)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  343.657046] binder_alloc: 20067: binder_alloc_buf, no vma
[  343.663024] binder: 20067:20068 transaction failed 29189/-3, size 88-0 line 3284
[  343.671547] binder: send failed reply for transaction 2289 to 20067:20068
[  343.680470] binder: undelivered TRANSACTION_COMPLETE
[  343.685593] binder: undelivered TRANSACTION_ERROR: 29189
[  343.693116] binder: undelivered TRANSACTION_ERROR: 29190
[  343.701528] binder_alloc: 20073: binder_alloc_buf, no vma
[  343.701543] binder: 20073:20074 transaction failed 29189/-3, size 88-0 line 3284
[  343.701551] binder: send failed reply for transaction 2293 to 20073:20074
[  343.726203] binder: undelivered TRANSACTION_ERROR: 29190
[  343.732046] binder: undelivered TRANSACTION_COMPLETE
[  343.737378] binder: undelivered TRANSACTION_ERROR: 29189
22:42:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  343.863100] binder: undelivered TRANSACTION_ERROR: 29201
[  343.874583] binder: send failed reply for transaction 2271 to 20039:20040
[  343.879768] binder_alloc: 20076: binder_alloc_buf, no vma
[  343.879783] binder: 20076:20078 transaction failed 29189/-3, size 88-0 line 3284
[  343.879789] binder: send failed reply for transaction 2296 to 20076:20078
[  343.906248] binder: undelivered TRANSACTION_ERROR: 29190
22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  343.912209] binder: undelivered TRANSACTION_COMPLETE
[  343.917547] binder: undelivered TRANSACTION_ERROR: 29189
[  343.919123] binder: 20081:20082 got reply transaction with no transaction stack
[  343.919135] binder: 20081:20082 transaction failed 29201/-71, size 88-0 line 3046
[  343.941198] binder: release 20081:20082 transaction 2301 out, still active
[  343.948818] binder: undelivered TRANSACTION_COMPLETE
[  343.954276] binder: undelivered TRANSACTION_ERROR: 29201
22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  343.955492] binder: 20084:20085 got reply transaction with no transaction stack
[  343.955499] binder: 20084:20085 transaction failed 29201/-71, size 88-0 line 3046
[  343.968897] binder: 20077:20086 got reply transaction with no transaction stack
[  343.968904] binder: 20077:20086 transaction failed 29201/-71, size 88-24 line 3046
22:42:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  343.990477] binder: BINDER_SET_CONTEXT_MGR already set
[  343.990486] binder: 20088:20089 ioctl 40046207 0 returned -16
[  343.990593] binder_alloc: 20084: binder_alloc_buf, no vma
[  343.990611] binder: 20088:20089 transaction failed 29189/-3, size 0-0 line 3284
[  343.990978] binder: 20088:20089 got reply transaction with no transaction stack
[  343.990984] binder: 20088:20089 transaction failed 29201/-71, size 88-0 line 3046
[  344.053282] binder: send failed reply for transaction 2301, target dead
[  344.064646] binder: release 20090:20092 transaction 2310 out, still active
[  344.072695] binder: BINDER_SET_CONTEXT_MGR already set
[  344.074934] binder: BINDER_SET_CONTEXT_MGR already set
[  344.074941] binder: 20096:20098 ioctl 40046207 0 returned -16
[  344.075042] binder_alloc: 20090: binder_alloc_buf, no vma
[  344.075058] binder: 20096:20098 transaction failed 29189/-3, size 0-0 line 3284
[  344.078333] binder: undelivered TRANSACTION_COMPLETE
[  344.078380] binder: release 20090:20092 transaction 2310 in, still active
[  344.078384] binder: send failed reply for transaction 2310, target dead
[  344.126738] binder: undelivered TRANSACTION_ERROR: 29189
[  344.127473] binder_alloc: 20084: binder_alloc_buf, no vma
[  344.127492] binder: 20095:20103 transaction failed 29189/-3, size 0-0 line 3284
[  344.132702] binder: 20095:20103 ioctl c0306201 0 returned -14
[  344.133022] binder: 20095:20103 got reply transaction with no transaction stack
[  344.133029] binder: 20095:20103 transaction failed 29201/-71, size 88-0 line 3046
[  344.137084] binder: 20095:20097 ioctl 40046207 0 returned -16
[  344.174277] binder: undelivered TRANSACTION_ERROR: 29189
[  344.179812] binder: undelivered TRANSACTION_ERROR: 29201
[  344.185397] binder: undelivered TRANSACTION_ERROR: 29201
[  344.191004] binder: undelivered TRANSACTION_ERROR: 29189
[  344.196606] binder: release 20084:20085 transaction 2304 out, still active
[  344.203657] binder: undelivered TRANSACTION_COMPLETE
[  344.208817] binder: undelivered TRANSACTION_ERROR: 29201
[  344.214280] binder: send failed reply for transaction 2304, target dead
[  344.221477] binder: undelivered TRANSACTION_COMPLETE
[  344.226910] binder: undelivered TRANSACTION_ERROR: 29189
22:42:00 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:00 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  344.471894] binder: release 20107:20110 transaction 2317 out, still active
[  344.480111] binder: 20111:20112 ioctl c0306201 0 returned -14
[  344.481489] binder: undelivered TRANSACTION_COMPLETE
[  344.482778] binder: send failed reply for transaction 2317, target dead
[  344.499137] binder: 20111:20112 got reply transaction with no transaction stack
[  344.506817] binder: 20111:20112 transaction failed 29201/-71, size 88-0 line 3046
[  344.519377] binder: undelivered TRANSACTION_ERROR: 29201
[  344.525047] binder: send failed reply for transaction 2319 to 20111:20112
[  344.533001] binder: undelivered TRANSACTION_COMPLETE
[  344.538275] binder: undelivered TRANSACTION_ERROR: 29189
22:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:01 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:01 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  344.711309] binder: undelivered TRANSACTION_ERROR: 29201
[  344.729922] binder: send failed reply for transaction 2299 to 20077:20080
[  344.740742] binder: BINDER_SET_CONTEXT_MGR already set
[  344.746189] binder: 20116:20119 ioctl c0306201 0 returned -14
[  344.746266] binder: 20116:20119 got reply transaction with no transaction stack
[  344.746274] binder: 20116:20119 transaction failed 29201/-71, size 88-0 line 3046
[  344.764048] binder: BINDER_SET_CONTEXT_MGR already set
[  344.764056] binder: 20126:20127 ioctl 40046207 0 returned -16
[  344.764160] binder_alloc: 20116: binder_alloc_buf, no vma
[  344.764179] binder: 20126:20127 transaction failed 29189/-3, size 0-0 line 3284
[  344.797536] binder: 20121:20129 got reply transaction with no transaction stack
22:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

[  344.797544] binder: 20121:20129 transaction failed 29201/-71, size 88-24 line 3046
[  344.815718] binder: 20126:20130 got reply transaction with no transaction stack
[  344.815749] binder: send failed reply for transaction 2322 to 20115:20118
[  344.815830] binder: release 20116:20119 transaction 2326 out, still active
[  344.815834] binder: undelivered TRANSACTION_COMPLETE
[  344.815861] binder: undelivered TRANSACTION_ERROR: 29201
[  344.815886] binder: send failed reply for transaction 2326, target dead
22:42:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  344.815964] binder: undelivered TRANSACTION_COMPLETE
[  344.815970] binder: undelivered TRANSACTION_ERROR: 29189
[  344.816017] binder: undelivered TRANSACTION_COMPLETE
[  344.816022] binder: undelivered TRANSACTION_ERROR: 29189
[  344.816125] binder: 20122:20123 ioctl 40046207 0 returned -16
[  344.816186] binder: 20122:20128 transaction failed 29189/-22, size 0-0 line 3138
22:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  344.818662] binder: undelivered TRANSACTION_ERROR: 29189
[  344.839516] binder: 20132:20133 ioctl c0306201 0 returned -14
[  344.839701] binder: release 20132:20133 transaction 2333 out, still active
[  344.839705] binder: undelivered TRANSACTION_COMPLETE
[  344.843174] binder: send failed reply for transaction 2333, target dead
[  344.869800] binder: undelivered TRANSACTION_ERROR: 29189
[  344.900532] binder: 20137:20140 ioctl c0306201 0 returned -14
[  344.900738] binder: release 20137:20140 transaction 2335 out, still active
[  344.900742] binder: undelivered TRANSACTION_COMPLETE
[  344.910589] binder: 20138:20141 ioctl c0306201 0 returned -14
[  344.912763] binder: send failed reply for transaction 2335, target dead
[  344.913850] binder: release 20138:20141 transaction 2338 in, still active
[  344.913857] binder: send failed reply for transaction 2338 to 20138:20141
[  344.913968] binder: undelivered TRANSACTION_COMPLETE
[  344.913974] binder: undelivered TRANSACTION_ERROR: 29189
[  344.938068] binder: 20145:20146 ioctl c0306201 0 returned -14
[  344.941233] binder: release 20145:20146 transaction 2340 in, still active
[  344.941240] binder: send failed reply for transaction 2340 to 20145:20146
[  344.941355] binder: undelivered TRANSACTION_COMPLETE
[  344.941361] binder: undelivered TRANSACTION_ERROR: 29189
[  345.047778] binder: 20126:20130 transaction failed 29201/-71, size 88-0 line 3046
22:42:01 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  345.280621] binder: 20148:20151 ioctl c0306201 0 returned -14
[  345.289144] binder: 20149:20152 ioctl c0306201 0 returned -14
[  345.296962] binder: release 20148:20151 transaction 2342 in, still active
[  345.296968] binder: send failed reply for transaction 2342 to 20148:20151
[  345.297700] binder: undelivered TRANSACTION_COMPLETE
[  345.297709] binder: undelivered TRANSACTION_ERROR: 29189
[  345.327896] binder: release 20149:20152 transaction 2344 out, still active
[  345.334930] binder: undelivered TRANSACTION_COMPLETE
[  345.340556] binder: send failed reply for transaction 2344, target dead
22:42:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:42:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:02 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  345.546796] binder: undelivered TRANSACTION_ERROR: 29201
[  345.552322] binder: send failed reply for transaction 2324 to 20121:20124
[  345.560958] binder: undelivered TRANSACTION_COMPLETE
[  345.569096] binder: undelivered TRANSACTION_ERROR: 29189
[  345.582265] binder: release 20157:20159 transaction 2347 out, still active
[  345.602832] binder: undelivered TRANSACTION_COMPLETE
[  345.608455] binder: BINDER_SET_CONTEXT_MGR already set
[  345.608464] binder: 20165:20167 ioctl 40046207 0 returned -16
[  345.608572] binder_alloc: 20157: binder_alloc_buf, no vma
[  345.608590] binder: 20165:20167 transaction failed 29189/-3, size 0-0 line 3284
[  345.634865] binder: release 20157:20159 transaction 2347 in, still active
[  345.641863] binder: send failed reply for transaction 2347, target dead
22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  345.648813] binder: undelivered TRANSACTION_ERROR: 29201
[  345.651561] binder: 20163:20170 got reply transaction with no transaction stack
[  345.651570] binder: 20163:20170 transaction failed 29201/-71, size 88-0 line 3046
[  345.654205] binder: 20164:20171 got reply transaction with no transaction stack
[  345.654213] binder: 20164:20171 transaction failed 29201/-71, size 88-24 line 3046
[  345.684990] binder: undelivered TRANSACTION_ERROR: 29189
22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  345.714833] binder: release 20174:20175 transaction 2358 out, still active
[  345.722219] binder: undelivered TRANSACTION_COMPLETE
[  345.735107] binder: BINDER_SET_CONTEXT_MGR already set
[  345.735115] binder: 20176:20177 ioctl 40046207 0 returned -16
[  345.735207] binder_alloc: 20174: binder_alloc_buf, no vma
22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  345.735227] binder: 20176:20177 transaction failed 29189/-3, size 0-0 line 3284
[  345.759094] binder: BINDER_SET_CONTEXT_MGR already set
[  345.759114] binder: 20179:20180 ioctl 40046207 0 returned -16
[  345.759213] binder_alloc: 20174: binder_alloc_buf, no vma
[  345.759230] binder: 20179:20180 transaction failed 29189/-3, size 0-0 line 3284
[  345.797988] binder: undelivered TRANSACTION_ERROR: 29189
[  345.798539] binder: BINDER_SET_CONTEXT_MGR already set
[  345.798546] binder: 20182:20183 ioctl 40046207 0 returned -16
[  345.798644] binder_alloc: 20174: binder_alloc_buf, no vma
[  345.798665] binder: 20182:20183 transaction failed 29189/-3, size 0-0 line 3284
[  345.833055] binder: undelivered TRANSACTION_ERROR: 29189
[  345.838838] binder: undelivered TRANSACTION_ERROR: 29189
[  345.844413] binder: release 20174:20175 transaction 2358 in, still active
[  345.851398] binder: send failed reply for transaction 2358, target dead
22:42:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

[  346.102593] binder: 20185:20188 ioctl c0306201 0 returned -14
[  346.110650] binder: release 20185:20188 transaction 2363 out, still active
[  346.117976] binder: undelivered TRANSACTION_COMPLETE
[  346.125504] binder: send failed reply for transaction 2363, target dead
[  346.134072] binder: 20190:20191 ioctl c0306201 0 returned -14
[  346.143889] binder: send failed reply for transaction 2366 to 20190:20191
[  346.151222] binder: undelivered TRANSACTION_COMPLETE
[  346.156356] binder: undelivered TRANSACTION_ERROR: 29189
22:42:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:02 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

[  346.370066] binder: release 20158:20160 transaction 2349 out, still active
[  346.377307] binder: undelivered TRANSACTION_COMPLETE
[  346.382549] binder: send failed reply for transaction 2349, target dead
[  346.402330] binder: undelivered TRANSACTION_ERROR: 29201
22:42:02 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

[  346.417494] binder: send failed reply for transaction 2353 to 20164:20169
[  346.438662] binder: 20196:20203 ioctl c0306201 0 returned -14
[  346.439742] binder: undelivered TRANSACTION_ERROR: 29201
[  346.439759] binder: send failed reply for transaction 2351 to 20163:20168
[  346.439790] binder: undelivered TRANSACTION_COMPLETE
22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  346.439796] binder: undelivered TRANSACTION_ERROR: 29189
[  346.439845] binder: undelivered TRANSACTION_COMPLETE
[  346.439851] binder: undelivered TRANSACTION_ERROR: 29189
[  346.439922] binder: undelivered TRANSACTION_ERROR: 29189
[  346.443680] binder: release 20201:20205 transaction 2372 in, still active
[  346.443686] binder: send failed reply for transaction 2372 to 20201:20205
[  346.443806] binder: undelivered TRANSACTION_COMPLETE
[  346.443812] binder: undelivered TRANSACTION_ERROR: 29189
[  346.465705] binder: release 20208:20209 transaction 2378 in, still active
[  346.465711] binder: send failed reply for transaction 2378 to 20208:20209
[  346.465828] binder: undelivered TRANSACTION_COMPLETE
[  346.465835] binder: undelivered TRANSACTION_ERROR: 29189
[  346.479663] binder: release 20210:20212 transaction 2380 in, still active
[  346.479670] binder: send failed reply for transaction 2380 to 20210:20212
[  346.479788] binder: undelivered TRANSACTION_COMPLETE
[  346.479794] binder: undelivered TRANSACTION_ERROR: 29189
[  346.493894] binder: 20199:20214 got reply transaction with no transaction stack
[  346.493903] binder: 20199:20214 transaction failed 29201/-71, size 88-24 line 3046
[  346.499388] binder: release 20213:20215 transaction 2383 in, still active
[  346.499395] binder: send failed reply for transaction 2383 to 20213:20215
[  346.499660] binder: undelivered TRANSACTION_COMPLETE
[  346.499667] binder: undelivered TRANSACTION_ERROR: 29189
[  346.513442] binder: 20202:20218 got reply transaction with no transaction stack
[  346.513452] binder: 20202:20218 transaction failed 29201/-71, size 88-0 line 3046
[  346.513849] binder: undelivered TRANSACTION_COMPLETE
[  346.514106] binder: undelivered TRANSACTION_COMPLETE
[  346.514113] binder: undelivered transaction 2386, process died.
[  346.648434] binder: release 20196:20203 transaction 2368 out, still active
[  346.655464] binder: undelivered TRANSACTION_COMPLETE
[  346.660652] binder: send failed reply for transaction 2368, target dead
22:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

