl 40046207 0 returned -16 [ 705.000077] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.000097] binder: 342:345 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.073018] binder: BINDER_SET_CONTEXT_MGR already set [ 705.073028] binder: 371:378 ioctl 40046207 0 returned -16 [ 705.073140] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.073159] binder: 371:378 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.108656] binder: BINDER_SET_CONTEXT_MGR already set [ 705.108665] binder: 388:389 ioctl 40046207 0 returned -16 [ 705.108857] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.108877] binder: 388:389 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.186923] binder: BINDER_SET_CONTEXT_MGR already set [ 705.186933] binder: 399:406 ioctl 40046207 0 returned -16 [ 705.187048] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.187068] binder: 399:406 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.273243] binder: BINDER_SET_CONTEXT_MGR already set [ 705.273252] binder: 415:418 ioctl 40046207 0 returned -16 [ 705.273359] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.273377] binder: 415:418 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.342806] binder: BINDER_SET_CONTEXT_MGR already set [ 705.342817] binder: 438:439 ioctl 40046207 0 returned -16 [ 705.342934] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.342953] binder: 438:439 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.380012] binder: BINDER_SET_CONTEXT_MGR already set [ 705.380021] binder: 449:459 ioctl 40046207 0 returned -16 [ 705.380124] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.380141] binder: 449:459 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.441380] binder: BINDER_SET_CONTEXT_MGR already set [ 705.441389] binder: 468:476 ioctl 40046207 0 returned -16 [ 705.442021] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.442040] binder: 468:476 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.539754] binder: BINDER_SET_CONTEXT_MGR already set [ 705.539762] binder: 498:501 ioctl 40046207 0 returned -16 [ 705.539874] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.539894] binder: 498:501 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.597191] binder: BINDER_SET_CONTEXT_MGR already set [ 705.597200] binder: 510:519 ioctl 40046207 0 returned -16 [ 705.597332] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.597453] binder: 510:519 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.659540] binder: BINDER_SET_CONTEXT_MGR already set [ 705.659549] binder: 524:531 ioctl 40046207 0 returned -16 [ 705.659814] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.659832] binder: 524:531 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.757063] binder: BINDER_SET_CONTEXT_MGR already set [ 705.757072] binder: 537:554 ioctl 40046207 0 returned -16 [ 705.757202] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.757221] binder: 537:554 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.815600] binder: BINDER_SET_CONTEXT_MGR already set [ 705.815611] binder: 563:574 ioctl 40046207 0 returned -16 [ 705.815732] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.815752] binder: 563:574 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.850322] binder: BINDER_SET_CONTEXT_MGR already set [ 705.850334] binder: 577:578 ioctl 40046207 0 returned -16 [ 705.850457] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.850477] binder: 577:578 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 705.997497] binder: BINDER_SET_CONTEXT_MGR already set [ 705.997506] binder: 591:597 ioctl 40046207 0 returned -16 [ 705.997598] binder_alloc: 23734: binder_alloc_buf, no vma [ 705.997616] binder: 591:597 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.068405] binder: BINDER_SET_CONTEXT_MGR already set [ 706.068415] binder: 612:616 ioctl 40046207 0 returned -16 [ 706.068562] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.068583] binder: 612:616 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.137523] binder: BINDER_SET_CONTEXT_MGR already set [ 706.137532] binder: 629:638 ioctl 40046207 0 returned -16 [ 706.137647] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.137667] binder: 629:638 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.162349] binder: BINDER_SET_CONTEXT_MGR already set [ 706.162358] binder: 647:649 ioctl 40046207 0 returned -16 [ 706.168787] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.168812] binder: 647:649 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.310313] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.310334] binder: 666:673 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.382377] binder: BINDER_SET_CONTEXT_MGR already set [ 706.382386] binder: 693:700 ioctl 40046207 0 returned -16 [ 706.382490] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.382509] binder: 693:700 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.444452] binder: BINDER_SET_CONTEXT_MGR already set [ 706.444461] binder: 712:717 ioctl 40046207 0 returned -16 [ 706.444576] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.444596] binder: 712:717 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.531417] binder: BINDER_SET_CONTEXT_MGR already set [ 706.531426] binder: 724:736 ioctl 40046207 0 returned -16 [ 706.531526] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.531546] binder: 724:736 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.573428] binder: BINDER_SET_CONTEXT_MGR already set [ 706.573437] binder: 750:752 ioctl 40046207 0 returned -16 [ 706.573532] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.573551] binder: 750:752 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.659416] binder: BINDER_SET_CONTEXT_MGR already set [ 706.659425] binder: 768:779 ioctl 40046207 0 returned -16 [ 706.659610] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.659631] binder: 768:779 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.760635] binder: BINDER_SET_CONTEXT_MGR already set [ 706.760645] binder: 796:799 ioctl 40046207 0 returned -16 [ 706.760768] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.760788] binder: 796:799 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.833808] binder: BINDER_SET_CONTEXT_MGR already set [ 706.833819] binder: 811:814 ioctl 40046207 0 returned -16 [ 706.833933] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.833961] binder: 811:814 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 706.914596] binder: BINDER_SET_CONTEXT_MGR already set [ 706.914605] binder: 823:834 ioctl 40046207 0 returned -16 [ 706.914827] binder_alloc: 23734: binder_alloc_buf, no vma [ 706.914846] binder: 823:834 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.030646] binder: BINDER_SET_CONTEXT_MGR already set [ 707.030656] binder: 860:863 ioctl 40046207 0 returned -16 [ 707.031790] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.031809] binder: 860:863 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.095030] binder: BINDER_SET_CONTEXT_MGR already set [ 707.095047] binder: 874:878 ioctl 40046207 0 returned -16 [ 707.095237] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.095256] binder: 874:878 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.150839] binder: BINDER_SET_CONTEXT_MGR already set [ 707.150849] binder: 890:900 ioctl 40046207 0 returned -16 [ 707.150964] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.150993] binder: 890:900 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.207816] binder: BINDER_SET_CONTEXT_MGR already set [ 707.207825] binder: 907:915 ioctl 40046207 0 returned -16 [ 707.207938] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.207957] binder: 907:915 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.273174] binder: BINDER_SET_CONTEXT_MGR already set [ 707.273186] binder: 923:930 ioctl 40046207 0 returned -16 [ 707.274245] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.274266] binder: 923:930 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.348798] binder: BINDER_SET_CONTEXT_MGR already set [ 707.348817] binder: 946:950 ioctl 40046207 0 returned -16 [ 707.349035] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.349055] binder: 946:950 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.458357] binder: BINDER_SET_CONTEXT_MGR already set [ 707.458365] binder: 959:963 ioctl 40046207 0 returned -16 [ 707.458496] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.458515] binder: 959:963 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.509773] binder: BINDER_SET_CONTEXT_MGR already set [ 707.509782] binder: 983:986 ioctl 40046207 0 returned -16 [ 707.510093] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.510114] binder: 983:986 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.584004] binder: BINDER_SET_CONTEXT_MGR already set [ 707.584014] binder: 1002:1009 ioctl 40046207 0 returned -16 [ 707.584788] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.584808] binder: 1002:1009 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.668353] binder: BINDER_SET_CONTEXT_MGR already set [ 707.668363] binder: 1023:1026 ioctl 40046207 0 returned -16 [ 707.668492] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.668512] binder: 1023:1026 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.720774] binder: BINDER_SET_CONTEXT_MGR already set [ 707.720783] binder: 1038:1043 ioctl 40046207 0 returned -16 [ 707.721872] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.721892] binder: 1038:1043 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.772144] binder: BINDER_SET_CONTEXT_MGR already set [ 707.772153] binder: 1049:1056 ioctl 40046207 0 returned -16 [ 707.772349] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.772399] binder: 1049:1056 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.847464] binder: BINDER_SET_CONTEXT_MGR already set [ 707.847473] binder: 1074:1079 ioctl 40046207 0 returned -16 [ 707.848521] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.848541] binder: 1074:1079 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 707.942905] binder: BINDER_SET_CONTEXT_MGR already set [ 707.942915] binder: 1092:1098 ioctl 40046207 0 returned -16 [ 707.943038] binder_alloc: 23734: binder_alloc_buf, no vma [ 707.943061] binder: 1092:1098 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.010786] binder: BINDER_SET_CONTEXT_MGR already set [ 708.010796] binder: 1114:1122 ioctl 40046207 0 returned -16 [ 708.010929] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.010951] binder: 1114:1122 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.116496] binder: BINDER_SET_CONTEXT_MGR already set [ 708.116505] binder: 1146:1147 ioctl 40046207 0 returned -16 [ 708.116609] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.116629] binder: 1146:1147 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.176908] binder: BINDER_SET_CONTEXT_MGR already set [ 708.176916] binder: 1159:1169 ioctl 40046207 0 returned -16 [ 708.177026] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.177047] binder: 1159:1169 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.249207] binder: BINDER_SET_CONTEXT_MGR already set [ 708.249216] binder: 1188:1194 ioctl 40046207 0 returned -16 [ 708.249959] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.249979] binder: 1188:1194 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.330907] binder: BINDER_SET_CONTEXT_MGR already set [ 708.330917] binder: 1210:1215 ioctl 40046207 0 returned -16 [ 708.331182] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.331200] binder: 1210:1215 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.401925] binder: BINDER_SET_CONTEXT_MGR already set [ 708.401936] binder: 1230:1233 ioctl 40046207 0 returned -16 [ 708.402271] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.402289] binder: 1230:1233 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.472412] binder: BINDER_SET_CONTEXT_MGR already set [ 708.472422] binder: 1242:1246 ioctl 40046207 0 returned -16 [ 708.472537] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.472558] binder: 1242:1246 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.546266] binder: BINDER_SET_CONTEXT_MGR already set [ 708.546275] binder: 1258:1265 ioctl 40046207 0 returned -16 [ 708.546963] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.546983] binder: 1258:1265 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.670736] binder: BINDER_SET_CONTEXT_MGR already set [ 708.670745] binder: 1289:1292 ioctl 40046207 0 returned -16 [ 708.670873] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.670893] binder: 1289:1292 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.757230] binder: BINDER_SET_CONTEXT_MGR already set [ 708.757239] binder: 1303:1315 ioctl 40046207 0 returned -16 [ 708.758415] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.758435] binder: 1303:1315 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.839412] binder: BINDER_SET_CONTEXT_MGR already set [ 708.839421] binder: 1326:1333 ioctl 40046207 0 returned -16 [ 708.839538] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.839556] binder: 1326:1333 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.896532] binder: BINDER_SET_CONTEXT_MGR already set [ 708.896541] binder: 1347:1351 ioctl 40046207 0 returned -16 [ 708.896709] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.896729] binder: 1347:1351 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 708.963008] binder: BINDER_SET_CONTEXT_MGR already set [ 708.963017] binder: 1365:1370 ioctl 40046207 0 returned -16 [ 708.963127] binder_alloc: 23734: binder_alloc_buf, no vma [ 708.963148] binder: 1365:1370 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.007890] binder: BINDER_SET_CONTEXT_MGR already set [ 709.007899] binder: 1377:1378 ioctl 40046207 0 returned -16 [ 709.008531] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.008581] binder: 1377:1378 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.110808] binder: BINDER_SET_CONTEXT_MGR already set [ 709.110818] binder: 1390:1401 ioctl 40046207 0 returned -16 [ 709.110939] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.110959] binder: 1390:1401 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.160553] binder: BINDER_SET_CONTEXT_MGR already set [ 709.160563] binder: 1405:1410 ioctl 40046207 0 returned -16 [ 709.161613] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.161633] binder: 1405:1410 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.238869] binder: BINDER_SET_CONTEXT_MGR already set [ 709.238880] binder: 1425:1435 ioctl 40046207 0 returned -16 [ 709.267155] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.267177] binder: 1425:1435 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.344899] binder: BINDER_SET_CONTEXT_MGR already set [ 709.344907] binder: 1454:1463 ioctl 40046207 0 returned -16 [ 709.344999] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.345018] binder: 1454:1463 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.409703] binder: BINDER_SET_CONTEXT_MGR already set [ 709.409713] binder: 1474:1482 ioctl 40046207 0 returned -16 [ 709.409836] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.409857] binder: 1474:1482 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.481932] binder: BINDER_SET_CONTEXT_MGR already set [ 709.481942] binder: 1491:1498 ioctl 40046207 0 returned -16 [ 709.482710] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.482730] binder: 1491:1498 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.560117] binder: BINDER_SET_CONTEXT_MGR already set [ 709.560128] binder: 1515:1523 ioctl 40046207 0 returned -16 [ 709.560240] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.560262] binder: 1515:1523 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.627655] binder: BINDER_SET_CONTEXT_MGR already set [ 709.627664] binder: 1536:1543 ioctl 40046207 0 returned -16 [ 709.627780] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.627799] binder: 1536:1543 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.720962] binder: BINDER_SET_CONTEXT_MGR already set [ 709.720971] binder: 1557:1564 ioctl 40046207 0 returned -16 [ 709.721154] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.721173] binder: 