22:42:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  346.922250] binder: 20221:20225 ioctl c0306201 0 returned -14
[  346.932590] binder: release 20221:20225 transaction 2392 in, still active
[  346.940243] binder: send failed reply for transaction 2392 to 20221:20225
[  346.947618] binder: undelivered TRANSACTION_COMPLETE
[  346.953004] binder: undelivered TRANSACTION_ERROR: 29189
22:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:03 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:03 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  347.231309] binder: release 20198:20206 transaction 2374 out, still active
[  347.244354] binder: undelivered TRANSACTION_COMPLETE
[  347.266589] binder: send failed reply for transaction 2374, target dead
22:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  347.274123] binder: 20230:20232 ioctl c0306201 0 returned -14
[  347.274245] binder: 20230:20232 got reply transaction with no transaction stack
[  347.274254] binder: 20230:20232 transaction failed 29201/-71, size 88-0 line 3046
22:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  347.278296] binder: BINDER_SET_CONTEXT_MGR already set
[  347.278305] binder: 20233:20237 ioctl 40046207 0 returned -16
[  347.278417] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.278436] binder: 20233:20237 transaction failed 29189/-3, size 0-0 line 3284
[  347.279919] binder: 20233:20237 got reply transaction with no transaction stack
[  347.279928] binder: 20233:20237 transaction failed 29201/-71, size 88-24 line 3046
[  347.298380] binder: BINDER_SET_CONTEXT_MGR already set
[  347.298389] binder: 20236:20238 ioctl 40046207 0 returned -16
[  347.298502] binder_alloc: 20202: binder_alloc_buf, no vma
[  347.298520] binder: 20236:20238 transaction failed 29189/-3, size 0-0 line 3284
[  347.301970] binder: BINDER_SET_CONTEXT_MGR already set
[  347.301978] binder: 20242:20244 ioctl 40046207 0 returned -16
[  347.302085] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.302101] binder: 20242:20244 transaction failed 29189/-3, size 0-0 line 3284
[  347.303015] binder: 20242:20244 got reply transaction with no transaction stack
[  347.303031] binder: 20242:20244 transaction failed 29201/-71, size 88-24 line 3046
[  347.310300] binder: BINDER_SET_CONTEXT_MGR already set
[  347.310307] binder: 20243:20245 ioctl 40046207 0 returned -16
[  347.310546] binder_alloc: 20230: binder_alloc_buf, no vma
[  347.310609] binder: 20243:20245 transaction failed 29189/-3, size 0-0 line 3284
[  347.311862] binder: 20243:20245 got reply transaction with no transaction stack
[  347.311870] binder: 20243:20245 transaction failed 29201/-71, size 88-0 line 3046
[  347.350010] binder: 20236:20251 got reply transaction with no transaction stack
[  347.350019] binder: 20236:20251 transaction failed 29201/-71, size 88-0 line 3046
[  347.351148] binder: BINDER_SET_CONTEXT_MGR already set
[  347.351195] binder: 20246:20250 ioctl 40046207 0 returned -16
[  347.351310] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.351326] binder: 20246:20250 transaction failed 29189/-3, size 0-0 line 3284
[  347.352327] binder: 20246:20250 got reply transaction with no transaction stack
[  347.352334] binder: 20246:20250 transaction failed 29201/-71, size 88-24 line 3046
[  347.363621] binder: BINDER_SET_CONTEXT_MGR already set
[  347.363629] binder: 20248:20249 ioctl 40046207 0 returned -16
[  347.363762] binder_alloc: 20230: binder_alloc_buf, no vma
[  347.363780] binder: 20248:20249 transaction failed 29189/-3, size 0-0 line 3284
[  347.370442] binder: BINDER_SET_CONTEXT_MGR already set
[  347.370451] binder: 20253:20254 ioctl 40046207 0 returned -16
[  347.370564] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.370583] binder: 20253:20254 transaction failed 29189/-3, size 0-0 line 3284
[  347.371580] binder: 20253:20254 got reply transaction with no transaction stack
[  347.371589] binder: 20253:20254 transaction failed 29201/-71, size 88-24 line 3046
[  347.389128] binder: BINDER_SET_CONTEXT_MGR already set
[  347.389135] binder: 20255:20256 ioctl 40046207 0 returned -16
[  347.389238] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.389255] binder: 20255:20256 transaction failed 29189/-3, size 0-0 line 3284
[  347.390005] binder: 20255:20256 got reply transaction with no transaction stack
[  347.390018] binder: 20255:20256 transaction failed 29201/-71, size 88-24 line 3046
[  347.411303] binder: 20248:20258 got reply transaction with no transaction stack
[  347.411310] binder: 20248:20258 transaction failed 29201/-71, size 88-24 line 3046
[  347.663546] binder: undelivered TRANSACTION_ERROR: 29189
[  347.669078] binder: undelivered TRANSACTION_ERROR: 29201
[  347.674600] binder: undelivered TRANSACTION_ERROR: 29189
[  347.680118] binder: undelivered TRANSACTION_ERROR: 29201
22:42:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  347.685653] binder: undelivered TRANSACTION_ERROR: 29189
[  347.691218] binder: undelivered TRANSACTION_ERROR: 29201
[  347.696758] binder: undelivered TRANSACTION_ERROR: 29189
[  347.702291] binder: undelivered TRANSACTION_ERROR: 29201
[  347.707881] binder: undelivered TRANSACTION_ERROR: 29189
[  347.715898] binder: send failed reply for transaction 2389 to 20222:20224
[  347.726806] binder: undelivered TRANSACTION_COMPLETE
22:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  347.733623] binder: undelivered TRANSACTION_ERROR: 29189
[  347.739163] binder: undelivered TRANSACTION_ERROR: 29201
[  347.744696] binder: undelivered TRANSACTION_ERROR: 29189
[  347.754629] binder: BINDER_SET_CONTEXT_MGR already set
[  347.754640] binder: 20260:20261 ioctl 40046207 0 returned -16
[  347.755190] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.755209] binder: 20260:20261 transaction failed 29189/-3, size 0-0 line 3284
[  347.756400] binder: 20260:20261 got reply transaction with no transaction stack
[  347.756408] binder: 20260:20261 transaction failed 29201/-71, size 88-24 line 3046
[  347.776264] binder: BINDER_SET_CONTEXT_MGR already set
[  347.776272] binder: 20268:20269 ioctl 40046207 0 returned -16
[  347.779196] binder_alloc: 20199: binder_alloc_buf, no vma
[  347.779215] binder: 20268:20269 transaction failed 29189/-3, size 0-0 line 3284
[  347.825767] binder: 20268:20270 got reply transaction with no transaction stack
[  347.825776] binder: 20268:20270 transaction failed 29201/-71, size 88-24 line 3046
[  347.844672] binder: undelivered TRANSACTION_ERROR: 29189
[  347.850367] binder: undelivered TRANSACTION_ERROR: 29201
[  347.855903] binder: undelivered TRANSACTION_ERROR: 29201
[  347.861496] binder: release 20230:20232 transaction 2394 out, still active
[  347.868539] binder: undelivered TRANSACTION_COMPLETE
[  347.873669] binder: undelivered TRANSACTION_ERROR: 29201
[  347.879186] binder: send failed reply for transaction 2394, target dead
[  347.886010] binder: undelivered TRANSACTION_ERROR: 29201
[  347.891525] binder: send failed reply for transaction 2376 to 20202:20207
[  347.898564] binder: undelivered TRANSACTION_COMPLETE
[  347.903767] binder: undelivered TRANSACTION_ERROR: 29189
[  347.911340] binder: undelivered TRANSACTION_ERROR: 29201
[  347.916896] binder: send failed reply for transaction 2370 to 20199:20204
[  347.923898] binder: undelivered TRANSACTION_COMPLETE
[  347.929035] binder: undelivered TRANSACTION_ERROR: 29189
22:42:04 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:04 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  348.085133] binder: release 20234:20239 transaction 2400 out, still active
[  348.105275] binder: undelivered TRANSACTION_COMPLETE
[  348.109836] binder: BINDER_SET_CONTEXT_MGR already set
[  348.109844] binder: 20273:20275 ioctl 40046207 0 returned -16
[  348.109931] binder_alloc: 20234: binder_alloc_buf, no vma
22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  348.109948] binder: 20273:20275 transaction failed 29189/-3, size 0-0 line 3284
[  348.139815] binder: undelivered TRANSACTION_ERROR: 29201
[  348.146127] binder: undelivered TRANSACTION_ERROR: 29201
[  348.151953] binder: undelivered TRANSACTION_ERROR: 29189
[  348.159118] binder: undelivered TRANSACTION_ERROR: 29189
[  348.165483] binder: 20274:20279 got reply transaction with no transaction stack
[  348.165491] binder: 20274:20279 transaction failed 29201/-71, size 88-0 line 3046
22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  348.181371] binder: send failed reply for transaction 2400, target dead
[  348.183522] binder: 20278:20280 got reply transaction with no transaction stack
[  348.183530] binder: 20278:20280 transaction failed 29201/-71, size 88-0 line 3046
[  348.202664] binder: BINDER_SET_CONTEXT_MGR already set
[  348.202677] binder: 20282:20283 ioctl 40046207 0 returned -16
[  348.202823] binder_alloc: 20278: binder_alloc_buf, no vma
[  348.202845] binder: 20282:20283 transaction failed 29189/-3, size 0-0 line 3284
22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  348.203788] binder: 20282:20283 got reply transaction with no transaction stack
[  348.203796] binder: 20282:20283 transaction failed 29201/-71, size 88-0 line 3046
[  348.248149] binder: BINDER_SET_CONTEXT_MGR already set
[  348.248157] binder: 20285:20286 ioctl 40046207 0 returned -16
[  348.248287] binder_alloc: 20278: binder_alloc_buf, no vma
[  348.248306] binder: 20285:20286 transaction failed 29189/-3, size 0-0 line 3284
22:42:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  348.249201] binder: 20285:20286 got reply transaction with no transaction stack
[  348.249209] binder: 20285:20286 transaction failed 29201/-71, size 88-0 line 3046
[  348.269594] binder: BINDER_SET_CONTEXT_MGR already set
[  348.269602] binder: 20288:20289 ioctl 40046207 0 returned -16
[  348.269723] binder_alloc: 20278: binder_alloc_buf, no vma
[  348.269739] binder: 20288:20289 transaction failed 29189/-3, size 0-0 line 3284
[  348.288257] binder: BINDER_SET_CONTEXT_MGR already set
[  348.288264] binder: 20291:20292 ioctl 40046207 0 returned -16
[  348.288364] binder_alloc: 20278: binder_alloc_buf, no vma
[  348.288382] binder: 20291:20292 transaction failed 29189/-3, size 0-0 line 3284
[  348.328141] binder: BINDER_SET_CONTEXT_MGR already set
[  348.328149] binder: 20294:20295 ioctl 40046207 0 returned -16
[  348.362265] binder: undelivered TRANSACTION_ERROR: 29189
[  348.368034] binder: undelivered TRANSACTION_ERROR: 29189
[  348.373639] binder: undelivered TRANSACTION_ERROR: 29189
[  348.379135] binder: undelivered TRANSACTION_ERROR: 29201
[  348.384801] binder: undelivered TRANSACTION_ERROR: 29189
[  348.390520] binder: undelivered TRANSACTION_ERROR: 29201
[  348.396120] binder: release 20278:20280 transaction 2426 out, still active
[  348.403246] binder: undelivered TRANSACTION_COMPLETE
[  348.408405] binder: undelivered TRANSACTION_ERROR: 29201
[  348.414041] binder: send failed reply for transaction 2426, target dead
22:42:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  348.556311] binder: release 20264:20265 transaction 2418 out, still active
[  348.567555] binder: undelivered TRANSACTION_COMPLETE
[  348.586847] binder: undelivered TRANSACTION_ERROR: 29201
[  348.601167] binder: BINDER_SET_CONTEXT_MGR already set
[  348.601177] binder: 20300:20305 ioctl 40046207 0 returned -16
[  348.601425] binder_alloc: 20264: binder_alloc_buf, no vma
[  348.601443] binder: 20300:20305 transaction failed 29189/-3, size 0-0 line 3284
[  348.605059] binder: BINDER_SET_CONTEXT_MGR already set
[  348.605067] binder: 20301:20306 ioctl 40046207 0 returned -16
[  348.605162] binder_alloc: 20263: binder_alloc_buf, no vma
[  348.605181] binder: 20301:20306 transaction failed 29189/-3, size 0-0 line 3284
[  348.620776] binder: 20303:20307 got transaction with invalid fd, -1
[  348.620801] binder: 20303:20307 transaction failed 29201/-9, size 88-24 line 3427
[  348.620809] binder: send failed reply for transaction 2437 to 20303:20307
[  348.680083] binder: undelivered TRANSACTION_COMPLETE
[  348.685283] binder: undelivered TRANSACTION_ERROR: 29201
[  348.690788] binder: undelivered TRANSACTION_ERROR: 29190
[  348.696381] binder: undelivered TRANSACTION_ERROR: 29189
[  348.702033] binder: send failed reply for transaction 2418, target dead
22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:05 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  348.908038] binder: undelivered TRANSACTION_ERROR: 29189
[  348.921630] binder: undelivered TRANSACTION_ERROR: 29201
[  348.927232] binder: send failed reply for transaction 2423 to 20274:20276
[  348.948391] binder: undelivered TRANSACTION_COMPLETE
22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  348.956245] binder: 20312:20318 got transaction with invalid fd, -1
[  348.956271] binder: 20312:20318 transaction failed 29201/-9, size 88-24 line 3427
[  348.956280] binder: send failed reply for transaction 2440 to 20312:20318
[  349.000662] binder: BINDER_SET_CONTEXT_MGR already set
[  349.000670] binder: 20324:20325 ioctl 40046207 0 returned -16
[  349.000797] binder_alloc: 20312: binder_alloc_buf, no vma
[  349.000814] binder: 20324:20325 transaction failed 29189/-3, size 0-0 line 3284
[  349.024819] binder: 20315:20331 got reply transaction with no transaction stack
[  349.024828] binder: 20315:20331 transaction failed 29201/-71, size 88-0 line 3046
[  349.055012] binder: undelivered TRANSACTION_ERROR: 29189
[  349.060823] binder: undelivered TRANSACTION_COMPLETE
[  349.065936] binder: undelivered TRANSACTION_ERROR: 29201
[  349.071438] binder: undelivered TRANSACTION_ERROR: 29190
22:42:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:05 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

[  349.387858] binder: undelivered TRANSACTION_ERROR: 29189
[  349.398916] binder: undelivered TRANSACTION_ERROR: 29189
[  349.449203] binder: release 20340:20343 transaction 2451 out, still active
[  349.466287] binder: undelivered TRANSACTION_COMPLETE
[  349.474946] binder: release 20340:20343 transaction 2451 in, still active
[  349.482164] binder: send failed reply for transaction 2451, target dead
22:42:06 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:06 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

22:42:06 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  349.746457] binder: release 20313:20317 transaction 2445 out, still active
[  349.753682] binder: undelivered TRANSACTION_COMPLETE
[  349.759028] binder: send failed reply for transaction 2445, target dead
[  349.770201] binder: undelivered TRANSACTION_ERROR: 29201
[  349.775747] binder: send failed reply for transaction 2443 to 20315:20321
22:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:06 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

[  349.802748] binder: release 20353:20356 transaction 2457 out, still active
[  349.830285] binder: 20360:20362 got reply transaction with no transaction stack
[  349.833260] binder: BINDER_SET_CONTEXT_MGR already set
[  349.833268] binder: 20366:20368 ioctl 40046207 0 returned -16
[  349.833466] binder_alloc: 20355: binder_alloc_buf, no vma
[  349.833488] binder: 20366:20368 transaction failed 29189/-3, size 0-0 line 3284
[  349.841480] binder: undelivered TRANSACTION_COMPLETE
[  349.841545] binder: send failed reply for transaction 2457, target dead
[  349.841632] binder: release 20355:20361 transaction 2455 out, still active
[  349.841635] binder: undelivered TRANSACTION_COMPLETE
[  349.841666] binder: release 20355:20361 transaction 2455 in, still active
[  349.841669] binder: send failed reply for transaction 2455, target dead
[  349.841789] binder: undelivered TRANSACTION_ERROR: 29189
[  349.841876] binder: undelivered TRANSACTION_COMPLETE
[  349.841882] binder: undelivered TRANSACTION_ERROR: 29189
[  349.921465] binder: 20360:20362 transaction failed 29201/-71, size 88-0 line 3046
[  349.934620] binder: undelivered TRANSACTION_ERROR: 29201
[  349.940411] binder: send failed reply for transaction 2459 to 20360:20362
[  349.947721] binder: undelivered TRANSACTION_COMPLETE
[  349.953053] binder: undelivered TRANSACTION_ERROR: 29189
22:42:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:06 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:06 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:06 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  350.238024] binder: release 20341:20344 transaction 2449 out, still active
[  350.245072] binder: undelivered TRANSACTION_COMPLETE
[  350.252971] binder: send failed reply for transaction 2449, target dead
22:42:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:06 executing program 4:
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  350.284832] binder: release 20371:20374 transaction 2463 out, still active
[  350.292894] binder: 20372:20379 got reply transaction with no transaction stack
[  350.294698] binder: undelivered TRANSACTION_COMPLETE
[  350.303776] binder: send failed reply for transaction 2463, target dead
[  350.321997] binder: release 20383:20387 transaction 2470 out, still active
22:42:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

[  350.322001] binder: undelivered TRANSACTION_COMPLETE
[  350.335048] binder: send failed reply for transaction 2470, target dead
[  350.354410] binder: 20372:20379 transaction failed 29201/-71, size 88-0 line 3046
[  350.356927] binder: 20390:20392 ioctl c0306201 0 returned -14
[  350.357316] binder: release 20390:20392 transaction 2472 out, still active
[  350.357320] binder: undelivered TRANSACTION_COMPLETE
[  350.361093] binder: send failed reply for transaction 2472, target dead
[  350.396909] binder: undelivered TRANSACTION_ERROR: 29201
[  350.402559] binder: send failed reply for transaction 2467 to 20372:20379
[  350.409760] binder: undelivered TRANSACTION_COMPLETE
[  350.414971] binder: undelivered TRANSACTION_ERROR: 29189
22:42:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

22:42:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:07 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

[  350.595431] binder: release 20351:20358 transaction 2454 out, still active
[  350.602580] binder: undelivered TRANSACTION_COMPLETE
[  350.607863] binder: send failed reply for transaction 2454, target dead
[  350.618912] binder: release 20396:20397 transaction 2474 out, still active
[  350.628683] binder: undelivered TRANSACTION_COMPLETE
[  350.636064] binder: send failed reply for transaction 2474, target dead
[  350.662634] binder: undelivered TRANSACTION_ERROR: 29189
[  350.668022] binder: 20405:20409 got reply transaction with no transaction stack
[  350.668031] binder: 20405:20409 transaction failed 29201/-71, size 88-0 line 3046
[  350.669292] binder: 20402:20406 ioctl c0306201 0 returned -14
[  350.677273] binder: 20407:20410 ioctl c0306201 0 returned -14
[  350.726270] binder: release 20407:20410 transaction 2481 out, still active
[  350.733788] binder: undelivered TRANSACTION_COMPLETE
[  350.739058] binder: send failed reply for transaction 2483 to 20404:20408
[  350.746031] binder: undelivered TRANSACTION_COMPLETE
[  350.751805] binder: undelivered TRANSACTION_ERROR: 29189
[  350.757441] binder: release 20407:20410 transaction 2481 in, still active
[  350.764375] binder: send failed reply for transaction 2481, target dead
[  350.771369] binder: send failed reply for transaction 2479 to 20402:20406
[  350.778515] binder: undelivered TRANSACTION_COMPLETE
[  350.784157] binder: undelivered TRANSACTION_ERROR: 29189
[  350.789697] binder: release 20405:20409 transaction 2476 out, still active
[  350.796709] binder: undelivered TRANSACTION_COMPLETE
[  350.801894] binder: undelivered TRANSACTION_ERROR: 29201
[  350.807419] binder: send failed reply for transaction 2476, target dead
22:42:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

22:42:07 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

22:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  351.090188] binder: release 20381:20382 transaction 2465 out, still active
[  351.097275] binder: undelivered TRANSACTION_COMPLETE
[  351.110714] binder: send failed reply for transaction 2465, target dead
22:42:07 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:07 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:07 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  351.126300] binder: 20417:20422 ioctl c0306201 0 returned -14
22:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  351.129050] binder: 20418:20425 ioctl c0306201 0 returned -14
[  351.153908] binder: 20420:20424 got reply transaction with no transaction stack
[  351.153916] binder: 20420:20424 transaction failed 29201/-71, size 88-0 line 3046
[  351.192933] binder: BINDER_SET_CONTEXT_MGR already set
[  351.192943] binder: 20435:20441 ioctl 40046207 0 returned -16
[  351.193065] binder_alloc: 20420: binder_alloc_buf, no vma
[  351.193085] binder: 20435:20441 transaction failed 29189/-3, size 0-0 line 3284
[  351.193626] binder: 20435:20441 got reply transaction with no transaction stack
[  351.193634] binder: 20435:20441 transaction failed 29201/-71, size 88-0 line 3046
[  351.198334] binder: BINDER_SET_CONTEXT_MGR already set
[  351.198341] binder: 20438:20442 ioctl 40046207 0 returned -16
[  351.198445] binder_alloc: 20418: binder_alloc_buf, no vma
[  351.198462] binder: 20438:20442 transaction failed 29189/-3, size 0-0 line 3284
[  351.198925] binder: BINDER_SET_CONTEXT_MGR already set
[  351.198933] binder: 20433:20440 ioctl 40046207 0 returned -16
[  351.199432] binder_alloc: 20417: binder_alloc_buf, no vma
[  351.199449] binder: 20433:20440 transaction failed 29189/-3, size 0-0 line 3284
[  351.199558] binder: BINDER_SET_CONTEXT_MGR already set
[  351.199564] binder: 20434:20439 ioctl 40046207 0 returned -16
[  351.199653] binder_alloc: 20416: binder_alloc_buf, no vma
[  351.199668] binder: 20434:20439 transaction failed 29189/-3, size 0-0 line 3284
[  351.244864] binder: 20438:20448 ioctl c0306201 0 returned -14
[  351.346422] binder: undelivered TRANSACTION_ERROR: 29189
[  351.351981] binder: undelivered TRANSACTION_ERROR: 29189
[  351.357729] binder: undelivered TRANSACTION_ERROR: 29201
[  351.363340] binder: release 20420:20424 transaction 2493 out, still active
[  351.370418] binder: undelivered TRANSACTION_COMPLETE
[  351.375603] binder: undelivered TRANSACTION_ERROR: 29201
[  351.381130] binder: send failed reply for transaction 2493, target dead
[  351.388036] binder: release 20418:20425 transaction 2487 out, still active
[  351.395043] binder: undelivered TRANSACTION_COMPLETE
[  351.400239] binder: send failed reply for transaction 2489 to 20416:20426
[  351.407294] binder: undelivered TRANSACTION_COMPLETE
[  351.412405] binder: undelivered TRANSACTION_ERROR: 29189
[  351.417959] binder: release 20418:20425 transaction 2487 in, still active
[  351.424899] binder: send failed reply for transaction 2487, target dead
[  351.431970] binder: send failed reply for transaction 2485 to 20417:20422
[  351.439021] binder: undelivered TRANSACTION_COMPLETE
[  351.444127] binder: undelivered TRANSACTION_ERROR: 29189
22:42:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:08 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:08 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  351.926222] binder: release 20421:20427 transaction 2491 out, still active
[  351.933884] binder: undelivered TRANSACTION_COMPLETE
[  351.945971] binder: send failed reply for transaction 2491, target dead
[  351.953167] binder: 20450:20454 got reply transaction with no transaction stack
22:42:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:08 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:08 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  351.953175] binder: 20450:20454 transaction failed 29201/-71, size 88-0 line 3046
[  352.000046] binder: undelivered TRANSACTION_ERROR: 29189
22:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  352.011955] binder: BINDER_SET_CONTEXT_MGR already set
22:42:08 executing program 4:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

22:42:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  352.011965] binder: 20461:20463 ioctl 40046207 0 returned -16
[  352.012055] binder_alloc: 20452: binder_alloc_buf, no vma
[  352.012073] binder: 20461:20463 transaction failed 29189/-3, size 0-0 line 3284
22:42:08 executing program 4:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

[  352.024076] binder: BINDER_SET_CONTEXT_MGR already set
[  352.024084] binder: 20458:20462 ioctl 40046207 0 returned -16
[  352.024526] binder_alloc: 20450: binder_alloc_buf, no vma
[  352.024542] binder: 20458:20462 transaction failed 29189/-3, size 0-0 line 3284
[  352.048125] binder: BINDER_SET_CONTEXT_MGR already set
[  352.048135] binder: 20466:20473 ioctl 40046207 0 returned -16
[  352.048401] binder_alloc: 20449: binder_alloc_buf, no vma
[  352.048420] binder: 20466:20473 transaction failed 29189/-3, size 0-0 line 3284
[  352.081227] binder: BINDER_SET_CONTEXT_MGR already set
[  352.081237] binder: 20476:20477 ioctl 40046207 0 returned -16
[  352.081445] binder_alloc: 20452: binder_alloc_buf, no vma
[  352.081466] binder: 20476:20477 transaction failed 29189/-3, size 0-0 line 3284
[  352.082220] binder: 20476:20477 got reply transaction with no transaction stack
[  352.082228] binder: 20476:20477 transaction failed 29201/-71, size 88-0 line 3046
[  352.099055] binder: BINDER_SET_CONTEXT_MGR already set
[  352.099063] binder: 20481:20486 ioctl 40046207 0 returned -16
[  352.099165] binder_alloc: 20449: binder_alloc_buf, no vma
[  352.099185] binder: 20481:20486 transaction failed 29189/-3, size 0-0 line 3284
[  352.129808] binder: BINDER_SET_CONTEXT_MGR already set
[  352.129816] binder: 20483:20490 ioctl 40046207 0 returned -16
[  352.129914] binder_alloc: 20469: binder_alloc_buf, no vma
[  352.129932] binder: 20483:20490 transaction failed 29189/-3, size 0-0 line 3284
[  352.133571] binder: BINDER_SET_CONTEXT_MGR already set
[  352.133579] binder: 20488:20493 ioctl 40046207 0 returned -16
[  352.135910] binder_alloc: 20452: binder_alloc_buf, no vma
[  352.135929] binder: 20488:20493 transaction failed 29189/-3, size 0-0 line 3284
[  352.138604] binder: 20488:20493 ioctl c0306201 0 returned -14
[  352.147329] binder: 20488:20493 got reply transaction with no transaction stack
[  352.147337] binder: 20488:20493 transaction failed 29201/-71, size 88-24 line 3046
[  352.315245] binder: undelivered TRANSACTION_ERROR: 29189
[  352.320769] binder: undelivered TRANSACTION_ERROR: 29201
[  352.326368] binder: undelivered TRANSACTION_ERROR: 29189
[  352.331971] binder: undelivered TRANSACTION_ERROR: 29189
[  352.337468] binder: undelivered TRANSACTION_ERROR: 29201
[  352.342985] binder: release 20469:20475 transaction 2513 out, still active
[  352.350026] binder: undelivered TRANSACTION_COMPLETE
[  352.355166] binder: release 20469:20475 transaction 2513 in, still active
[  352.362124] binder: send failed reply for transaction 2513, target dead
[  352.369062] binder: undelivered TRANSACTION_ERROR: 29189
[  352.374638] binder: undelivered TRANSACTION_ERROR: 29189
[  352.380225] binder: undelivered TRANSACTION_ERROR: 29189
[  352.385785] binder: send failed reply for transaction 2506 to 20449:20457
[  352.392847] binder: undelivered TRANSACTION_COMPLETE
[  352.397984] binder: undelivered TRANSACTION_ERROR: 29189
[  352.403992] binder: send failed reply for transaction 2504 to 20452:20455
[  352.411198] binder: undelivered TRANSACTION_COMPLETE
[  352.416427] binder: undelivered TRANSACTION_ERROR: 29189
[  352.421974] binder: release 20450:20454 transaction 2501 out, still active
[  352.429030] binder: undelivered TRANSACTION_COMPLETE
[  352.434146] binder: undelivered TRANSACTION_ERROR: 29201
[  352.439643] binder: send failed reply for transaction 2501, target dead
22:42:09 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:09 executing program 4:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

[  352.798187] binder: undelivered TRANSACTION_ERROR: 29189
[  352.810850] binder: release 20498:20499 transaction 2521 out, still active
[  352.820536] binder: undelivered TRANSACTION_COMPLETE
[  352.829921] binder: send failed reply for transaction 2521, target dead
22:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='-'})

[  352.844623] binder: send failed reply for transaction 2510 to 20467:20472
22:42:09 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:42:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

[  352.869003] binder: undelivered TRANSACTION_COMPLETE
[  352.881029] binder_alloc: 20509: binder_alloc_buf, no vma
[  352.881046] binder: 20509:20512 transaction failed 29189/-3, size 88-24 line 3284
22:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  352.881054] binder: send failed reply for transaction 2525 to 20509:20512
[  352.897829] binder: 20507:20513 ioctl c0306201 0 returned -14
[  352.901169] binder: 20507:20513 got reply transaction with no transaction stack
[  352.901179] binder: 20507:20513 transaction failed 29201/-71, size 88-24 line 3046
22:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

[  352.903620] binder: BINDER_SET_CONTEXT_MGR already set
[  352.903627] binder: 20516:20518 ioctl 40046207 0 returned -16
[  352.903737] binder_alloc: 20501: binder_alloc_buf, no vma
[  352.903759] binder: 20516:20518 transaction failed 29189/-3, size 0-0 line 3284
[  352.916340] binder: BINDER_SET_CONTEXT_MGR already set
[  352.916350] binder: 20517:20519 ioctl 40046207 0 returned -16
[  352.916678] binder_alloc: 20509: binder_alloc_buf, no vma
[  352.916705] binder: 20517:20519 transaction failed 29189/-3, size 0-0 line 3284
[  352.949722] binder: BINDER_SET_CONTEXT_MGR already set
[  352.949731] binder: 20525:20526 ioctl 40046207 0 returned -16
[  352.949893] binder_alloc: 20507: binder_alloc_buf, no vma
[  352.949910] binder: 20525:20526 transaction failed 29189/-3, size 0-0 line 3284
[  352.952373] binder: BINDER_SET_CONTEXT_MGR already set
[  352.952383] binder: 20523:20527 ioctl 40046207 0 returned -16
[  352.952478] binder_alloc: 20508: binder_alloc_buf, no vma
[  352.952495] binder: 20523:20527 transaction failed 29189/-3, size 0-0 line 3284
[  352.968103] binder: 20517:20530 got reply transaction with no transaction stack
[  352.968112] binder: 20517:20530 transaction failed 29201/-71, size 88-24 line 3046
[  352.988306] binder: BINDER_SET_CONTEXT_MGR already set
[  352.988314] binder: 20532:20533 ioctl 40046207 0 returned -16
[  352.988469] binder_alloc: 20508: binder_alloc_buf, no vma
[  352.988489] binder: 20532:20533 transaction failed 29189/-3, size 0-0 line 3284
[  352.999087] binder: BINDER_SET_CONTEXT_MGR already set
[  352.999096] binder: 20534:20536 ioctl 40046207 0 returned -16
[  352.999198] binder_alloc: 20524: binder_alloc_buf, no vma
[  352.999215] binder: 20534:20536 transaction failed 29189/-3, size 0-0 line 3284
[  353.007701] binder: 20525:20537 got reply transaction with no transaction stack
[  353.007713] binder: 20525:20537 transaction failed 29201/-71, size 88-24 line 3046
[  353.160368] binder: undelivered TRANSACTION_ERROR: 29189
[  353.165879] binder: release 20524:20529 transaction 2540 out, still active
[  353.172918] binder: undelivered TRANSACTION_COMPLETE
[  353.178070] binder: release 20524:20529 transaction 2540 in, still active
[  353.185002] binder: send failed reply for transaction 2540, target dead
[  353.192037] binder: undelivered TRANSACTION_ERROR: 29189
[  353.197565] binder: release 20507:20513 transaction 2530 out, still active
[  353.204563] binder: undelivered TRANSACTION_COMPLETE
[  353.209797] binder: undelivered TRANSACTION_ERROR: 29189
[  353.215839] binder: undelivered TRANSACTION_ERROR: 29201
[  353.221348] binder: send failed reply for transaction 2530, target dead
[  353.228231] binder: send failed reply for transaction 2528 to 20508:20511
[  353.235356] binder: undelivered TRANSACTION_COMPLETE
[  353.240597] binder: undelivered TRANSACTION_ERROR: 29189
[  353.246093] binder: undelivered TRANSACTION_ERROR: 29190
[  353.251688] binder: undelivered TRANSACTION_COMPLETE
[  353.256981] binder: undelivered TRANSACTION_ERROR: 29189
[  353.262573] binder: release 20501:20503 transaction 2523 in, still active
[  353.269542] binder: send failed reply for transaction 2523 to 20501:20503
[  353.276546] binder: undelivered TRANSACTION_COMPLETE
[  353.281704] binder: undelivered TRANSACTION_ERROR: 29189
22:42:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:10 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

22:42:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  353.669430] binder: release 20510:20514 transaction 2534 out, still active
[  353.676819] binder: undelivered TRANSACTION_COMPLETE
[  353.686116] binder: send failed reply for transaction 2534, target dead
[  353.705787] binder: undelivered TRANSACTION_ERROR: 29201
[  353.711463] binder: undelivered TRANSACTION_ERROR: 29189
22:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:10 executing program 4:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  353.721333] binder: undelivered TRANSACTION_ERROR: 29189
[  353.738969] binder: 20545:20546 ioctl c0306201 0 returned -14
[  353.739509] binder: 20544:20547 got reply with fd, 5, but target does not allow fds
[  353.739611] binder: 20544:20547 transaction failed 29201/-1, size 88-24 line 3427
22:42:10 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  353.739659] binder: send failed reply for transaction 2547 to 20544:20547
[  353.743862] binder: undelivered TRANSACTION_ERROR: 29190
[  353.743975] binder: undelivered TRANSACTION_COMPLETE
[  353.743981] binder: undelivered TRANSACTION_ERROR: 29201
22:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:10 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  353.747338] binder: undelivered TRANSACTION_ERROR: 29201
[  353.747704] binder: undelivered TRANSACTION_ERROR: 29189
[  353.772718] binder_alloc: 20550: binder_alloc_buf, no vma
[  353.772736] binder: 20550:20552 transaction failed 29189/-3, size 0-0 line 3284
[  353.774536] binder: undelivered TRANSACTION_ERROR: 29189
22:42:10 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0})

[  353.784394] binder: release 20551:20553 transaction 2554 out, still active
[  353.784398] binder: undelivered TRANSACTION_COMPLETE
[  353.787773] binder: release 20551:20553 transaction 2554 in, still active
[  353.787779] binder: send failed reply for transaction 2554, target dead
[  353.795096] binder: undelivered TRANSACTION_ERROR: 29189
[  353.822764] binder_alloc: 20558: binder_alloc_buf, no vma
[  353.822784] binder: 20558:20560 transaction failed 29189/-3, size 0-0 line 3284
[  353.829594] binder: 20550:20562 got reply transaction with no transaction stack
[  353.829603] binder: 20550:20562 transaction failed 29201/-71, size 88-24 line 3046
[  353.831642] binder: release 20559:20563 transaction 2561 out, still active
[  353.831647] binder: undelivered TRANSACTION_COMPLETE
[  353.834631] binder: release 20556:20561 transaction 2558 in, still active
[  353.834637] binder: send failed reply for transaction 2558 to 20556:20561
[  353.834745] binder: undelivered TRANSACTION_COMPLETE
[  353.834751] binder: undelivered TRANSACTION_ERROR: 29189
[  353.835462] binder: release 20559:20563 transaction 2561 in, still active
[  353.835467] binder: send failed reply for transaction 2561, target dead
[  353.869712] binder: 20558:20570 got reply transaction with no transaction stack
[  353.869722] binder: 20558:20570 transaction failed 29201/-71, size 88-0 line 3046
[  353.869735] binder_alloc: 20566: binder_alloc_buf, no vma
[  353.869750] binder: 20566:20568 transaction failed 29189/-3, size 88-0 line 3284
[  353.869756] binder: send failed reply for transaction 2563 to 20566:20568
[  353.869988] binder: undelivered TRANSACTION_COMPLETE
[  353.869993] binder: undelivered TRANSACTION_ERROR: 29189
[  353.872823] binder: undelivered TRANSACTION_ERROR: 29190
[  353.889780] binder: release 20567:20569 transaction 2567 in, still active
[  353.889787] binder: send failed reply for transaction 2567 to 20567:20569
[  353.889902] binder: undelivered TRANSACTION_COMPLETE
[  353.889908] binder: undelivered TRANSACTION_ERROR: 29189
[  353.903666] binder: 20572:20573 got transaction with invalid fd, -1
[  353.903692] binder: 20572:20573 transaction failed 29201/-9, size 88-24 line 3427
[  353.903700] binder: send failed reply for transaction 2569 to 20572:20573
[  353.911443] binder: undelivered TRANSACTION_ERROR: 29190
[  353.911604] binder: undelivered TRANSACTION_COMPLETE
[  353.911610] binder: undelivered TRANSACTION_ERROR: 29201
[  353.920200] binder: 20575:20576 got transaction with invalid offset (0, min 0 max 0) or object.
[  353.920223] binder: 20575:20576 transaction failed 29201/-22, size 0-24 line 3379
[  353.920229] binder: send failed reply for transaction 2572 to 20575:20576
[  353.928055] binder: undelivered TRANSACTION_ERROR: 29190
[  353.928177] binder: undelivered TRANSACTION_COMPLETE
[  353.928183] binder: undelivered TRANSACTION_ERROR: 29201
[  354.166092] binder: release 20545:20546 transaction 2549 in, still active
[  354.174337] binder: send failed reply for transaction 2549 to 20545:20546
[  354.181366] binder: undelivered TRANSACTION_COMPLETE
[  354.186733] binder: undelivered TRANSACTION_ERROR: 29189
22:42:10 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:10 executing program 5:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0xff46, 0x0, 0x0})

22:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0})

[  354.498310] binder: release 20540:20541 transaction 2545 out, still active
[  354.505729] binder: undelivered TRANSACTION_COMPLETE
[  354.513212] binder: send failed reply for transaction 2545, target dead
[  354.527896] binder: 20580:20583 got transaction with invalid offset (0, min 0 max 0) or object.
[  354.527919] binder: 20580:20583 transaction failed 29201/-22, size 0-24 line 3379
22:42:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0})
close(r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done], 0xff46, 0x0, 0x0})

22:42:11 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}}], 0x0, 0x0, 0x0})

[  354.527927] binder: send failed reply for transaction 2575 to 20580:20583
[  354.554554] binder: undelivered TRANSACTION_COMPLETE
[  354.559703] binder: undelivered TRANSACTION_ERROR: 29201
[  354.565201] binder: undelivered TRANSACTION_ERROR: 29190
[  354.571005] binder: undelivered TRANSACTION_ERROR: 29201
[  354.576677] binder: undelivered TRANSACTION_ERROR: 29189
[  354.588111] binder: 20581:20590 BC_DEAD_BINDER_DONE 0000000000000000 not found
22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400100, 0x0)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x8)