1557:1564 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.755885] binder: BINDER_SET_CONTEXT_MGR already set [ 709.755895] binder: 1572:1576 ioctl 40046207 0 returned -16 [ 709.756015] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.756036] binder: 1572:1576 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.818284] binder: BINDER_SET_CONTEXT_MGR already set [ 709.818294] binder: 1589:1595 ioctl 40046207 0 returned -16 [ 709.818855] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.818877] binder: 1589:1595 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.881895] binder: BINDER_SET_CONTEXT_MGR already set [ 709.881904] binder: 1600:1611 ioctl 40046207 0 returned -16 [ 709.882014] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.882033] binder: 1600:1611 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 709.953454] binder: BINDER_SET_CONTEXT_MGR already set [ 709.953462] binder: 1618:1624 ioctl 40046207 0 returned -16 [ 709.953566] binder_alloc: 23734: binder_alloc_buf, no vma [ 709.953586] binder: 1618:1624 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.156617] binder: BINDER_SET_CONTEXT_MGR already set [ 710.156626] binder: 1650:1652 ioctl 40046207 0 returned -16 [ 710.156739] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.156759] binder: 1650:1652 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.184324] binder: BINDER_SET_CONTEXT_MGR already set [ 710.184333] binder: 1660:1664 ioctl 40046207 0 returned -16 [ 710.184432] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.184451] binder: 1660:1664 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.286763] binder: BINDER_SET_CONTEXT_MGR already set [ 710.286773] binder: 1677:1691 ioctl 40046207 0 returned -16 [ 710.286896] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.286915] binder: 1677:1691 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.365381] binder: BINDER_SET_CONTEXT_MGR already set [ 710.365391] binder: 1699:1710 ioctl 40046207 0 returned -16 [ 710.365508] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.365527] binder: 1699:1710 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.473643] binder: BINDER_SET_CONTEXT_MGR already set [ 710.473653] binder: 1733:1740 ioctl 40046207 0 returned -16 [ 710.473749] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.473768] binder: 1733:1740 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.547836] binder: BINDER_SET_CONTEXT_MGR already set [ 710.547845] binder: 1756:1760 ioctl 40046207 0 returned -16 [ 710.547961] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.547982] binder: 1756:1760 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.601701] binder: BINDER_SET_CONTEXT_MGR already set [ 710.601712] binder: 1774:1775 ioctl 40046207 0 returned -16 [ 710.601816] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.601835] binder: 1774:1775 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.662425] binder: BINDER_SET_CONTEXT_MGR already set [ 710.662433] binder: 1788:1790 ioctl 40046207 0 returned -16 [ 710.662540] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.662557] binder: 1788:1790 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.699178] binder: BINDER_SET_CONTEXT_MGR already set [ 710.699187] binder: 1803:1807 ioctl 40046207 0 returned -16 [ 710.699295] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.699325] binder: 1803:1807 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.763563] binder: BINDER_SET_CONTEXT_MGR already set [ 710.763572] binder: 1819:1824 ioctl 40046207 0 returned -16 [ 710.763689] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.763866] binder: 1819:1824 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.816716] binder: BINDER_SET_CONTEXT_MGR already set [ 710.816725] binder: 1833:1838 ioctl 40046207 0 returned -16 [ 710.816860] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.816878] binder: 1833:1838 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.864793] binder: BINDER_SET_CONTEXT_MGR already set [ 710.864802] binder: 1851:1854 ioctl 40046207 0 returned -16 [ 710.865238] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.865258] binder: 1851:1854 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 710.998720] binder: BINDER_SET_CONTEXT_MGR already set [ 710.998729] binder: 1883:1887 ioctl 40046207 0 returned -16 [ 710.998840] binder_alloc: 23734: binder_alloc_buf, no vma [ 710.998860] binder: 1883:1887 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.088291] binder: BINDER_SET_CONTEXT_MGR already set [ 711.088300] binder: 1903:1909 ioctl 40046207 0 returned -16 [ 711.088418] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.088448] binder: 1903:1909 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.138889] binder: BINDER_SET_CONTEXT_MGR already set [ 711.138898] binder: 1920:1922 ioctl 40046207 0 returned -16 [ 711.139015] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.139035] binder: 1920:1922 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.256502] binder: BINDER_SET_CONTEXT_MGR already set [ 711.256511] binder: 1950:1954 ioctl 40046207 0 returned -16 [ 711.256628] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.256648] binder: 1950:1954 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.336735] binder: BINDER_SET_CONTEXT_MGR already set [ 711.336745] binder: 1973:1978 ioctl 40046207 0 returned -16 [ 