22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  354.588130] binder: 20581:20590 ioctl c0306201 200003c0 returned -14
[  354.604075] binder: 20588:20594 ioctl c0306201 0 returned -14
[  354.605063] binder: 20589:20595 got transaction with invalid offset (0, min 0 max 0) or object.
22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  354.605085] binder: 20589:20595 transaction failed 29201/-22, size 0-24 line 3379
[  354.605091] binder: send failed reply for transaction 2585 to 20589:20595
[  354.608779] binder: undelivered TRANSACTION_ERROR: 29190
[  354.608892] binder: undelivered TRANSACTION_COMPLETE
[  354.608898] binder: undelivered TRANSACTION_ERROR: 29201
[  354.615250] binder: undelivered TRANSACTION_ERROR: 29201
[  354.618806] binder: undelivered TRANSACTION_ERROR: 29189
[  354.623044] binder: 20596:20598 got transaction with invalid fd, -1
22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

[  354.623067] binder: 20596:20598 transaction failed 29201/-9, size 88-24 line 3427
[  354.623073] binder: send failed reply for transaction 2588 to 20596:20598
[  354.626323] binder: undelivered TRANSACTION_ERROR: 29190
[  354.626435] binder: undelivered TRANSACTION_COMPLETE
[  354.626441] binder: undelivered TRANSACTION_ERROR: 29201
[  354.634596] binder: 20591:20599 BC_DEAD_BINDER_DONE 0000000000000000 not found
[  354.634614] binder: 20591:20599 ioctl c0306201 200003c0 returned -14
[  354.655890] binder: 20602:20605 got transaction with invalid fd, -1
[  354.655913] binder: 20602:20605 transaction failed 29201/-9, size 88-24 line 3427
[  354.655919] binder: send failed reply for transaction 2593 to 20602:20605
[  354.660877] binder: undelivered TRANSACTION_ERROR: 29190
[  354.660991] binder: undelivered TRANSACTION_COMPLETE
[  354.660997] binder: undelivered TRANSACTION_ERROR: 29201
[  354.682413] binder: 20607:20608 got transaction with invalid fd, -1
[  354.682436] binder: 20607:20608 transaction failed 29201/-9, size 88-24 line 3427
[  354.682443] binder: send failed reply for transaction 2596 to 20607:20608
[  354.686330] binder: undelivered TRANSACTION_ERROR: 29190
[  354.686444] binder: undelivered TRANSACTION_COMPLETE
[  354.686450] binder: undelivered TRANSACTION_ERROR: 29201
[  354.733398] binder: undelivered TRANSACTION_COMPLETE
[  354.733838] binder: undelivered TRANSACTION_COMPLETE
[  354.733847] binder: undelivered transaction 2600, process died.
[  354.764834] binder: undelivered TRANSACTION_COMPLETE
[  354.764953] binder: undelivered TRANSACTION_COMPLETE
[  354.764961] binder: undelivered transaction 2603, process died.
[  354.867323] binder: release 20588:20594 transaction 2583 in, still active
[  354.875072] binder: send failed reply for transaction 2583 to 20588:20594
[  354.882436] binder: undelivered TRANSACTION_COMPLETE
[  354.887637] binder: undelivered TRANSACTION_ERROR: 29189
22:42:11 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:11 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  355.333729] binder: release 20584:20586 transaction 2579 out, still active
[  355.341400] binder: undelivered TRANSACTION_COMPLETE
[  355.346939] binder: send failed reply for transaction 2579, target dead
[  355.362221] binder: undelivered TRANSACTION_COMPLETE
[  355.366447] binder: 20620:20624 ioctl c0306201 0 returned -14
22:42:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, 0x0}}], 0x0, 0x0, 0x0})

22:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:11 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

22:42:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffc25, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @dead_binder_done], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = open(&(0x7f0000000340)='./bus\x00', 0x2440, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/114, 0x72, 0x0, 0xf}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x0, 0xa}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}}], 0x4, 0x0, &(0x7f0000000680)="2dd4664f"})
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="812a6404000031005c12fb49786ba49e0a3a91045382c8d118a5", @ANYRES32=r5, @ANYBLOB="00000000000000000000000085616466000000000000000000000000000000000000000000000000000000008561646600"/76], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
fsetxattr$security_selinux(r6, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:console_device_t:s0\x00', 0x26, 0x2)
syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x405)
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r8 = gettid()
ptrace$setopts(0x4206, r8, 0x0, 0x0)
tkill(r8, 0x38)
ptrace$cont(0x18, r8, 0x0, 0x0)
ptrace$setregs(0xd, r8, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r8, 0x0, 0x0)
fcntl$setown(r7, 0x8, r8)

[  355.384060] binder: undelivered TRANSACTION_COMPLETE
[  355.399392] binder: undelivered transaction 2606, process died.
[  355.419046] binder: BINDER_SET_CONTEXT_MGR already set
[  355.419054] binder: 20631:20633 ioctl 40046207 0 returned -16
[  355.419174] binder_alloc: 20620: binder_alloc_buf, no vma
22:42:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0)
ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000100)="60d95811fc1fcd6197b8c8015e4f6ad8947c38dfcbb2d3a872e33336c0a37554ac31e38b8e49bcfdf863a071721188990c10ee0ce0d9c0b4907b2f5c45a45ad90d83c1d0866f0ad8ddf8d844dc83c67d03ed47e04ce7fa8c5261054a93cca74b4c657098ab3424c29a805af2d71fc7e520fad1bffe40876e17fe04418b2625df6df75842207f005920e3")
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/60], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c638c73"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:11 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x5}, 0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x4400, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000100))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
close(r4)
write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x1, {0xca314f744052299b, 0x1, 0x3}}, 0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
times(&(0x7f0000000200))
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  355.419194] binder: 20631:20633 transaction failed 29189/-3, size 0-0 line 3284
[  355.442976] binder: 20630:20635 got transaction with invalid fd, -1
[  355.443000] binder: 20630:20635 transaction failed 29201/-9, size 88-24 line 3427
[  355.443006] binder: send failed reply for transaction 2616 to 20630:20635
22:42:11 executing program 5:
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  355.452076] binder: 20632:20636 got reply transaction with no transaction stack
[  355.452085] binder: 20632:20636 transaction failed 29201/-71, size 88-24 line 3046
[  355.502767] binder: BINDER_SET_CONTEXT_MGR already set
[  355.502775] binder: 20644:20650 ioctl 40046207 0 returned -16
[  355.502869] binder_alloc: 20630: binder_alloc_buf, no vma
[  355.502887] binder: 20644:20650 transaction failed 29189/-3, size 0-0 line 3284
[  355.504621] binder: BINDER_SET_CONTEXT_MGR already set
[  355.504629] binder: 20646:20648 ioctl 40046207 0 returned -16
[  355.505062] binder_alloc: 20603: binder_alloc_buf, no vma
[  355.505078] binder: 20646:20648 transaction failed 29189/-3, size 0-0 line 3284
[  355.505148] binder: 20646:20648 unknown command 1938580236
[  355.505154] binder: 20646:20648 ioctl c0306201 200001c0 returned -22
[  355.511487] binder: BINDER_SET_CONTEXT_MGR already set
[  355.511494] binder: 20645:20649 ioctl 40046207 0 returned -16
[  355.511643] binder_alloc: 20632: binder_alloc_buf, no vma
[  355.511659] binder: 20645:20649 transaction failed 29189/-3, size 0-0 line 3284
[  355.519971] binder: BINDER_SET_CONTEXT_MGR already set
[  355.519980] binder: 20646:20652 ioctl 40046207 0 returned -16
[  355.520219] binder_alloc: 20603: binder_alloc_buf, no vma
[  355.520234] binder: 20646:20652 transaction failed 29189/-3, size 0-0 line 3284
[  355.520264] binder: 20646:20654 unknown command 1938580236
[  355.520270] binder: 20646:20654 ioctl c0306201 200001c0 returned -22
[  355.561890] binder: 20645:20661 got reply transaction with no transaction stack
[  355.561899] binder: 20645:20661 transaction failed 29201/-71, size 88-24 line 3046
[  355.670344] binder: undelivered TRANSACTION_ERROR: 29189
[  355.676882] binder: undelivered TRANSACTION_ERROR: 29189
[  355.683100] binder: release 20603:20639 transaction 2620 out, still active
[  355.690233] binder: undelivered TRANSACTION_COMPLETE
[  355.695367] binder: send failed reply for transaction 2591 to 20603:20604
[  355.702424] binder: send failed reply for transaction 2620, target dead
[  355.709278] binder: undelivered TRANSACTION_COMPLETE
[  355.714392] binder: undelivered TRANSACTION_ERROR: 29189
[  355.722339] binder: undelivered TRANSACTION_COMPLETE
[  355.727507] binder: undelivered TRANSACTION_ERROR: 29201
[  355.732996] binder: undelivered TRANSACTION_ERROR: 29190
[  355.738649] binder: undelivered TRANSACTION_COMPLETE
[  355.743755] binder: undelivered transaction 2614, process died.
[  355.749893] binder: undelivered TRANSACTION_COMPLETE
[  355.755126] binder: release 20620:20624 transaction 2608 out, still active
[  355.762282] binder: undelivered TRANSACTION_COMPLETE
[  355.767448] binder: release 20620:20624 transaction 2608 in, still active
[  355.774384] binder: send failed reply for transaction 2608, target dead
[  355.783687] binder: undelivered TRANSACTION_ERROR: 29201
22:42:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = open(&(0x7f0000000380)='./file0\x00', 0x408000, 0x101)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x4, @loopback, 0x81}, 0x1c)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000e1727fda12de4c4b36c95788c0694c19a5116ae5ad18aa00c36facefacf6a7ccedca0"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x80800)
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x1778, 0x7})
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000140)={0x9, 0xfffffffeffffffff, [0x20, 0x1f, 0x3ff, 0x5, 0xffffffff], 0x377f407c})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x8)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:12 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  356.165854] binder: release 20623:20625 transaction 2610 out, still active
[  356.173164] binder: undelivered TRANSACTION_COMPLETE
[  356.178998] binder: send failed reply for transaction 2610, target dead
[  356.198660] binder: 20662:20665 unknown command 1
22:42:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, 0x0})

22:42:12 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  356.205151] binder: release 20668:20669 transaction 2629 out, still active
[  356.205155] binder: undelivered TRANSACTION_COMPLETE
[  356.210485] binder: send failed reply for transaction 2629, target dead
[  356.216281] binder: undelivered TRANSACTION_ERROR: 29189
22:42:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="df6200006e382748bae995d3eb2c0c746639c7bce7ccbf087180c57c959a2735f0d4b1"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:12 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000040)={0x7, 0x4, [0x20, 0x3, 0x7, 0x5, 0x3], 0xa7})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:12 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

[  356.262744] binder: release 20676:20678 transaction 2633 out, still active
[  356.262749] binder: undelivered TRANSACTION_COMPLETE
[  356.271197] binder: release 20674:20679 transaction 2632 in, still active
[  356.271204] binder: send failed reply for transaction 2632 to 20674:20679
[  356.271328] binder: undelivered TRANSACTION_COMPLETE
[  356.271335] binder: undelivered TRANSACTION_ERROR: 29189
[  356.273362] binder: send failed reply for transaction 2633, target dead
[  356.300849] binder: undelivered TRANSACTION_ERROR: 29189
[  356.308040] binder: 20645:20661 transaction failed 29189/-22, size 0-0 line 3138
[  356.308293] binder: undelivered TRANSACTION_ERROR: 29189
[  356.308347] binder_alloc: 20644: binder_alloc_buf, no vma
[  356.308364] binder: 20644:20690 transaction failed 29189/-3, size 0-0 line 3284
[  356.309559] binder: undelivered TRANSACTION_ERROR: 29189
[  356.312165] binder: release 20686:20691 transaction 2640 out, still active
[  356.312169] binder: undelivered TRANSACTION_COMPLETE
[  356.314683] binder: release 20687:20688 transaction 2635 in, still active
[  356.314690] binder: send failed reply for transaction 2635 to 20687:20688
[  356.314802] binder: undelivered TRANSACTION_COMPLETE
[  356.314808] binder: undelivered TRANSACTION_ERROR: 29189
[  356.315086] binder: undelivered TRANSACTION_ERROR: 29201
[  356.325436] binder: undelivered TRANSACTION_ERROR: 29189
[  356.328860] binder: send failed reply for transaction 2640, target dead
[  356.363574] binder: release 20694:20702 transaction 2644 out, still active
[  356.363579] binder: undelivered TRANSACTION_COMPLETE
[  356.367448] binder: release 20697:20701 transaction 2642 in, still active
[  356.367455] binder: send failed reply for transaction 2642 to 20697:20701
[  356.367642] binder: undelivered TRANSACTION_COMPLETE
[  356.367648] binder: undelivered TRANSACTION_ERROR: 29189
[  356.368296] binder: release 20694:20702 transaction 2644 in, still active
[  356.368300] binder: send failed reply for transaction 2644, target dead
[  356.368978] binder: release 20694:20702 transaction 2646 out, still active
[  356.368982] binder: undelivered TRANSACTION_COMPLETE
[  356.373286] binder: release 20694:20705 transaction 2646 in, still active
[  356.373290] binder: send failed reply for transaction 2646, target dead
[  356.383079] binder: 20699:20703 unknown command 25311
[  356.383088] binder: 20699:20703 ioctl c0306201 200001c0 returned -22
[  356.383627] binder: 20699:20703 got reply transaction with no transaction stack
[  356.383634] binder: 20699:20703 transaction failed 29201/-71, size 88-24 line 3046
[  356.388269] binder: undelivered TRANSACTION_ERROR: 29201
[  356.388289] binder: send failed reply for transaction 2648 to 20699:20703
[  356.388725] binder: undelivered TRANSACTION_COMPLETE
[  356.388732] binder: undelivered TRANSACTION_ERROR: 29189
[  356.396727] binder: 20699:20708 unknown command 25311
[  356.396735] binder: 20699:20708 ioctl c0306201 200001c0 returned -22
[  356.402700] binder: 20699:20710 got reply transaction with no transaction stack
[  356.402710] binder: 20699:20710 transaction failed 29201/-71, size 88-24 line 3046
[  356.408271] binder: undelivered TRANSACTION_ERROR: 29201
[  356.408291] binder: send failed reply for transaction 2651 to 20699:20708
[  356.408361] binder: undelivered TRANSACTION_COMPLETE
[  356.408365] binder: undelivered TRANSACTION_ERROR: 29189
[  356.683850] binder: 20662:20665 ioctl c0306201 200001c0 returned -22
[  356.692445] binder: release 20662:20665 transaction 2627 out, still active
[  356.699751] binder: undelivered TRANSACTION_COMPLETE
[  356.705472] binder: BINDER_SET_CONTEXT_MGR already set
22:42:13 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x13, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000080)={{{@in=@multicast1}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r5, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000200)=""/192)
r8 = dup2(r6, r7)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r11, 0x0)
r12 = getegid()
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
r15 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r15, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
r17 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r18, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r18, 0x80284504, &(0x7f0000000200)=""/192)
r19 = dup2(r17, r18)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r19, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r20, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r23=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r23, 0x0)
getresgid(&(0x7f0000000680)=<r24=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r25=>0xffffffffffffffff})
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r26=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r26, 0x0)
r27 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r28 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r28, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r28, 0x80284504, &(0x7f0000000200)=""/192)
r29 = dup2(r27, r28)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r29, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r30, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r31=>0xffffffffffffffff})
getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r32=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r32, 0x0)
r33 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r34 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r34, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r34, 0x80284504, &(0x7f0000000200)=""/192)
r35 = dup2(r33, r34)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r36=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r35, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r36, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000740)={0x530, 0x0, 0x2, [{{0x6, 0x1, 0x7, 0x7ff, 0x9, 0x0, {0x2, 0x80000000000000, 0x7fff, 0x4000000, 0x1, 0x2796, 0x1000, 0xea64, 0x6, 0xffffffff00000001, 0x40, r5, r9, 0xe2f, 0xcc76}}, {0x1, 0x7, 0xd, 0x400, '/dev/binder#\x00'}}, {{0x6, 0x2, 0x2, 0x4, 0x7, 0x5, {0x4, 0xffffffff, 0x3, 0x9, 0x1f, 0x1, 0x5, 0x1, 0x4, 0x5, 0xff, r11, r12, 0x80, 0x923}}, {0x6, 0x2, 0x2, 0xffffffffffff7fff, '{\''}}, {{0x0, 0x1, 0x2, 0x20, 0x1d6, 0x8, {0x3, 0xfffffffffffffff8, 0x7, 0x3, 0xfffffffffffffff9, 0xffffffffffffff8d, 0x60d96453, 0xffff, 0x400, 0x14, 0x9, r13, r14, 0x2, 0x101}}, {0x4, 0x3ff, 0xd, 0x8, '/dev/binder#\x00'}}, {{0x0, 0x2, 0x7df, 0x81, 0x7, 0x1ff, {0x4, 0x3, 0xfff, 0x6, 0x81, 0x6, 0x7ce, 0x0, 0xffffffff, 0x3ff, 0x7, r16, r20, 0x0, 0x4}}, {0x3, 0x20, 0x0, 0x9}}, {{0x4, 0x1, 0x1, 0x8, 0x8000, 0x8, {0x5, 0x80, 0x3, 0x800, 0x7fffffff, 0x100000001, 0x6ad, 0x80000001, 0x10001, 0x40, 0x7b, 0xee00, r21, 0x8001, 0x9}}, {0x6, 0x585, 0xb, 0x0, '\\/:/^user@,'}}, {{0x4, 0x3, 0x5, 0x8, 0x8001, 0x8, {0x4, 0x5, 0x9, 0x800, 0x8, 0x9, 0x6, 0x32d0, 0xffffffffffffff01, 0x5, 0x100, r23, r24, 0x17900000000000, 0x5}}, {0x2, 0x5620, 0x7, 0x7f80000000000, 'trusted'}}, {{0x3, 0x0, 0xcf4, 0xdfca, 0x6, 0x1eaa, {0x2, 0x2, 0x7fffffff, 0xfff, 0x7, 0x5, 0x10000, 0x2, 0x0, 0xffffffff7fffffff, 0x5, r26, r30, 0x2, 0x2}}, {0x4, 0x0, 0xd, 0xfffffffffffffffa, '/dev/binder#\x00'}}, {{0x2, 0x1, 0x1000, 0x8, 0x1, 0x5, {0x2, 0x3, 0x9, 0x100000000, 0x3ff, 0x2, 0xfffffffffffffff7, 0xffffffffffff8001, 0x2, 0xcb, 0x100000001, r32, r36, 0xfffffffffffffff8, 0x200}}, {0x6, 0x1, 0xd, 0x200, '/dev/binder#\x00'}}]}, 0x530)

22:42:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0)
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x400)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$void(r2, 0x5450)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48b57c98"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  356.711013] binder: 20662:20712 ioctl 40046207 0 returned -16
[  356.711411] binder: release 20662:20713 transaction 2653 out, still active
[  356.711504] binder: undelivered TRANSACTION_COMPLETE
[  356.731409] binder: send failed reply for transaction 2627, target dead
[  356.738408] binder: send failed reply for transaction 2653, target dead
22:42:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

22:42:13 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000080)="eaec9cd0885b396c679c27064fda30e57fad1c13ef698c4cbeb717ac889e01a5fa806fb82dfbf8a4d005cbef55abd184540a49a3c5c8342ee408")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/283], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x5, 0xff])
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10, 0xc00)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000001c0)={0x0, {{0x2, 0x4e23, @rand_addr=0x8}}, {{0x2, 0x4e22, @multicast2}}}, 0x108)
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f00000000c0)={0xc029, 0x2})

22:42:13 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

[  356.762665] binder_alloc: 20716: binder_alloc_buf, no vma
[  356.768511] binder: release 20717:20725 transaction 2657 out, still active
22:42:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x0, 0x0, &(0x7f00000000c0)})

[  356.768515] binder: undelivered TRANSACTION_COMPLETE
22:42:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x20000, 0x0)
write$P9_RLOCK(r3, &(0x7f0000000100)={0x8, 0x35, 0x1, 0x2}, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x3a6940813e71d3ac, 0x0)
ioctl$TCSETXF(r4, 0x5434, &(0x7f0000000180)={0x9, 0x30, [0x9, 0xfffffffc, 0xe72, 0x7, 0x100000000], 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:13 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  356.771240] binder: 20719:20723 got transaction with invalid parent offset or type
22:42:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockname(0xffffffffffffffff, &(0x7f0000000140)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f00000001c0)=0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r6, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r7, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r8, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r10, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r11, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)={@initdev, @multicast2, <r12=>0x0}, &(0x7f00000002c0)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r13, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r14, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r15, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r16, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
r17 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r17, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r18, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', <r19=>r18})
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r20, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
r21 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r21, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockname$packet(r21, &(0x7f0000000340)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r23, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r24, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002540)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000002640)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000002fc0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f80)={&(0x7f0000002680)={0x8c4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3db}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x16c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x4, 0x3, 0x434, 0x3}, {0x8, 0x1, 0x8, 0x8}, {0x1, 0x100000001, 0x30, 0x9}, {0x3, 0x7, 0x80000000, 0x7}, {0x70e04c8c, 0xfffffffffffff02a, 0x2d3157de, 0x1e42}, {0x80, 0x1f, 0x7ca8, 0x1}, {0xdbaf, 0x5, 0xa315}, {0x1000, 0x20, 0x10000, 0x3ff}, {0x3f, 0x10e, 0x100000001}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x100, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff2bc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x8c, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0x7fffffff, 0x20, 0x5}, {0x20, 0x1, 0x8, 0x2}, {0x400, 0x6, 0x0, 0x5}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r12}, {0x184, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0xf4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff350}}, {0x8, 0x6, r23}}}]}}, {{0x8}, {0xfc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r25}, {0x80, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4044040}, 0x0)
fstat(r2, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  356.771268] binder: 20719:20723 transaction failed 29201/-22, size 88-24 line 3454
[  356.771276] binder: send failed reply for transaction 2659 to 20719:20723
[  356.773055] binder: 20720:20727 unknown command -1736657592
[  356.773063] binder: 20720:20727 ioctl c0306201 200001c0 returned -22
[  356.776129] binder: send failed reply for transaction 2657, target dead
[  356.786229] binder: 20720:20728 unknown command -1736657592
[  356.786238] binder: 20720:20728 ioctl c0306201 200001c0 returned -22
[  356.797215] binder: release 20715:20724 transaction 2662 in, still active
[  356.797239] binder: send failed reply for transaction 2662 to 20715:20724
[  356.797444] binder: undelivered TRANSACTION_COMPLETE
[  356.797450] binder: undelivered TRANSACTION_ERROR: 29189
[  356.829162] binder: release 20730:20738 transaction 2666 out, still active
[  356.829167] binder: undelivered TRANSACTION_COMPLETE
[  356.843092] binder: send failed reply for transaction 2666, target dead
[  356.866333] binder_alloc: 20736: binder_alloc_buf size -3741365390438039552 failed, no address space
[  356.866340] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  356.866361] binder: 20736:20740 transaction failed 29201/-28, size 0--3741365390438039552 line 3284
[  356.867222] binder: release 20746:20748 transaction 2672 out, still active
[  356.867226] binder: undelivered TRANSACTION_COMPLETE
[  356.877937] binder: send failed reply for transaction 2672, target dead
[  356.885544] binder: release 20737:20741 transaction 2669 in, still active
[  356.885552] binder: send failed reply for transaction 2669 to 20737:20741
[  356.886176] binder: undelivered TRANSACTION_COMPLETE
[  356.886183] binder: undelivered TRANSACTION_ERROR: 29189
[  356.904493] binder: undelivered TRANSACTION_ERROR: 29190
[  356.905301] binder: undelivered TRANSACTION_COMPLETE
[  356.905308] binder: undelivered TRANSACTION_ERROR: 29201
[  356.906336] binder: 20719:20751 got transaction with invalid parent offset or type
[  356.906360] binder: 20719:20751 transaction failed 29201/-22, size 88-24 line 3454
[  356.906367] binder: send failed reply for transaction 2674 to 20719:20751
[  356.941548] binder: undelivered TRANSACTION_ERROR: 29190
[  356.941627] binder: undelivered TRANSACTION_COMPLETE
[  356.941633] binder: undelivered TRANSACTION_ERROR: 29201
[  356.952983] binder: release 20752:20755 transaction 2680 out, still active
[  356.952987] binder: undelivered TRANSACTION_COMPLETE
[  356.953970] binder: undelivered TRANSACTION_COMPLETE
[  356.954079] binder: undelivered TRANSACTION_COMPLETE
[  356.954087] binder: undelivered transaction 2678, process died.
[  356.954704] binder: release 20752:20755 transaction 2680 in, still active
[  356.954708] binder: send failed reply for transaction 2680, target dead
[  356.962577] binder: release 20752:20758 transaction 2682 out, still active
22:42:13 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80, 0x0)
sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0211f4061600000025bd7000fcdbdf25020013000000000028bd7000000000000300180080ff0b00249f871e48104e9ee94cb4000000000002001000000004d3000004d20000000008001200030000001f000000ff07000006003200fb02000041a9000000000000fe880000000000000000000000000101ff8000000000000000000000000000aa05001a007f00000100000000000000000000000000000000000000000000ffffffffffff08000004"], 0xb0}}, 0x200488c0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4ce4d468e3235545ae0856afbd0e0247f58460fb33ae6697e83c3a46"], 0x1, 0x0, &(0x7f00000000c0)='-'})
accept(r0, &(0x7f0000000100)=@llc, &(0x7f00000003c0)=0x80)

22:42:13 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="adcf5ae6"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:13 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r5, 0x0)
r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000200)=""/192)
r8 = dup2(r6, r7)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r8, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r11, 0x0)
r12 = getegid()
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8)
r14 = getgid()
r15 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r15, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000580)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8)
r17 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r18 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r18, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r18, 0x80284504, &(0x7f0000000200)=""/192)
r19 = dup2(r17, r18)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r19, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r20, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r22=>0xffffffffffffffff})
getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r23=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r23, 0x0)
getresgid(&(0x7f0000000680)=<r24=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r25=>0xffffffffffffffff})
getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r26=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r26, 0x0)
r27 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r28 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r28, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r28, 0x80284504, &(0x7f0000000200)=""/192)
r29 = dup2(r27, r28)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r29, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r30, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r31=>0xffffffffffffffff})
getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r32=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r32, 0x0)
r33 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r34 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r34, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r34, 0x80284504, &(0x7f0000000200)=""/192)
r35 = dup2(r33, r34)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r36=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r35, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r36, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000740)={0x530, 0x0, 0x2, [{{0x6, 0x1, 0x7, 0x7ff, 0x9, 0x0, {0x2, 0x80000000000000, 0x7fff, 0x4000000, 0x1, 0x2796, 0x1000, 0xea64, 0x6, 0xffffffff00000001, 0x40, r5, r9, 0xe2f, 0xcc76}}, {0x1, 0x7, 0xd, 0x400, '/dev/binder#\x00'}}, {{0x6, 0x2, 0x2, 0x4, 0x7, 0x5, {0x4, 0xffffffff, 0x3, 0x9, 0x1f, 0x1, 0x5, 0x1, 0x4, 0x5, 0xff, r11, r12, 0x80, 0x923}}, {0x6, 0x2, 0x2, 0xffffffffffff7fff, '{\''}}, {{0x0, 0x1, 0x2, 0x20, 0x1d6, 0x8, {0x3, 0xfffffffffffffff8, 0x7, 0x3, 0xfffffffffffffff9, 0xffffffffffffff8d, 0x60d96453, 0xffff, 0x400, 0x14, 0x9, r13, r14, 0x2, 0x101}}, {0x4, 0x3ff, 0xd, 0x8, '/dev/binder#\x00'}}, {{0x0, 0x2, 0x7df, 0x81, 0x7, 0x1ff, {0x4, 0x3, 0xfff, 0x6, 0x81, 0x6, 0x7ce, 0x0, 0xffffffff, 0x3ff, 0x7, r16, r20, 0x0, 0x4}}, {0x3, 0x20, 0x0, 0x9}}, {{0x4, 0x1, 0x1, 0x8, 0x8000, 0x8, {0x5, 0x80, 0x3, 0x800, 0x7fffffff, 0x100000001, 0x6ad, 0x80000001, 0x10001, 0x40, 0x7b, 0xee00, r21, 0x8001, 0x9}}, {0x6, 0x585, 0xb, 0x0, '\\/:/^user@,'}}, {{0x4, 0x3, 0x5, 0x8, 0x8001, 0x8, {0x4, 0x5, 0x9, 0x800, 0x8, 0x9, 0x6, 0x32d0, 0xffffffffffffff01, 0x5, 0x100, r23, r24, 0x17900000000000, 0x5}}, {0x2, 0x5620, 0x7, 0x7f80000000000, 'trusted'}}, {{0x3, 0x0, 0xcf4, 0xdfca, 0x6, 0x1eaa, {0x2, 0x2, 0x7fffffff, 0xfff, 0x7, 0x5, 0x10000, 0x2, 0x0, 0xffffffff7fffffff, 0x5, r26, r30, 0x2, 0x2}}, {0x4, 0x0, 0xd, 0xfffffffffffffffa, '/dev/binder#\x00'}}, {{0x2, 0x1, 0x1000, 0x8, 0x1, 0x5, {0x2, 0x3, 0x9, 0x100000000, 0x3ff, 0x2, 0xfffffffffffffff7, 0xffffffffffff8001, 0x2, 0xcb, 0x100000001, r32, r36, 0xfffffffffffffff8, 0x200}}, {0x6, 0x1, 0xd, 0x200, '/dev/binder#\x00'}}]}, 0x530)

22:42:13 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
setfsgid(r2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x5, 0x1457})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  356.962582] binder: undelivered TRANSACTION_COMPLETE
[  356.969188] binder: send failed reply for transaction 2682, target dead
[  357.226915] binder: 20716:20721 transaction failed 29189/-3, size 0-0 line 3284
[  357.236558] binder: undelivered TRANSACTION_ERROR: 29189
[  357.238444] binder: BINDER_SET_CONTEXT_MGR already set
[  357.238452] binder: 20716:20734 ioctl 40046207 0 returned -16
[  357.238521] binder_alloc: 20716: binder_alloc_buf, no vma
[  357.238538] binder: 20716:20734 transaction failed 29189/-3, size 0-0 line 3284
[  357.256174] binder: 20768:20770 got transaction with invalid parent offset or type
[  357.256196] binder: 20768:20770 transaction failed 29201/-22, size 88-24 line 3454
[  357.256202] binder: send failed reply for transaction 2685 to 20768:20770
[  357.258779] binder: BINDER_SET_CONTEXT_MGR already set
[  357.258786] binder: 20768:20770 ioctl 40046207 0 returned -16
[  357.258834] binder_alloc: 20768: binder_alloc_buf, no vma
[  357.258852] binder: 20768:20773 transaction failed 29189/-3, size 0-0 line 3284
[  357.259473] binder: 20768:20773 got reply transaction with no transaction stack
[  357.259482] binder: 20768:20773 transaction failed 29201/-71, size 88-24 line 3046
[  357.266631] binder: 20771:20774 unknown command -430256211
[  357.266638] binder: 20771:20774 ioctl c0306201 200001c0 returned -22
[  357.279447] binder: 20775:20777 got transaction with invalid parent offset or type
[  357.279475] binder: 20775:20777 transaction failed 29201/-22, size 88-24 line 3454
[  357.279482] binder: send failed reply for transaction 2692 to 20775:20777
[  357.289604] binder_alloc: 20716: binder_alloc_buf, no vma
[  357.289621] binder: 20769:20781 transaction failed 29189/-3, size 0-0 line 3284
[  357.293857] binder_alloc: 20716: binder_alloc_buf, no vma
[  357.293875] binder: 20769:20781 transaction failed 29189/-3, size 0-0 line 3284
[  357.454669] binder: undelivered TRANSACTION_COMPLETE
[  357.459791] binder: undelivered TRANSACTION_ERROR: 29201
[  357.465408] binder: undelivered TRANSACTION_ERROR: 29189
[  357.470892] binder: undelivered TRANSACTION_ERROR: 29189
[  357.476516] binder: undelivered TRANSACTION_ERROR: 29190
[  357.482090] binder: release 20771:20774 transaction 2693 out, still active
[  357.489205] binder: undelivered TRANSACTION_COMPLETE
[  357.494321] binder: send failed reply for transaction 2690 to 20771:20774
[  357.501272] binder: send failed reply for transaction 2693, target dead
[  357.508106] binder: undelivered TRANSACTION_COMPLETE
[  357.513192] binder: undelivered TRANSACTION_ERROR: 29189
[  357.518712] binder: undelivered TRANSACTION_ERROR: 29189
[  357.524179] binder: undelivered TRANSACTION_ERROR: 29201
[  357.529720] binder: undelivered TRANSACTION_COMPLETE
[  357.534841] binder: undelivered TRANSACTION_ERROR: 29201
[  357.540452] binder: undelivered TRANSACTION_ERROR: 29190
[  357.546075] binder: undelivered TRANSACTION_ERROR: 29189
22:42:14 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0xfffffffffffffffc, 0xbb, 0x10001, 0x6}, 0x14)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)={0x0, @aes128, 0x2, "618e75fb181cdaf4"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3, 0x30, r0, 0x0)
pkey_free(0xffffffffffffffff)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00')
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
write$P9_RWALK(r2, &(0x7f0000000040)={0x57, 0x6f, 0x1, {0x6, [{0x20, 0x3}, {0xc8, 0x1, 0x5}, {0x0, 0x1, 0x4}, {0x45, 0x3, 0x6}, {0x4, 0x1, 0x6}, {0x84, 0x1, 0x5}]}}, 0x57)

22:42:14 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:14 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r0, 0x28, &(0x7f0000000380)={0x0, <r1=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r1, 0x3}, 0xc)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1, 0x9, 0x10}, 0xc)
ioctl(r2, 0x8, &(0x7f0000000380)="19dc99c61a036030c99d0dbba99a0f2ef23b9059620d3f8847d9ca22103b716becb7372bf664a07e3f563096e097b83bd98ceb44b904f7659daec6a2290b5f5b96e9920bc51c90cdedfed77bcfcf10ebc4582d345cb5e614150f37b9a331fc0472f06fb5f93ae35db095d04022422e37d4eca692141e93558742ce7224369ac1232275284e48dccb1b8c7e09b5d011b3c82e0e51f741787f4ab217ac423856")
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x55)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xd75a3f266c6ec454, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x3e, 'cpu'}, {0x2d, 'memory'}, {0x3dd329e49939a0f0, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'rdma'}]}, 0x1d)

[  357.624968] binder: undelivered TRANSACTION_ERROR: 29201
[  357.636918] binder_alloc: 20736: binder_alloc_buf size -3741365390438039552 failed, no address space
[  357.646524] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  357.655411] binder: 20736:20740 transaction failed 29201/-28, size 0--3741365390438039552 line 3284
[  357.664731] binder: undelivered TRANSACTION_ERROR: 29201
22:42:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x2, 0x26}, @flat=@binder={0x73622a85, 0x18a}, @fda={0x66646185, 0x6, 0x2, 0x30}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0df50c7fcfff3a079a200900060000fcff00"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  357.702380] binder: release 20794:20800 transaction 2700 out, still active
[  357.702957] binder: 20792:20797 ioctl 800c6613 20000200 returned -22
[  357.703024] binder: 20792:20797 unknown command 0
[  357.703031] binder: 20792:20797 ioctl c0306201 200001c0 returned -22
[  357.703845] binder: 20792:20797 got reply transaction with no transaction stack
[  357.703853] binder: 20792:20797 transaction failed 29201/-71, size 88-24 line 3046
[  357.706228] binder: 20791:20801 got transaction to invalid handle
22:42:14 executing program 0:
r0 = inotify_init1(0x1000)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000200))
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000013000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000000008561646600000000090000000000000000000000000000000000000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0200000000000000"], 0x0, 0x0, 0x0})

22:42:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/bnep\x00')
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x108, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x59}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2f7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa24}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfee5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x6, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x108}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x66122c275f5db6d4}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffffffff87a4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x89}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffeffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x2008010)
ioctl(r2, 0x1000008912, &(0x7f00000007c0)="11dca50d5e0bcfe47bf070")
setresgid(0x0, 0xee00, 0x0)
getresgid(&(0x7f0000000100), &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000200))
setgroups(0x1, &(0x7f0000000240)=[r6])
setresuid(0x0, 0xfffe, 0xffffffffffffffff)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  357.706236] binder: 20791:20801 transaction failed 29201/-22, size 0-0 line 3138
[  357.706539] binder: BINDER_SET_CONTEXT_MGR already set
[  357.706546] binder: 20792:20797 ioctl 40046207 0 returned -16
[  357.706588] binder_alloc: 20792: binder_alloc_buf, no vma
[  357.706603] binder: 20792:20805 transaction failed 29189/-3, size 0-0 line 3284
[  357.706863] binder: 20792:20805 ioctl 800c6613 20000200 returned -22
[  357.707080] binder: 20792:20797 unknown command 0
[  357.707086] binder: 20792:20797 ioctl c0306201 200001c0 returned -22
22:42:14 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)={0x0, @speck128})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x110, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)