711.336859] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.336878] binder: 1973:1978 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.402467] binder: BINDER_SET_CONTEXT_MGR already set [ 711.402476] binder: 1994:1998 ioctl 40046207 0 returned -16 [ 711.402574] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.402593] binder: 1994:1998 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.522495] binder: BINDER_SET_CONTEXT_MGR already set [ 711.522504] binder: 2021:2032 ioctl 40046207 0 returned -16 [ 711.522605] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.522624] binder: 2021:2032 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.596785] binder: BINDER_SET_CONTEXT_MGR already set [ 711.596795] binder: 2041:2046 ioctl 40046207 0 returned -16 [ 711.596897] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.596918] binder: 2041:2046 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.640280] binder: BINDER_SET_CONTEXT_MGR already set [ 711.640290] binder: 2060:2070 ioctl 40046207 0 returned -16 [ 711.640423] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.640441] binder: 2060:2070 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.695897] binder: BINDER_SET_CONTEXT_MGR already set [ 711.695907] binder: 2077:2098 ioctl 40046207 0 returned -16 [ 711.697016] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.697034] binder: 2077:2098 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.758535] binder: BINDER_SET_CONTEXT_MGR already set [ 711.758544] binder: 2108:2109 ioctl 40046207 0 returned -16 [ 711.768286] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.768317] binder: 2108:2109 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.832253] binder: BINDER_SET_CONTEXT_MGR already set [ 711.832262] binder: 2129:2132 ioctl 40046207 0 returned -16 [ 711.832374] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.832393] binder: 2129:2132 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.875034] binder: BINDER_SET_CONTEXT_MGR already set [ 711.875043] binder: 2141:2146 ioctl 40046207 0 returned -16 [ 711.875144] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.875164] binder: 2141:2146 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 711.945366] binder: BINDER_SET_CONTEXT_MGR already set [ 711.945376] binder: 2156:2163 ioctl 40046207 0 returned -16 [ 711.945479] binder_alloc: 23734: binder_alloc_buf, no vma [ 711.945497] binder: 2156:2163 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.019661] binder: BINDER_SET_CONTEXT_MGR already set [ 712.019670] binder: 2177:2181 ioctl 40046207 0 returned -16 [ 712.019790] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.019808] binder: 2177:2181 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.086985] binder: BINDER_SET_CONTEXT_MGR already set [ 712.086995] binder: 2195:2202 ioctl 40046207 0 returned -16 [ 712.087108] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.087128] binder: 2195:2202 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.226328] binder: BINDER_SET_CONTEXT_MGR already set [ 712.226338] binder: 2228:2234 ioctl 40046207 0 returned -16 [ 712.226701] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.226721] binder: 2228:2234 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.307604] binder: BINDER_SET_CONTEXT_MGR already set [ 712.307613] binder: 2254:2258 ioctl 40046207 0 returned -16 [ 712.307927] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.307948] binder: 2254:2258 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.379397] binder: BINDER_SET_CONTEXT_MGR already set [ 712.379408] binder: 2272:2282 ioctl 40046207 0 returned -16 [ 712.379524] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.379543] binder: 2272:2282 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.444373] binder: BINDER_SET_CONTEXT_MGR already set [ 712.444383] binder: 2287:2296 ioctl 40046207 0 returned -16 [ 712.445032] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.445053] binder: 2287:2296 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.528700] binder: BINDER_SET_CONTEXT_MGR already set [ 712.528709] binder: 2317:2322 ioctl 40046207 0 returned -16 [ 712.528816] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.528836] binder: 2317:2322 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.581575] binder: BINDER_SET_CONTEXT_MGR already set [ 712.581585] binder: 2335:2341 ioctl 40046207 0 returned -16 [ 712.581694] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.581714] binder: 2335:2341 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.655441] binder: BINDER_SET_CONTEXT_MGR already set [ 712.655451] binder: 2352:2355 ioctl 40046207 0 returned -16 [ 712.655567] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.655586] binder: 2352:2355 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.715598] binder: BINDER_SET_CONTEXT_MGR already set [ 712.715609] binder: 2371:2375 ioctl 40046207 0 returned -16 [ 712.715878] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.715898] binder: 2371:2375 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.782017] binder: BINDER_SET_CONTEXT_MGR already set [ 712.782026] binder: 2387:2391 ioctl 40046207 0 returned -16 [ 712.782140] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.782158] binder: 2387:2391 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.911665] binder: BINDER_SET_CONTEXT_MGR already set [ 712.911675] binder: 2415:2420 ioctl 40046207 0 returned -16 [ 712.930639] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.930661] binder: 2415:2420 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 712.991985] binder: BINDER_SET_CONTEXT_MGR already set [ 712.991994] binder: 2439:2441 ioctl 40046207 0 returned -16 [ 712.992118] binder_alloc: 23734: binder_alloc_buf, no vma [ 712.992138] binder: 2439:2441 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.092915] binder: BINDER_SET_CONTEXT_MGR already set [ 713.092927] binder: 2457:2465 ioctl 40046207 0 returned -16 [ 713.094051] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.094072] binder: 2457:2465 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.162197] binder: BINDER_SET_CONTEXT_MGR already set [ 713.162207] binder: 2493:2495 ioctl 40046207 0 returned -16 [ 713.162375] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.162394] binder: 2493:2495 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.206172] binder: BINDER_SET_CONTEXT_MGR already set [ 713.206182] binder: 2502:2507 ioctl 40046207 0 returned -16 [ 713.206284] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.206319] binder: 2502:2507 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.251332] binder: BINDER_SET_CONTEXT_MGR already set [ 713.251341] binder: 2513:2518 ioctl 40046207 0 returned -16 [ 713.251455] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.251475] binder: 2513:2518 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.328328] binder: BINDER_SET_CONTEXT_MGR already set [ 713.328336] binder: 2534:2538 ioctl 40046207 0 returned -16 [ 713.328438] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.328492] binder: 2534:2538 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.402761] binder: BINDER_SET_CONTEXT_MGR already set [ 713.402770] binder: 2541:2546 ioctl 40046207 0 returned -16 [ 713.402887] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.402907] binder: 2541:2546 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.449027] binder: BINDER_SET_CONTEXT_MGR already set [ 713.449038] binder: 2565:2567 ioctl 40046207 0 returned -16 [ 713.449153] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.449173] binder: 2565:2567 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.548487] binder: BINDER_SET_CONTEXT_MGR already set [ 713.548496] binder: 2581:2587 ioctl 40046207 0 returned -16 [ 713.548615] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.548645] binder: 2581:2587 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.615404] binder: BINDER_SET_CONTEXT_MGR already set [ 713.615414] binder: 2601:2604 ioctl 40046207 0 returned -16 [ 713.616567] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.616589] binder: 2601:2604 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.699090] binder: BINDER_SET_CONTEXT_MGR already set [ 713.699100] binder: 2611:2626 ioctl 40046207 0 returned -16 [ 713.699386] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.699405] binder: 2611:2626 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.793592] binder: BINDER_SET_CONTEXT_MGR already set [ 713.793604] binder: 2648:2652 ioctl 40046207 0 returned -16 [ 713.793723] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.793744] binder: 2648:2652 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 713.927600] binder: BINDER_SET_CONTEXT_MGR already set [ 713.927609] binder: 2662:2683 ioctl 40046207 0 returned -16 [ 713.927918] binder_alloc: 23734: binder_alloc_buf, no vma [ 713.927936] binder: 2662:2683 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.042477] binder: BINDER_SET_CONTEXT_MGR already set [ 714.042491] binder: 2693:2709 ioctl 40046207 0 returned -16 [ 714.045615] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.045639] binder: 2693:2709 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.196934] binder: BINDER_SET_CONTEXT_MGR already set [ 714.196944] binder: 2732:2738 ioctl 40046207 0 returned -16 [ 714.197116] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.197135] binder: 2732:2738 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.256678] binder: BINDER_SET_CONTEXT_MGR already set [ 714.256687] binder: 2750:2756 ioctl 40046207 0 returned -16 [ 714.256792] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.256811] binder: 2750:2756 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.344764] binder: BINDER_SET_CONTEXT_MGR already set [ 714.344773] binder: 2773:2783 ioctl 40046207 0 returned -16 [ 714.344905] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.344924] binder: 2773:2783 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.486368] binder: BINDER_SET_CONTEXT_MGR already set [ 714.486377] binder: 2794:2815 ioctl 40046207 0 returned -16 [ 714.486492] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.486510] binder: 2794:2815 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.544441] binder: BINDER_SET_CONTEXT_MGR already set [ 714.544450] binder: 2823:2831 ioctl 40046207 0 returned -16 [ 714.544567] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.544587] binder: 2823:2831 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.613968] binder: BINDER_SET_CONTEXT_MGR already set [ 714.613978] binder: 2842:2849 ioctl 40046207 0 returned -16 [ 714.614101] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.614121] binder: 2842:2849 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.736404] binder: BINDER_SET_CONTEXT_MGR