22:42:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
sendfile(r2, r3, 0x0, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
ioctl$TIOCNOTTY(r4, 0x5422)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  357.732678] binder: BINDER_SET_CONTEXT_MGR already set
[  357.732686] binder: 20807:20808 ioctl 40046207 0 returned -16
[  357.732769] binder: 20807:20808 got reply transaction with no transaction stack
[  357.732777] binder: 20807:20808 transaction failed 29201/-71, size 88-24 line 3046
[  357.733008] binder: 20807:20808 unknown command 2131555597
[  357.733015] binder: 20807:20808 ioctl c0306201 200001c0 returned -22
[  357.733871] binder: 20807:20808 got reply transaction with no transaction stack
22:42:14 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  357.733878] binder: 20807:20808 transaction failed 29201/-71, size 88-24 line 3046
[  357.734808] binder: BINDER_SET_CONTEXT_MGR already set
[  357.734815] binder: 20807:20808 ioctl 40046207 0 returned -16
[  357.734845] binder: 20807:20809 got reply transaction with no transaction stack
[  357.734852] binder: 20807:20809 transaction failed 29201/-71, size 88-24 line 3046
[  357.735040] binder: 20807:20809 unknown command 2131555597
[  357.735046] binder: 20807:20809 ioctl c0306201 200001c0 returned -22
[  357.735439] binder: 20807:20809 got reply transaction with no transaction stack
[  357.735445] binder: 20807:20809 transaction failed 29201/-71, size 88-24 line 3046
[  357.797235] binder: BINDER_SET_CONTEXT_MGR already set
[  357.797243] binder: 20811:20813 ioctl 40046207 0 returned -16
[  357.797348] binder_alloc: 20792: binder_alloc_buf, no vma
[  357.797366] binder: 20811:20813 transaction failed 29189/-3, size 0-0 line 3284
[  357.856443] binder: 20811:20823 got reply transaction with no transaction stack
[  357.856451] binder: 20811:20823 transaction failed 29201/-71, size 80-24 line 3046
[  357.905727] binder: 20796:20833 transaction failed 29189/-22, size 0-0 line 3138
[  357.906491] binder: 20796:20833 unknown command 3
[  357.906498] binder: 20796:20833 ioctl c0306201 200001c0 returned -22
[  357.906940] binder: 20796:20833 got reply transaction with no transaction stack
[  357.906947] binder: 20796:20833 transaction failed 29201/-71, size 0-0 line 3046
[  357.908644] binder: BINDER_SET_CONTEXT_MGR already set
[  357.908651] binder: 20794:20832 ioctl 40046207 0 returned -16
[  357.994346] binder: undelivered TRANSACTION_COMPLETE
[  357.999864] binder: release 20798:20826 transaction 2720 out, still active
[  358.007038] binder: undelivered TRANSACTION_COMPLETE
[  358.012158] binder: release 20796:20833 transaction 2719 out, still active
[  358.019578] binder: undelivered TRANSACTION_COMPLETE
[  358.024854] binder: undelivered TRANSACTION_ERROR: 29201
[  358.030579] binder: send failed reply for transaction 2719, target dead
[  358.037409] binder: release 20798:20826 transaction 2714 in, still active
[  358.044635] binder: send failed reply for transaction 2714 to 20798:20826
[  358.051614] binder: send failed reply for transaction 2720, target dead
[  358.058443] binder: undelivered TRANSACTION_COMPLETE
[  358.063908] binder: undelivered TRANSACTION_ERROR: 29189
[  358.069474] binder: undelivered TRANSACTION_ERROR: 29189
[  358.075086] binder: release 20794:20834 transaction 2717 out, still active
[  358.082235] binder: undelivered TRANSACTION_COMPLETE
[  358.087670] binder: release 20794:20800 transaction 2700 in, still active
[  358.094590] binder: send failed reply for transaction 2700, target dead
[  358.101532] binder: send failed reply for transaction 2717, target dead
[  358.108599] binder: undelivered TRANSACTION_ERROR: 29201
[  358.114076] binder: undelivered TRANSACTION_ERROR: 29201
[  358.119711] binder: undelivered TRANSACTION_ERROR: 29201
[  358.125175] binder: undelivered TRANSACTION_ERROR: 29201
[  358.130733] binder: undelivered TRANSACTION_ERROR: 29189
[  358.136221] binder: undelivered TRANSACTION_ERROR: 29201
[  358.141709] binder: send failed reply for transaction 2702 to 20792:20797
[  358.148793] binder: undelivered TRANSACTION_COMPLETE
[  358.153908] binder: undelivered TRANSACTION_ERROR: 29189
22:42:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000c90b, &(0x7f0000000000)="1100000d92")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:14 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/105)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)

22:42:14 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x3ab, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:14 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xffffffffffffff61, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  358.498094] binder: undelivered TRANSACTION_ERROR: 29201
[  358.504937] binder: 20791:20801 got transaction to invalid handle
[  358.511546] binder: 20791:20801 transaction failed 29201/-22, size 0-0 line 3138
[  358.519215] binder: undelivered TRANSACTION_ERROR: 29201
22:42:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
syz_emit_ethernet(0xd2, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff9e6d7d2825d5910000008100000086dd66859dea0094167f00000000000000000000000000000000fe80000000000000000000000000000a580400000000000004010301050000000000c910ff020000000000000000000000000001010200000004000000000000c204000003ffc20400007fffc20400000007c910fe880000000000000000000000000001000000002f02000800000000fe8800000000000000000000000000010000100000000000000000000000000300"/210], &(0x7f0000000140)={0x1, 0x2, [0x4f4, 0x898, 0x970, 0x188]})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:15 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c630365f0c61ceb96b78e8e9d0000d4a3dbced6b996cc8d8f4a8fad3892d2b9dc7e03e684a5b2b498d3c31bd71f904ee9991bf020dff2089e4128ebdf067668895fd01e8ff194bdcddc687e280b3fa9717daba0bfab3a25d81e5f7136dfe4d1fc8121c8c09f191d91822c317c7229babc304cc26213d5def5858383a3b5c200705257553bb05bdb5cd02631587060882871ff33e0ac43a22bfa8a1d757c51d73d790ad72bc4edf5e19cb891ef0cedee52dbfd86e3a4458ec27285216e1472a43693a42e9721df991d5e300da6df4f94987272a1d895da82f0ace4932bd931f358b42995badb277b98ca08cfc4faeec3e2b10e"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  358.555497] binder: 20846:20850 unknown command 0
[  358.560901] binder: 20846:20850 ioctl c0306201 200001c0 returned -22
[  358.562968] binder: 20847:20851 ioctl c0306201 20000440 returned -14
22:42:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
sendmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000100)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)="ee9adf7f8337d0a7509d135a51a68fae009631196677fc", 0x17}, {&(0x7f0000000280)="dcfb1cb2f0adc145fec9c67f57bc6a685efbcebb0be4a0984f72265accdd8ffa612d406196fae69f1c8a15c63e75df119f721b0bc5cb5b7facbd925de04de8831b152bec1935dc6a469db6270bfc2c7f814e3e5d8cab1f8ea6f2610ac8389c4a73fb2ed451f9e3264a65e514a6ca09cd4434be3a502a41adc4486ff132f1ee74bb2c8b23ffc2a66f9f57ebd64a10aa36805ffd6efa92c4c1c987d4ea8223d1fba1bef1f5ed505033390ac0c68be79b6d8fba08fe40bdba56d7188783802eaa190630e31a0fbe1ebda8fa89105077947a74dc4c94a300b668ab6ba64ac25ed7b6643162433696a8", 0xe7}, {&(0x7f0000000380)="d12bbf27e6f3f65471edee9dcc6f53c20abc6981c0a16ef126f2e2b32b438b2dc46f16d70f108eadf2f979dc2a29968bd3a98d985d8e4c5190e68ad2d6cca2f6", 0x40}, {&(0x7f0000000600)="9a352ba97a049d6b95e8f84f684ac69c18a9f8065998548dd725fcc1aabe2964bd4539b8ea9d143768c3d6d592232137950646cc1359c5be6fa05ce4c2f6ec4cd8ebb714a685b392e40b2352ca19b29a69d1bc40f17de77ae40c01d04c529336c23c9cd125f3f2b4b92f5da7f24dce1ac39a06f8f7fedf7a7571a3d985af96dba2ef6ac235930c0eb3cec0989709240c06642450c7529ef274894b92a6df9d6f7743ffadf3ed01012ff1c23a0bd889a2", 0xb0}, {&(0x7f00000006c0)="ebe29c51ee316f984c0c8fa09b570b931fe869f24a1ff9ae9fbffd2e641fcac4cabcfe8ffdce3441f1c1d0ed2831bef7f1f6b5f304afa28d43a75b27a856858b2a1f4f536ba54aa13767de2a2fdd5a3a791810b2bc25ffdd35749d59b7da90ba3abc77f0b55a30c777d29f1b6decb6bd52570027038e6e56162721bbb132a52135d49c8dc1f8aec19f9b127bdea1fd65419bce64a95e07f0ce0b1cc3c9dbd24ce455071bad788427ae679157277a7a712e5cfc", 0xb3}], 0x5, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r4]}}], 0x20, 0x40000}, 0x4004010)
splice(r2, &(0x7f0000000200), r1, &(0x7f0000000240), 0x80000000, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c630000475ae16bb5635c8a6c294fa26be24e900801c71f9814caa7641cc1aefb0d7f264ead2a50044c7ae99fef79dbb408a3848049de9676bf8c4c013573bcba544600b4711619cff5823712182be97a068619236ef45a7e9effe6fda28aff5595913d76b916f6031cd3542d20d2e56b2f7dfc98a3a64e9b9d0cea13f78fa15c4e18ca44f24ae5cd03d314fa"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:15 executing program 5:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, <r0=>0x0})
ioprio_set$pid(0x2, r0, 0x1)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt(r2, 0x80, 0x5ef, &(0x7f0000000040)="a2dfe9510d97e5e6ca5a9341e20990b717c04f0905b671c593a7b69b332f0ad001368d952e476c5af932ad1b6af7d6043bb6f5649d47f38f868e94ff282ed6ab083f0f164a848c50aa6d9bcc20d3d80857635f016cba8a35275912b7d22073f6b9fc83709b920b773d6e6e7855721b28248a", 0x72)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)

22:42:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='/dev/binder#\x00', &(0x7f0000000140)='/dev/binder#\x00', &(0x7f0000000180)='/dev/binder#\x00', &(0x7f0000000200)='\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='/dev/binder#\x00', &(0x7f00000002c0)='nodev\x00'], 0x1000)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  358.563294] binder: undelivered TRANSACTION_COMPLETE
[  358.574825] binder: release 20844:20848 transaction 2728 out, still active
[  358.574829] binder: undelivered TRANSACTION_COMPLETE
22:42:15 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
getresuid(&(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
r3 = getgid()
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0x78, 0x0, 0x3, {0x12, 0x20, 0x0, {0x1, 0xfffffffffffffffd, 0x800, 0x2, 0x10000, 0x7, 0x1, 0x100, 0x11, 0x2, 0xffffffff, r2, r3, 0x2, 0xe13}}}, 0x78)