already set [ 714.736413] binder: 2879:2882 ioctl 40046207 0 returned -16 [ 714.736696] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.736714] binder: 2879:2882 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.840696] binder: BINDER_SET_CONTEXT_MGR already set [ 714.840705] binder: 2902:2905 ioctl 40046207 0 returned -16 [ 714.840820] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.840841] binder: 2902:2905 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 714.922621] binder: BINDER_SET_CONTEXT_MGR already set [ 714.922630] binder: 2916:2924 ioctl 40046207 0 returned -16 [ 714.923262] binder_alloc: 23734: binder_alloc_buf, no vma [ 714.923283] binder: 2916:2924 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.005807] binder: BINDER_SET_CONTEXT_MGR already set [ 715.005817] binder: 2944:2947 ioctl 40046207 0 returned -16 [ 715.005919] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.005939] binder: 2944:2947 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.092413] binder: BINDER_SET_CONTEXT_MGR already set [ 715.092423] binder: 2948:2966 ioctl 40046207 0 returned -16 [ 715.094906] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.094927] binder: 2948:2966 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.191282] binder: BINDER_SET_CONTEXT_MGR already set [ 715.191292] binder: 2980:2989 ioctl 40046207 0 returned -16 [ 715.191403] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.191423] binder: 2980:2989 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.257553] binder: BINDER_SET_CONTEXT_MGR already set [ 715.257562] binder: 2997:3005 ioctl 40046207 0 returned -16 [ 715.257671] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.257690] binder: 2997:3005 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.315576] binder: BINDER_SET_CONTEXT_MGR already set [ 715.315586] binder: 3022:3027 ioctl 40046207 0 returned -16 [ 715.315695] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.315714] binder: 3022:3027 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.362994] binder: BINDER_SET_CONTEXT_MGR already set [ 715.363003] binder: 3034:3037 ioctl 40046207 0 returned -16 [ 715.363314] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.363334] binder: 3034:3037 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.430055] binder: BINDER_SET_CONTEXT_MGR already set [ 715.430065] binder: 3046:3060 ioctl 40046207 0 returned -16 [ 715.430165] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.430185] binder: 3046:3060 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.509545] binder: BINDER_SET_CONTEXT_MGR already set [ 715.509553] binder: 3067:3079 ioctl 40046207 0 returned -16 [ 715.510329] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.510349] binder: 3067:3079 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.595409] binder: BINDER_SET_CONTEXT_MGR already set [ 715.595418] binder: 3093:3101 ioctl 40046207 0 returned -16 [ 715.595533] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.595553] binder: 3093:3101 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.651731] binder: BINDER_SET_CONTEXT_MGR already set [ 715.651740] binder: 3114:3118 ioctl 40046207 0 returned -16 [ 715.651839] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.651859] binder: 3114:3118 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.750583] binder: BINDER_SET_CONTEXT_MGR already set [ 715.750594] binder: 3123:3138 ioctl 40046207 0 returned -16 [ 715.750705] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.750726] binder: 3123:3138 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.803957] binder: BINDER_SET_CONTEXT_MGR already set [ 715.803967] binder: 3150:3154 ioctl 40046207 0 returned -16 [ 715.804074] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.804094] binder: 3150:3154 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.867534] binder: BINDER_SET_CONTEXT_MGR already set [ 715.867543] binder: 3162:3168 ioctl 40046207 0 returned -16 [ 715.867660] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.867678] binder: 3162:3168 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.923184] binder: BINDER_SET_CONTEXT_MGR already set [ 715.923194] binder: 3182:3183 ioctl 40046207 0 returned -16 [ 715.923296] binder_alloc: 23734: binder_alloc_buf, no vma [ 715.923328] binder: 3182:3183 transaction failed 29189/-3, size 72-1008042246168 line 3136 [ 715.964202] INFO: task kworker/u4:2:2099 blocked for more than 140 seconds. [ 715.964208] Not tainted 4.9.141+ #23 [ 715.964210] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 715.964230] kworker/u4:2 D25936 2099 2 0x80000000 [ 715.964248] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 715.964261] ffff88018a49df00 0000000000000000 ffff8801d39a2100 ffff8801da5faf80 [ 715.964273] ffff8801db621018 ffff880168cff7c0 ffffffff828075c2 0000000000000096 [ 715.964284] ffffffff83cd2730 ffffffff830d2c20 0000000000002533 ffff8801db6218f0 [ 715.964286] Call Trace: [ 715.964299] [] ? __schedule+0x662/0x1b10 [ 715.964307] [] schedule+0x7f/0x1b0 [ 715.964314] [] schedule_timeout+0x735/0xe20 [ 715.964322] [] ? mod_timer+0x5b2/0xf80 [ 715.964332] [] ? calc_wheel_index+0x33/0x1b0 [ 715.964340] [] ? usleep_range+0x140/0x140 [ 715.964347] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 715.964355] [] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 715.964363] [] ? mark_held_locks+0xc7/0x130 [ 715.964370] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 715.964378] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 715.964385] [] wait_for_common+0x3ef/0x5d0 [ 715.964394] [] ? out_of_line_wait_on_atomic_t+0x1e0/0x1e0 [ 715.964401] [] ? wake_up_q+0xe0/0xe0 [ 715.964409] [] ? srcu_reschedule+0x85/0x310 [ 715.964416] [] ? srcu_advance_batches+0x1e4/0x430 [ 715.964425] [] wait_for_completion+0x18/0x20 [ 715.964431] [] __synchronize_srcu+0x254/0x3b0 [ 715.964438] [] ? srcu_advance_batches+0x430/0x430 [ 715.964446] [] ? trace_raw_output_rcu_utilization+0x150/0x150 [ 715.964454] [] ? fsnotify_mark_destroy_list+0x80/0x390 [ 715.964462] [] ? fsnotify_mark_destroy_list+0x103/0x390 [ 715.964469] [] synchronize_srcu+0x1e/0x40 [ 715.964476] [] fsnotify_mark_destroy_list+0x10f/0x390 [ 715.964486] [] ? debug_object_deactivate+0x214/0x340 [ 715.964493] [] ? fsnotify_init_mark+0xa0/0xa0 [ 715.964502] [] fsnotify_mark_destroy_workfn+0xe/0x10 [ 715.964509] [] process_one_work+0x831/0x15f0 [ 715.964516] [] ? process_one_work+0x774/0x15f0 [ 715.964524] [] ? cancel_delayed_work_sync+0x20/0x20 [ 715.964531] [] worker_thread+0xd6/0x1140 [ 715.964541] [] ? ___preempt_schedule+0x16/0x18 [ 715.964550] [] kthread+0x26d/0x300 [ 715.964556] [] ? process_one_work+0x15f0/0x15f0 [ 715.964563] [] ? kthread_park+0xa0/0xa0 [ 715.964571] [] ? __switch_to_asm+0x34/0x70 [ 715.964579] [] ? kthread_park+0xa0/0xa0 [ 715.964586] [] ? kthread_park+0xa0/0xa0 [ 715.964593] [] ret_from_fork+0x5c/0x70 [ 715.964597] [ 715.964597] Showing all locks held in the system: [ 715.964604] 2 locks held by khungtaskd/24: [ 715.964620] #0: (rcu_read_lock){......}, at: [] watchdog+0x310/0xa20 [ 715.964634] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 715.964645] 1 lock held by rsyslogd/1896: [ 715.964659] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 715.964663] 2 locks held by getty/2023: [ 715.964677] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 715.964691] #1: (&ldata->atomic_read_lock){+.+...}, at: [] n_tty_read+0x202/0x16e0 [ 715.964983] 2 locks held by kworker/u4:2/2099: [ 715.964997] #0: ("events_unbound"){.+.+.+}, at: [] process_one_work+0x73c/0x15f0 [ 715.965010] #1: ((reaper_work).work){+.+...}, at: [] process_one_work+0x774/0x15f0 [ 715.965270] [ 715.965272] ============================================= [ 715.965272] [ 715.965277] NMI backtrace for cpu 1 [ 715.965285] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #23 [ 715.965296] ffff8801d9907d08 ffffffff81b42e79 0000000000000000 0000000000000001 [ 715.965305] 0000000000000001 0000000000000001 ffffffff810983b0 ffff8801d9907d40 [ 715.965313] ffffffff81b4df89 0000000000000001 0000000000000000 0000000000000003 [ 715.965314] Call Trace: [ 715.965325] [] dump_stack+0xc1/0x128 [ 715.965335] [] ? irq_force_complete_move+0x330/0x330 [ 715.965342] [] nmi_cpu_backtrace.cold.0+0x48/0x87 [ 715.965350] [] ? irq_force_complete_move+0x330/0x330 [ 715.965357] [] nmi_trigger_cpumask_backtrace+0x12c/0x151 [ 715.965365] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 715.965372] [] watchdog+0x6ad/0xa20 [ 715.965379] [] ? watchdog+0x310/0xa20 [ 715.965386] [] kthread+0x26d/0x300 [ 715.965394] [] ? reset_hung_task_detector+0x20/0x20 [ 715.965400] [] ? kthread_park+0xa0/0xa0 [ 715.965408] [] ? __switch_to_asm+0x34/0x70 [ 715.965415] [] ? kthread_park+0xa0/0xa0 [ 715.965421] [] ? kthread_park+0xa0/0xa0 [ 715.965428] [] ret_from_fork+0x5c/0x70 [ 715.965434] Sending NMI from CPU 1 to CPUs 0: [ 715.965520] NMI backtrace for cpu 0 [ 715.965523] CPU: 0 PID: 3197 Comm: syz-executor.1 Not tainted 4.9.141+ #23 [ 715.965526] task: ffff88014cecaf80 task.stack: ffff880142c08000 [ 715.965530] RIP: 0023:[<0000000008049bb8>] c [<0000000008049bb8>] 0x8049bb8 [ 715.965532] RSP: 002b:000000000847fb40 EFLAGS: 00000287 [ 715.965536] RAX: 000000002df20810 RBX: 000000002ef20000 RCX: 000000002df20000 [ 715.965539] RDX: 000000002df2080c RSI: 00000000000001fc RDI: 0000000000000bc2 [ 715.965542] RBP: 00000000d203a00e R08: 0000000000000000 R09: 0000000000000000 [ 715.965546] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 715.965549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 715.965552] FS: 0000000000000000(0000) GS:ffff8801db600000(0063) knlGS:0000000009e67900 [ 715.965555] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 715.965559] CR2: 0000000008142f88 CR3: 000000014d409000 CR4: 00000000001606b0 [ 715.966455] Kernel panic - not syncing: hung_task: blocked tasks [ 715.966463] CPU: 1 PID: 24 Comm: khungtaskd Not tainted 4.9.141+ #23 [ 715.966476] ffff8801d9907cc8 ffffffff81b42e79 ffffffff82a78560 00000000ffffffff [ 715.966486] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d9907d88 [ 715.966496] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 715.966497] Call Trace: [ 715.966507] [] dump_stack+0xc1/0x128 [ 715.966515] [] panic+0x1bf/0x39f [ 715.966522] [] ? add_taint.cold.5+0x16/0x16 [ 715.966530] [] ? nmi_trigger_cpumask_backtrace+0x102/0x151 [ 715.966537] [] watchdog+0x6be/0xa20 [ 715.966544] [] ? watchdog+0x310/0xa20 [ 715.966552] [] kthread+0x26d/0x300 [ 715.966560] [] ? reset_hung_task_detector+0x20/0x20 [ 715.966567] [] ? kthread_park+0xa0/0xa0 [ 715.966575] [] ? __switch_to_asm+0x34/0x70 [ 715.966582] [] ? kthread_park+0xa0/0xa0 [ 715.966590] [] ? kthread_park+0xa0/0xa0 [ 715.966597] [] ret_from_fork+0x5c/0x70 [ 715.966958] Kernel Offset: disabled [ 727.772270] Rebooting in 86400 seconds..