22:42:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f0000000480)="580ac2f3e67acbf0e2422936c13556ccaa5d3a818419322a10f469005c172a277adea9a6052ec7e576b3089fb5059c37e9027532ff65dc8382ffeb5278fce93a1df4af8b153d62c973fca16c5a9a4e450b7fecc4b3e737163b08e2309272e0aef12ed8941032605b934aae0b41154d9a654c4d6ee31c104806f6492956f1602099285ed7cc8fafbb821dbb80c833e980dc02a5a41d8cb369a989f48cc8ace2f3dc3a6db5851b813b48753bd9ffded1b7543acd7d2ba71c66de351b0b829ee52e200b1f20b92ea96f2f2d3ff00a46ec1c9f25f387a00a77d84459ea671fea16e39438f2f1374efcaa", &(0x7f0000000380)=""/135}, 0x18)
recvmmsg(r2, &(0x7f0000000180), 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fe3c100"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000000085616466000000000000000000000000000000000000000000000000000000008561646600"/76], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="0000009de91e4aa86a223fbf857c1c11d1db00000000001800000000000000383ef1087a000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  358.578737] binder: release 20844:20848 transaction 2728 in, still active
[  358.578742] binder: send failed reply for transaction 2728, target dead
22:42:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1007)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  358.579207] binder: 20847:20855 ioctl 4c03 20000100 returned -22
[  358.579354] binder: BINDER_SET_CONTEXT_MGR already set
[  358.579361] binder: 20847:20851 ioctl 40046207 0 returned -16
[  358.579384] binder: 20847:20853 ioctl c0306201 20000440 returned -14
[  358.579756] binder: undelivered TRANSACTION_COMPLETE
[  358.584778] binder: undelivered transaction 2730, process died.
[  358.590394] binder: 20811:20823 transaction failed 29189/-22, size 0-0 line 3138
[  358.590695] binder: undelivered TRANSACTION_ERROR: 29189
[  358.601087] binder: undelivered TRANSACTION_ERROR: 29201
[  358.601154] binder: undelivered TRANSACTION_ERROR: 29189
[  358.608264] binder: release 20844:20848 transaction 2733 out, still active
[  358.608268] binder: undelivered TRANSACTION_COMPLETE
[  358.611187] binder: release 20844:20856 transaction 2733 in, still active
[  358.611192] binder: send failed reply for transaction 2733, target dead
[  358.625109] binder: 20846:20864 got reply transaction with no transaction stack
[  358.625118] binder: 20846:20864 transaction failed 29201/-71, size 0-0 line 3046
[  358.626386] binder: 20859:20863 unknown command 1694720780
[  358.626393] binder: 20859:20863 ioctl c0306201 200001c0 returned -22
[  358.626595] binder: release 20859:20863 transaction 2736 out, still active
[  358.626599] binder: undelivered TRANSACTION_COMPLETE
[  358.638305] binder: release 20866:20869 transaction 2740 out, still active
[  358.638309] binder: undelivered TRANSACTION_COMPLETE
[  358.639794] binder: release 20866:20869 transaction 2740 in, still active
[  358.639799] binder: send failed reply for transaction 2740, target dead
[  358.640378] binder: release 20859:20874 transaction 2741 out, still active
[  358.640382] binder: undelivered TRANSACTION_COMPLETE
[  358.641613] binder: release 20866:20873 transaction 2743 out, still active
[  358.641617] binder: undelivered TRANSACTION_COMPLETE
[  358.650351] binder: release 20865:20868 transaction 2738 in, still active
[  358.650359] binder: send failed reply for transaction 2738 to 20865:20868
[  358.650483] binder: undelivered TRANSACTION_COMPLETE
[  358.650490] binder: undelivered TRANSACTION_ERROR: 29189
[  358.662806] binder: release 20865:20872 transaction 2745 in, still active
[  358.662813] binder: send failed reply for transaction 2745 to 20865:20872
[  358.664040] binder: send failed reply for transaction 2743, target dead
[  358.664230] binder: send failed reply for transaction 2736, target dead
[  358.664238] binder: send failed reply for transaction 2741, target dead
[  358.665812] binder: undelivered TRANSACTION_COMPLETE
[  358.665820] binder: undelivered TRANSACTION_ERROR: 29189
[  358.709911] binder: 20881:20884 got transaction with invalid parent offset or type
[  358.709938] binder: 20881:20884 transaction failed 29201/-22, size 88-24 line 3454
[  358.709945] binder: send failed reply for transaction 2747 to 20881:20884
[  358.714516] binder: release 20882:20885 transaction 2750 out, still active
[  358.714521] binder: undelivered TRANSACTION_COMPLETE
[  358.721717] binder: undelivered TRANSACTION_ERROR: 29190
[  358.721837] binder: undelivered TRANSACTION_COMPLETE
[  358.721844] binder: undelivered TRANSACTION_ERROR: 29201
[  358.722650] binder: 20881:20886 got transaction with invalid parent offset or type
[  358.722674] binder: 20881:20886 transaction failed 29201/-22, size 88-24 line 3454
[  358.722680] binder: send failed reply for transaction 2752 to 20881:20886
[  358.730588] binder: undelivered TRANSACTION_ERROR: 29190
[  358.730702] binder: undelivered TRANSACTION_COMPLETE
[  358.730709] binder: undelivered TRANSACTION_ERROR: 29201
[  358.744162] binder: release 20882:20885 transaction 2754 out, still active
[  358.744167] binder: undelivered TRANSACTION_COMPLETE
[  358.753672] binder: release 20882:20885 transaction 2750 in, still active
[  358.753677] binder: send failed reply for transaction 2750, target dead
[  358.753697] binder: send failed reply for transaction 2754, target dead
[  358.768411] binder: 20893:20895 unknown command 12706575
[  358.768477] binder: 20893:20895 ioctl c0306201 200001c0 returned -22
[  358.769057] binder: 20893:20895 got reply transaction with no transaction stack
[  358.769065] binder: 20893:20895 transaction failed 29201/-71, size 88-24 line 3046
[  358.791464] binder: release 20897:20900 transaction 2759 out, still active
[  358.791469] binder: undelivered TRANSACTION_COMPLETE
[  358.791800] binder: undelivered TRANSACTION_ERROR: 29201
[  358.791817] binder: send failed reply for transaction 2756 to 20893:20895
[  358.791926] binder: undelivered TRANSACTION_COMPLETE
[  358.791933] binder: undelivered TRANSACTION_ERROR: 29189
[  358.792107] binder: 20893:20898 transaction failed 29189/-22, size 0-0 line 3138
[  358.799222] binder: release 20897:20900 transaction 2759 in, still active
[  358.799228] binder: send failed reply for transaction 2759, target dead
[  358.799826] binder: release 20897:20901 transaction 2763 out, still active
[  358.799829] binder: undelivered TRANSACTION_COMPLETE
[  358.799904] binder: 20893:20895 unknown command 12706575
[  358.799913] binder: 20893:20895 ioctl c0306201 200001c0 returned -22
[  358.804069] binder: release 20897:20900 transaction 2763 in, still active
[  358.804074] binder: send failed reply for transaction 2763, target dead
[  358.813644] binder: undelivered TRANSACTION_ERROR: 29189
[  359.372624] binder: release 20846:20850 transaction 2724 out, still active
[  359.372629] binder: undelivered TRANSACTION_COMPLETE
[  359.373329] binder: BINDER_SET_CONTEXT_MGR already set
[  359.373362] binder: 20846:20864 ioctl 40046207 0 returned -16
[  359.373448] binder_alloc: 20846: binder_alloc_buf, no vma
[  359.373466] binder: 20846:20906 transaction failed 29189/-3, size 0-0 line 3284
[  359.380662] binder: 20846:20906 unknown command 0
[  359.380670] binder: 20846:20906 ioctl c0306201 200001c0 returned -22
[  359.385635] binder: 20846:20864 got reply transaction with no transaction stack
[  359.385645] binder: 20846:20864 transaction failed 29201/-71, size 0-0 line 3046
[  359.575411] binder: undelivered TRANSACTION_ERROR: 29201
22:42:16 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2400, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = mmap$binder(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3ff)
r7 = mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r8 = mmap$binder(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x88, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="086310400000000000000000000000000000000003630840", @ANYRES64=r7, @ANYBLOB="00634040020000000000000000000000000000000000000011000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000852a62730010000003000000000000000000000000000000852a6277001000000100"/60], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0363084050016f0851238a83c2d99a0f8ad72f1ef6633915a1d1e3ab5a3eadf703345a4301d43cf28cf6", @ANYRES64=r8], 0xa6, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d5c356e32e66fd2fd301b31b78e2d539c63f5455e5ed20af59886e0c11ccbd0f948967a981320c563df8176a12e68ac44bcc131e3430470a56d43da6676723099df8e80d5184b456459b2bdddb6bfc9811f901bc1b28d5bac9423278e8a2e1fbfbe90a6189e91b1f4f86689f89f40519d23c537cac9aa8d8b3f53ef9757dfdfd3ba5b9dd985ed1d59df3b6988b802d1dd1bc237b3f9767afdab702ca428"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001740)={0x60, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x1e}, @fd}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x1440}, @free_buffer={0x40086303, r6}, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000000740)="9d39ff6876d6e3f8fd6e157ad883e8f989ef8ea2684f7071ed24ed0ee331f09f4693267527b991984cdf66797b0befb6b0fb69b6243abc78606ba5df0b29d6ace035dbee5f0542ae16e6ec01893ba4d0e7343442cc428257d0e9b6e12a568f91cf180b6082c70728136f58e71f81020300c74e40e1be74d2c4955a0a7f16eb9cbc9468765f4a045d38a65dd39fee03d21965883aa20ba7049be1f593a8dc7661ff7499874478b5271c8c5756341e73a4a17bcaa53c2dfddc27543ad6da152d570cfc23bb6ad9fbabb01b675fb7a8b26db2f1ef2119079296b567a4567671bf1959219843ffde5dbb485dbf9788ccf26c1a71da366141df3f05ab4841b8a0f26c4263fe477ccdefdc4a734be603d7d6e0a833529f8c8479a912c7de56bca0b91f8a9fdc62076c7a46c8e92fcc04de7af6de713fe7ce56b3dd0ff5aeafb67e30ec1abf45fabb604315509ab0186e118cb6395ed40170cffce851da72f3aa3aaa149e10fae788be639eeb0e62d1450e0c448324438d6fdb226dd5c94bd3dfd8f3df9029025e92fe41274652fdf65aeb46ba2a0ec681e93f1a4c7155603e357a5841051a61d67fd13a224acb0ead94061c3f6e473560297c252c435041000b1c7eb7ad353dda257394ee3f637e47cb92f2df57a2adc48342f8a4ca01094049dd57ccae519b2445996793cb3ce3a3d193fe7625b2435098fdacf5c7aa90fa73b8846815a765e25ed226a68d9e899ae36009186b0722b62e0d1d948c9bd9becb165ecf3e9ed7bf91484084e53a849fd6f967bbac499acea2d8c4dd5b58b55e0ff026dd3a05577cb3a06ecca3c33edcaed0a8c9d83123c909e13a31671ebe05063c242aef39c74bd853c8fa5666544b77933434042cb26336f92f51c2d81c460335ae53d8aa9a6a4701746f4d3c43c7dece8fa4dbf9e027984e76a193eb31091f319727f006fd26862ced30335d56e97ada4b3f753a5d2e1801280a0b01ac39032398eb5879a8b72831a5399c9c3760820e207f7efb751f989a4659849a6efd5eb72faf73c0190c0f879f304a27d4a82e4caf7032368c3d2fec9d0375c0d08c7f47f4fdebbf3a88c94e24c8821e01c418e65c26e3e04ca1105cae4efbc77563b010b815148ec38c8f29b9cdaff3fb91677d8311c02dbff1c724dff6ec8990fb109513c0dd458d99adff930d3a1bf03d2a015c414f153bb8bd92e07477ec05f77ca03cea2cd679a096f9bd85a4b304c1dddc1ccd5d41d953cf51fddac134bd11eb31b3bed3e08eb9cfb13ff73af2a521247d2b8cc4179268c1fade8465fcebf9450ebbaa6320f49b87dc64c73c4303a01aace7d185c4076df683153f0ba651012424eee94f7021e6ec7c9f14196ed2f24710671c109b0718934b9f7b02e76f173975eeb0a98159081ddac28cab8190c8e8a4715abd3a42024b29d41185ab660923878db58b940c0c0f690fe8ce836e64939b876245201f6405ef7a6818c31e0ce0979e095b21ba7215a44aeeb2790f41f6a3f010b8c25347cf87cd83ceb834446ebe4a32625b52058a2eb7ab33cf2d628e0e0b3873219526965af55ab8ca1563f5af6a71e8b4f79a8be4396d130186e95886b9a8f24f8ca7aeb48d4a207e72d0d83bab5b6b35016a9c10d6e31445d4930a52ed5f086daf3092948f9b50ef50b4114b5b66911c93450830c78248a4d89acaedd893db87e9fe7dc20ecce5fa490adc3ed6d60a4c0fdfc1be7d6ba65ff1c9955859f31502d358df1cce62ed36b4d627f66340c6aa064e1908baecb746ae4ee5c919c9aa8aa9f256947c5578dd8aaffa80cb6160bb61c82f395a086edc95e0e36ec603f0e8c2250e38741ae97bbc72882c87dfdcedd84795aa2816045024a01a00161c04d141520c5bfecf8820776df8255264d1d1ce63cf6eb718aba36163901e2e7d68ef9982f227322c6b035cada9820cf7f8aea95f74bb227778b98f2e4a52d54d52355607f63a323435896437fa109ccd36b6dc1bd168813d3e1b10d94e5c4c6c892b26c88e7b06c26da541e4291d12caa495075c3026a2c9b6412d7ab66e8caa7bcdd451d7e8a53f6e4e9b553b07d80469552780f73b47b27feabc26e6f90c3418e39fdf31bf983fa06370ddfa48172cd3a4bca30a1f1409549257d853538228585812c849f88c20e8a23ff45da0737dea9e2631cfbb5bb8997b7da45ce25151266828574c447965aec0ddb905d257167311ceaea2ae4c8d88bc6d0482f049977be4056b9234252bfe74685e1609b1c09e5ed95f2ccee8aa5119e960126980109e13d41a8da47f3dc411ac85ea1ed3ba1175fba8eb010f00b0da67f04831e451171812ae4eef233b3b97c570c5e85b306f0ca76bac4128e4ad44ca5adaea21548f8afdaba39feb50f6725f7e97988eafc8db30b0f7462639929a07cff3355686ec3abb9db625815a94cca4232920e0755f72675f351156b840f537f3dbf4afca54f5fdd63484856831f1ba9461925478691a4e3cf008a2ad8574f77b2fe8a81f9a83d54e3799bb65f9a5466924afb91444eb9e1bf9117ad5c4c13d0ae136344e04d49ca3f4dd8741b3e2865ae332b95c9d3648ea16cab01fc5a08973115ec56d19476aaecb711039c33c9295fae6300f4181321f744d21dc71adc34e2730d25b4a485030f4a8236087dbc9e3e0decbe0cbffdb0354e7acee1959f290f3b121c4a2d49a0ae0601bf97c6c4cef1cd010c13fef60a7597706288c5f38e070dc055f01b15fb3c7ab10b10525b2c2802d4ef2265eedcd1a5ab896f358d5f09dc616f69e615d22d72973923cef47b151002c4e34959a3058d99cf91324faee75ff6e32aab57a5e9a67458b41a52d310478c1e6803011ce3eb6c2c48341ca08f0aeffdea390e3dcb7f6ca1053c659219842b34cb5a1df0574d96371a62620fdd7b05934e2193c75049e51e92360167811b93b9da42c5493df3b90062c6f086d53f066d13f3d167aa9af095083357d83bb298b9912d5ea74cedf7a65cb1b15e6e87d0f8868544a7c17016e0a7fb1a121ef9aadbdfa70791feb5061bcdc058025c5322ff249f4572848cd4c5baef712f7624bc895d571833db82deda3b6ea71cfe065678ba5455bf2dc7fa3049df4be4fea219da4beda108b81af5561cbee85c52c003eed05fa797a719a987ca8a0ddc00e7180286c9a0a4923e72a236ca4df90e2365143664643e81f7c15d891d994c0d7d02fde3e5120279fc34cf3d00b00081c25cd51707edcb46d2a07b836e3c062a17f5dc7b9d440da23de305daa5b954d56eec89f87703f962bf533f73d4a4a491db725b9a74a7972865b5692df5b53f26cc1848f92a102891864a4c1f7e6046affa868d0ec8d7906824c5d8ec57bb0ad6b6348261ce724220d8944730a12853995a29254740670438e92d633cbbcbb825723e9b29196146efd7291149f625f64577e8fcd2891de6ef2f8ed12fc376a245628b8e1dd401f4eaec966b1e0497f6cb61075a90dd764cf40fd5b14b26043e57fbc7de7ec0e0b0534a510dc3d94d266a3f7e109ede1fece611e88b2d59a30d071303523fc06a5eba93fe0a790b994fc60f3f79133c7ee9c6026a4a237caba049ddc30318f9d04e7d2b074521883ce80356a17f3b05d4cf60f26c1fb100cd35e29b775fc2917f7180496716d4cf20de74d823dfd3421a19870c7ef471b3839bf498ceacf6e22a813dacce698370c8c586b2ea705c0a3704140db292703c2eff419ff860c60cf6a31fd4d5cb0541f9c49ef1fb0fdc8fced99fb70faea9a2b105ceaefd7746db17c74e2df7bf993e234cd3c92c08ddee52af3a98d79bd83a8cfb355be50cf0a3f0c881dfb48704779bb264de2c1cbb6c7b4ed2d282f32cdf52f68eac599defd58547bd0af08dbc6538232802c797758662ef6559562ece1beb99899d2ea2afe4409479bae7a37a9e892931b39c60b947f445d1897e2969101887461c87f9dd68fbaca1c032b4297f619a4263a80ee0ca029869728123f409d49fa8173571dee29d8bd91a7a2699beecce1cfaae0e19733601bff2fbadd122b83f01e9fc6a443780ac014869f8120aff81190796a28208f4a48d627bfb7a43714a87d388017849c58dd6c4793600ac425917377c640e1a0aa8e102eaa070bea6cf238b8be376e0793188f2f683835e4752d140fa87fbee72303cf38715a55e7d5a18ec122532fe16f43584d4e70a48812cf5bbd8e3d5c84458ed47b8a0eebf826278a9608deb3dae9c276719c3a45522fc50a7c190de56e9be20da7e2d39882d6d95569de0b0e6cd42b69e6aa014f4122111728a013bcdcb3fc3f89c0766f140ce8bbd41ba34bb4cdf2277f49c2e0116e3e85d7718d743a5efac87718dda2dadb9861a3216dfd17a55e2ba7044fd41304ecf2627d44feedf739dc195a7703ccbe3e1204cddce83d1f0a5ae0d64a96a627e3e31630fa6b32156ae7b928d74bdab495edc1aafac625771df84b79d73b72b84a13952c3075d09367032d43a46cde224e49e974ef57d8b9af25819bf6f918d2b97575b5f2590fa004e07e7684716fa4bebafedf17a266fbfdcfb6d1a967e13f41d036c6e2f79f22af1e81755233947c2ccee2caee0cc7b643db302bde2d874116463a94d0daa073e533715c366555af19b5e2f087be61e27dc289a175b6cd4f136b15f7bdf0385f7eb8e2a42ea91ff478cf68f7ab52c864d1f888fa08f02b3a5acb7d9fd26a00a2fa1b56b217b8107958041eb66fe5c9b62fa9d053de31240c5bc5db1b79d32c0efaf38d94e60d8eab9dbfdc8d7b89083493e85651035f965fda78d810625b2d9b38a23c77684c1f1b89ac63b3078925fd316e12fbbfce657fdbd06eafb79aefab0f450a8bba75846d3abd6bb21b594d8d240fa697df9239c0f1f829cb0c23b8f3b9dfdf5ead227c08f0583c1af96b63d0b48a80009734698035372427ffa7ecaed1258e6e75e17b8abc7a514e4a7f4f7d8ef7b2e180165925f0a39522ab8fb756c671863737c9997a7ace057202d86eb903159caa921bda83c3285d61af6fe265b2b634e4f65c8c6eded48e68269e607cb7cc075349b6bcef4f355ea5542f9857384c8296e6011652c4f0d35b53ac54c2196cb890f769e7d584d41e2b9bdd81acc4d68ca4eb6107fe61c5a4e629e6a75777e19e8fe428309fc2c65fef49583d04741ca9cdc0186c7e1aaf937b5b17291fc2b7ecff5779ba5da0601ef02841e820c5a986ef9e9aa9fde07ef1dbadce3f4dd7b64a5a5fcd7a715f9c3bb0b10951876a3e691e9bab5178d2f6c605b44943c34d99b529f5544960ec078936862b80ceb76eb3584b72e9ff6ef6e11fed251f0aa71d9e66aae89ac59e52a681c31a12b781bc3a564e5f38a76eda17857a8349667b470d7c31509b53efef84f8cc1178729a818c201b01c0983dc2087503156ae0346988dd4bd79ccd3f159a705fc6c10f9a39415a86dd33e8bd32ff4db11ce6db33697860c46e432c99ff84a436f3203af58ac9eff54d18008a67c5a5eafdc0fe6e4e77015ab8b01b6a77bc62d7624526105985cc38031ca86f2abd0b4212bc0efcfc17b2bdeb52c649974f65e65bb9243b186903b767f31361be178dd5f2f817ca95fc6520c3a605c3bb9a6baed9dc3941654b3167ed7818303c29b63ab93ee570c18f6d7d310a2cf0ab062961e1e47b668a111e76146fd30c4fba90bfab28b23cc9697326b0f2c4cfdca698b9ddd02e50b1a958dc2e55d4830905c2db11a837c6275319e9881f2aa098a623a9337702455ba5bb9ead598bab2b0a7d632fe22dfd1b8223548581f5cf62e9081d"})
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r9, &(0x7f00000000c0)=""/31, 0x10000067f)
r10 = fcntl$dupfd(r0, 0x0, r9)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102004}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x290, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8b8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK={0x110, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72c2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2aa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xca2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xee2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4c000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x644}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb6d}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r12 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r13 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r13, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r13, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r10, 0x28, &(0x7f0000000200)}, 0x10)

22:42:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000010000000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000000200)=""/47, 0x2f}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/95, 0x5f}], 0x4, 0x200)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000400)=0x9)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$sock_proto_private(r3, 0x89ee, &(0x7f0000000340)="073888394f2ffb402d96c1a294c0b5a98365a939d5caa3ba9654c07883b9c01184f080b084399c20795ddf6dbc66940c1d1d12ab818b73aa96a34dcbd8fb19510031460263e62f1c3d8915958f1f7098eabaddaf43f0ea31da1771b4bbceb3e73018efe973ffa4b0fe35e240f785fc64b066bb27ee1ca7ebd25040d33d2f9ddef711002cdc3622fbfc28fa9ba6")
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x40)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x38)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r6, 0x0, 0x0)
sched_setattr(r6, &(0x7f0000000440)={0x30, 0x3, 0x1, 0x986a, 0x0, 0xfffffffffffffff8, 0x80000000, 0x7000000}, 0x0)
r7 = epoll_create(0x100)
preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/227, 0xe3}, {&(0x7f0000000240)=""/73, 0x49}], 0x2, 0x0)
ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000080)='syz0\x00')
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8, 0x810, r1, 0xfffffffffffffffc)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  359.581731] binder: send failed reply for transaction 2724, target dead
[  359.592964] binder: undelivered TRANSACTION_ERROR: 29201
[  359.604734] binder: undelivered TRANSACTION_ERROR: 29189
[  359.673124] binder_alloc: 20908: binder_alloc_buf size 4503599627370496 failed, no address space
[  359.677492] binder: 20911:20914 ioctl 54a0 0 returned -22
[  359.678271] binder: 20911:20914 BC_FREE_BUFFER uffffffffffffffff no match
[  359.678280] binder: 20911:20914 BC_INCREFS_DONE u0000000000000000 no match
[  359.678286] binder: 20911:20914 BC_FREE_BUFFER uffffffffffffffff no match
22:42:16 executing program 4:
socketpair(0x14, 0x1, 0x6, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10900000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:16 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x401)
write$evdev(r1, &(0x7f000004d000)=[{}], 0x10)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = dup(r0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r6, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r7, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000001900)={@mcast2, <r8=>0x0}, &(0x7f0000001940)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e80)={<r9=>0x0, @remote}, &(0x7f0000001ec0)=0xc)
sendmmsg$inet6(r5, &(0x7f00000047c0)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0xecf, @loopback, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="2e69d9e245e104306df96442109148dba02bb47111307eb5ac5afdc44324eaead570c949f794ea69634504e739d978bc1baa397dce15ca468d34269684cff0e7cf9c511382d9431c894a433ce9f965", 0x4f}], 0x2, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x101}}], 0x18}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0xa78, @loopback, 0x7}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="76f1091afd1483fb04032ce80006d55cc634407ea55c277682bf4f8ead9a0a4ab003fefab0bd4432570e6b4578bd75ce5d409e060003988ceaf895f419b4c9db4f002b2ead21d4210906956393a703ec54548d103a29011e65620b4fc3b26c26a80ea35b5186bdd3e5a0adc4430c1397b5459f7d08e9bf8c96d9595121f6d63fce55d0003248c6e794d7a7492a15c388dbce74e573f45c48c857d8e4f2e4fab74dd07626ed774434ff02d6f87ca57c01609ee5a0b7d2da06160fe6281194fee4dbd68a4ea19d73448e95f6f752f5933054b32ede09bfcea189523b48b6683168ef7628cd7eb68727", 0xe8}], 0x1, &(0x7f00000004c0)=[@hopopts={{0x1048, 0x29, 0x36, {0x3c, 0x205, [], [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x20}}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0xe63, 0x1000, "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"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2748}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x2, [], [@hao={0xc9, 0x10, @mcast2}]}}}], 0x10c0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001580)="2d3a65ac82a2d3137a3c556ab4d48ae60e72eba862e092d9dfa7d3284d1bab223921ab1d55d7c7d5cd0f0fe61d18ac81ac53d2ae9d500ed19999435fcadc0bb7a39bdf4f27440858749b275cd0947a7ba661bc96546c5a79c6b93f6ca90c0d7ce1c806568c885480973305fb0c51b42cf82ba8273d4da880a19bf3c687e9b7ac361c9423ab3f74cb401fbbea3df4c844d293d8bb6a1f49205e5b4f5e181be06ae0f7a2123626f0a58e6b48a622a86c78ed77e08b", 0xb4}], 0x1, &(0x7f0000001680)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fffffff}}], 0x30}}, {{&(0x7f00000016c0)={0xa, 0x4e22, 0x1, @remote, 0x4}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001700)="a77ead9620d9630c104a9a67dcc9d82917e37a75920e6cd350fb12fe27985976214e12592a81e6ad972adf155c01281081031b283d4718053a4fce63fbbc9bc1dcb8a733a0c1bddae21377d9f5807180770c970e613fffab55791625edc92c55acae6f7cd8a0f0a0e36a339c07ddb8186bd3f0bf7bd524b8e99f8c63c4f8af09a6473868c8740f8fa10202e38106296816340e73e8ffbf2911048d9b3a6bc2f12b18e0202b7ba4a911cafe820471f3ce7cd0c08d09cfd2ef424574d4fd15061650070a97530bbf3968e546c1d1e459fd81cfdc62", 0xd4}, {&(0x7f0000001800)="b424f2dc665d7608408fa0e2167c18e913606f1b613dd1eeb967b619b90218c2d85898b11da553ff217d5e0fb68254e66337f616b93e21a470cbb565e68a65dee8a1b9c16ee0d16220973dd7152a751a8f64fa2e0fa89c1331dc2b0c2f6bac96d65f1eb8f48f68249a8f0d056ef98759c683241f5fae81bc9e019f85b4777527623bca820a0846b7a25b35824e32bec49390654e8fd7067b37378c5fccf39f1bfc6914bfb84361319e2a13234c73a9108a646c4160763e3505745a1bc34ed7", 0xbf}], 0x2, &(0x7f0000001980)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x4, 0x1, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r8}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a40)="82aaab01dd305c7e77a4e5f0be3e673a3b5c95fbb7fa6a4bf4fdee3f68f22b8ba002e89c62894ae8f40644e480ceb631733db040695f9d3407ff37be167a93963aa44a7cc7886a45f018a4eaa15c1428c1d01eea03ded741987c9c68d00b986fe921ec7d48aac67d1e845372f47b1447961c36a23a4357e32cc3247808341ba5806ba37cb49b72ef964c95bd4c5b3c5133e563bbcde3571d4b32df239865b65c5c067c302a6a8f506506c1d3bd70766df9af34ab9bbe97f5bfd278a9dc66b9cd54eb1f740d9bb00f99bf9e03e36cdd19ac82adea20686891ac8d041f767881", 0xdf}, {&(0x7f0000001b40)="c6ab283d1b432a0eac198a96b3b0e3ac4b65c9", 0x13}, {&(0x7f0000001b80)="2f1e373711b391a8aa4df24f81922d3bd045de1f43ad40a0f2fa18ef16d53e6c6a700ac1bf2e0fef91f562e219a1f1dd6d95", 0x32}, {&(0x7f0000001bc0)="c85012d81e39db9830ecc49927cb9b6edb1e92b274cee0a0859327d8d0649c9e8d32a5ff0c7009b5050818d760e95d55e902e40a80e36c97df7b", 0x3a}, {&(0x7f0000001c00)="e18c265680146206cf4849d523f037deb102e73fc38e5d4b3140457260751972b32551013288e1b5d746aa933c816dbcfd8a5aee1c1990c54881693b570bf108364507c827df14fc3a", 0x49}, {&(0x7f0000001c80)="2a23ab7f87b690ceec2e11e980fdd1d4c6144865682e9684d87b967bc8ccea67e23a19b187e8b5aca1d182da65036d29e56d9c7607283681c7af8e6a900187c93b7ce399e68b8daef47830bc30abb2d959e04b06b3500803a7bb2b2fe30a2d1c8fcf8c49c28ea57160b16a76e8ba7429f5994dc156baba838cc5d81c3e0434d8e7a7f92338b435f859e32df563925c05b77a09fc8304daa62e44c836ced0c41f3bdf545adf2770476db44fab0e4d39118380bcbd51a79cbd233d41a07b9b66022a701c5d89497f52e120164ba332d294bd17f77cc332d09d70", 0xd9}, {&(0x7f0000001d80)="8b9b9fe2a667755031c99fe4986c", 0xe}, {&(0x7f0000001dc0)="9fce14d82d9911a79ee66f16deeaaeb04c60417def878d700651a038100101798202945748a7fff27b32a415834a478bba41", 0x32}], 0x8, &(0x7f0000001f00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdrdstopts={{0x1b8, 0x29, 0x37, {0x2e, 0x33, [], [@calipso={0x7, 0x10, {0x2, 0x2, 0xbc8d, 0x4, [0xffffffffffffffab]}}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x18, {0xff, 0x4, 0x6, 0x8, [0x6, 0x80000000]}}, @generic={0x81, 0xa3, "f1a6dd2b298e2a4ca5fa828b0c3318610823ddbba22752e1cc323cf756d99fc86642501c11b5a63cc24ae8a83d8f795b2cf3b738e699403394b76c4fd891ba855063f15b0c24337923d4b1e75faf689b2523787deef1c67f11d5abacb533a482953c58df980500b8c312d064ba3f50263b62bf59563fc217310def3023aa9aee2b20320a7e37d9ecd057d18a97799d36e7a5d72cb08e826ffc87e854215ece1a482bdc"}, @generic={0x1f, 0xb4, "9b17d049c25825848e275801d9baf53273ce7b87d02ca19ed1658b922f72953b0b0ebf80a10fa4dec5358438c9c2600b8d9bff67ff6f3dd03839d6c1a168b4ccf220f0626794953ac420095bfd71e9322ed7a86339a0305e177f1bf146148f3e67766e168e59881744da151302519c540de7991bcf31084a57182e7a174ef9eb86c069a14f2f7dccffab9b32ca713f61d9f9c0240d064d9784ed4c913c975e287a0875c5b26cf3c0e755e7c11f95346252d69722"}]}}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x1d, 0x15, [], [@generic={0x7f, 0xa9, "b76e23ffd9bb3eb5edbb6cb392afa2e383401a396253c2c6f2d83b33f95a796ab34b5c115ed917005d17c586da4387eb6ff82958e86edf2a0bb9ab2695c1da69814a564c7d4ac2b299e93ef2cbe6ba021c57163d7c0bea8ad2772b2cfe81591727b3d3081322965531140a026838405f4eb6e8d277d7dc221f39d83ef63c4c4bc841ec2d58c5a9dc1242a0c5cef4997264fcecdde1c412858da1866c7d766363a463582237845c8c54"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, [], 0x1e}, r9}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x1, 0x0, [@rand_addr="5acec4ac666b90981c4f12a28cbca220", @rand_addr="9f46ec0abb381d9114b3758cb94a259a", @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @mcast2]}}}, @hopopts={{0x60, 0x29, 0x36, {0x2b, 0x8, [], [@ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0xfffffffffffffff7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @hao={0xc9, 0x10, @rand_addr="afedf000b766605a39436fa6d92aee52"}, @hao={0xc9, 0x10, @rand_addr="4df8311c0df565dbb06d7c3e221c97c1"}, @enc_lim={0x4, 0x1, 0x100000001}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x0, 0x15, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x58, {0x6, 0x14, 0x9, 0xffff, [0x5, 0x8001, 0x1f, 0x9, 0x1, 0xcc, 0x9, 0xea1, 0xfffffffffffffffd, 0x301760dc]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x8001}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @padn={0x1, 0x1, [0x0]}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x6, 0x1, [], [@pad1, @jumbo={0xc2, 0x4, 0x10001}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x40}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x4a8}}, {{&(0x7f00000023c0)={0xa, 0x4e22, 0x9, @empty, 0x501}, 0x1c, &(0x7f0000003840)=[{&(0x7f0000002400)="e050b2c27140383ea2033018d524d2fded1f34c3efdd87a21c3a799235c1658ebe1d5272d00a7152fbcd65edfc27fa40c7903027856329eb33cce2fbddcad803aa9033f041301de0a8d4ff90367f1512c03f0515f5d3f5a0a9500323d0946c1c2b57ee6c7e728a79e503f0de202e7ecb073f255292562f23bb762dd9dfcdf11f242873792a77d6c222", 0x89}, {&(0x7f00000024c0)="b3e1c7fd86efc497646bb0d27a940f25e8634e154c1e1848a009ec9c81374470c6e3f5414d13454b4b84f5f51a5a5623be286dbf751c9ca797d7819f13d80358bfa48082d252de8db737857e33699546fd85e1ed7143f28edd2e", 0x5a}, {&(0x7f0000002540)="3f29592670f547d03f4e7c982ecb0121a4fb899d4988213587359fad8ecb02a4d5d8d3515287232ef88fe191ff6ec27d038ebf70aa8b1c458bfc7cc157375666c9a1e423cedeb5a160aa0f14f14b06bd336dabda06e3335e59a4e49c121c7411cda5ce0267ff8d84a39133c6a6da60ecb2a3", 0x72}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="89229e366e5a4c5cb447db451ac267b3", 0x10}, {&(0x7f0000003600)="7798823fefca12813044a8eb0ee64a04fdc2c4e41d59afa71d928770d041d8d96f596045ce9021a7376a3ed1594dcf2fcaf638951c666a999561b6dcabcc81a095826e371211413686cb3a11f0dcdded53448a3e75526ceb0a59f670fe0afb9fb9d259841816298feac1796b3633c0a8363fa713606ae554d86e6818f239fca0c733c04d6b90002ac799b68735be3ff6cbb059700bb0b097bf2dc6e26b8c28f0458409bdce5c45efe968ef8523bd83b27fefa97369711262cc7c7ff0c694d8217325db17eec5", 0xc6}, {&(0x7f0000003700)="b9882bffa6fbc3988a1ef51af217d4c1341c4c088c26075fa0e9894e729a95c05ed0ede33b1bdf661369a5affa538f38c7e9d7442268fe02916501650b24a80c218cb7", 0x43}, {&(0x7f0000003780)="687de4a36c494f7323eace3b1ba5b61137d51c632a15f1530a9b1e185da3bd0a51aa48f91fb830444a72d316cb20db9de481b807cb5a795182", 0x39}, {&(0x7f00000037c0)="d8dbe9d1a43f12646dd878bc64850f74f2cd336030af2317b250c5ace7ae5cabe00307f2f8d5f1d7358e8ab469f1aefae53cb9d301907870cfe0a202dbccc25eeb133bd9424cef2b1d26bcff4c222e16b8c34c28", 0x54}], 0x9}}, {{&(0x7f0000003900)={0xa, 0x4e21, 0x388, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xe}, 0x1c, &(0x7f0000003b40)=[{&(0x7f0000003940)="b42d625c9294a876e70d4f325fd94e51287f4c9e6ee4bc1fd9c16703de57f2695cb7ebfe3b5c374aaa180859ef05878d8609aa32481b90798d9893f5a2841fe214a3ecc9a4e84455d49152e88a2cda1972b1cf5929f15e6853e2043c546ebc5eb2f5c1740b3de91ead7662ead3e597a9cb333ba5bbfda4855b5d2e8c5e06bdfacf8c8782b72754427ad352db046480a154979c6b8f080dadb0493cc2525438ebf9eda92efb82d917375ef27308350b006cca7a35cc7c21dbe1615235", 0xbc}, {&(0x7f0000003a00)="b031ecd3307f54330ce99df8c80e8c364b3b973c829e0ab894db6fc4bb263d2e67f286175d400795a0397b61c3bdc0622d0cc6ec09a90f8008b92c4093f6a938cc6fea89f1c6c9d9260c3221b98dc1f03e108d9cca7585cda417ae410f7fca6a4e7bf0180226a4a2fb16a572c173ea07a2001be5b2e1a7e9603bf09c1217bd61cc7c6f7199b76cd9142c0d873c690cf53145e01f6cb96a7d1d7647b72e0079f12c00b56a588429985a2bec6d22326f61d332742adec113ca0f250d174b742257313f8c920c", 0xc5}, {&(0x7f0000003b00)="bf64c27198320d00108a07547159fc49bd417c65b7dd696fa44a61b82923019446162e2edf2f9ca4ab0ee4bce44aa139ea4e0d7b559e1e275e", 0x39}], 0x3, &(0x7f0000003b80)=[@flowinfo={{0x14, 0x29, 0xb, 0xa8}}], 0x18}}, {{&(0x7f0000003bc0)={0xa, 0x4e23, 0x8001, @local, 0x4000000000}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003c00)="f48a391b812929ffb6ebcb78968c500e3bf5d0e99f79750e850f14ba2297eaac1772008e1e18c88434ec35619883d60283ad279cab91896e64f319dd4ffab689c0a7e7649d6c2ca6876a9a9e1f2fbbe9f0ca194e24bcd1340ac3351354f628edc15cce74622e34b99d6194f4cb053f1cd0d5f53e86e8c3c1c8aa", 0x7a}, {&(0x7f0000003c80)="b20062e1642bc67a16074eca1aac4c53d83c4148711c93ef4b7924d8bd8b1e72653af85e74272d660651fbb0de3be9beda282218c757f8b8131c51f015", 0x3d}], 0x2, &(0x7f0000003d00)=[@dstopts_2292={{0x120, 0x29, 0x4, {0x2b, 0x20, [], [@calipso={0x7, 0x58, {0x1, 0x14, 0x80000000, 0x7, [0x5, 0x6, 0xd515, 0x7, 0x3, 0x3, 0x1, 0x7, 0x1, 0x7]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @generic={0x8, 0x7e, "61eab0d875a6920f29257253c25da7af800ef1d98fefef130b88f8d353c454be8d3565d9099117d70a0e6c4a2064b91ebfba9f8b5560ee046f1e9c16ab1fc4aa5b0d79f0b2fb5f3650892a467b11e17c34611689221dfe06a8f57a890f0858d76c850c4b1ee591ce1942dd0816f714aab4ffd837fb72b337ce07f8126cd6"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x401}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x0, 0xc, [], [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x40, {0x8, 0xe, 0x0, 0x3, [0x8, 0x7f, 0x7, 0x9, 0xffffffffffffff81, 0xfffffffffffffbff, 0x40]}}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x33, 0x6, [], [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @ra={0x5, 0x2, 0x3}, @ra={0x5, 0x2, 0x4}, @generic={0x7, 0xa, "fa23c4d4b855bcd79373"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffffffff}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x2b, 0x14, 0x2, 0x2, 0x0, [@loopback, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @local, @loopback, @remote, @dev={0xfe, 0x80, [], 0x12}, @remote, @rand_addr="3e4b6d71455a13e5f487f0014376d1ab"]}}}], 0x2f0}}, {{&(0x7f0000004000)={0xa, 0x4e22, 0x3, @mcast2, 0x8000}, 0x1c, &(0x7f0000004280)=[{&(0x7f0000004040)="0ea718b687f5293df875ee5cb0d902a068db37e529f40a636eaa56ad3a4a26974044fced2e67f941cd80270ec7f3743761145c2119b2c29218d72c835bc7f7e3e7bce2dd3386e3ed443be78fe01cc8b333ef90d0ea99af805424f82ac3e1b6c1cb6e4a4b3d31e91239606b125a7f4e672171a2f03dff7b615b914e51100f119b0568", 0x82}, {&(0x7f0000004100)="e34d1fc5795cb68cfadedb48b50e6f77b9aff5bb15d8583d85a3f96a79adc8ed5d7b24f32f7526781d53308cc97160a667b3b954e2c2139d85f12c2e3b2eb3311005dd99b180421dfa850c2d7f66f2d4998023919dcdcc976d53aaad111f4e981a4d7593e4981d718da307fef31d05c09acd133416ee4accfbe75e127132", 0x7e}, {&(0x7f0000004180)="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", 0xfa}], 0x3, &(0x7f00000042c0)}}, {{&(0x7f0000004300)={0xa, 0x4e22, 0x3f, @dev={0xfe, 0x80, [], 0x26}, 0x5}, 0x1c, &(0x7f0000004700)=[{&(0x7f0000004340)="55d1dff391b34e256fc538e4a487d354282cf79ca047acd6c5470cc99e6f287ad812d88cbd2d50b15fe6fcd63979db421cc43fd3a23f7093ebfbf28053fc767bd37924b627e299fe2c687b6516875f244929c78439136076d1a5be587c8592752316d20c8e92e18d23c610a6158c70d90135455e53c423c0f67e1516df", 0x7d}, {&(0x7f00000043c0)="31b2f68b60c21dbf7f40a496a3509c376791371886ca7cad504c9c43c203e381aa601a72c8d3ea7d6e724cb0583a8386942e47060effff4acc1983a0ac278f67fdf5d149da477265851b1c070fd3f2b2f7353da5c3ab28ae54c69f48f0656e941224ac41c5fe2edd84899cdf4358789447dbfd4efd0eff39f1da126eb725f6acdabf6a4b3224e5b4ab30e4be69eeb70616", 0x91}, {&(0x7f0000004480)="915e80e692c370e5f6c3d66b6e75a18a8138641d64694e0bbcbb75e814a6260da3ab771cac46450e486b3ed93d958be392b3ca4f01b23b2e2e856a8cf1ce12804bb37d1573b0c62947e27040ad7384b41d2ae5209299ffb7af4aa49ea291b9095498c9f8aceea6cd147507788482111a", 0x70}, {&(0x7f0000004500)="9e2f682af8d7d3", 0x7}, {&(0x7f0000004540)="ef63ebc7ae1682997c7bf4109da5bb9c7d20f5cbc251fbd4688424e809bf0012e86e85468e033c56b3737cff1789f63adaaadfa6742d857cfb3da1db0ad35d714419add8b9aaea57e8cfdcd35ba2d469bc980ff7ad1abe88cc1a58e033dee69c4a8b1318e8ed51c2136f34738ced2b7af158adfb38cc0720", 0x78}, {&(0x7f00000045c0)="12a03f9d5e5f2055070baf22f56b89aa40a52c3e4e0084c83f022ea28b703a288c9d787ff3bc0c2b93e6a0998ab6e43523aa9c9d2c0fc172f93f176103edc23b51c336f865ef162f8529637626929cc3f35f03c05ed0c2a3349ad9eddbab946ab1", 0x61}, {&(0x7f0000004640)="6da51024fbca01aa679f629d26d7c47db07a1e7637a44928dfa8c5e046efb7243cc456b35ac4c7f29922e87df44e4fb2e19da58ace61ad42ea15e2917c6fc2eee564025a092c3823a092c000a97b7ee217e5f5fd18281b2702665a890970f18b2b8039fea4ca34230492121da2f39b050f68cf7a70f578292bfb7e732c70930965a0d51fda735a6b0a2410dc5bc4b58947b6bd54e703665cc4", 0x99}], 0x7, &(0x7f0000004780)=[@rthdr={{0x38, 0x29, 0x39, {0x73, 0x4, 0x2, 0xfff, 0x0, [@mcast2, @dev={0xfe, 0x80, [], 0x28}]}}}], 0x38}}], 0xa, 0xc081)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r10, &(0x7f00000000c0)=""/31, 0x10000067f)
getdents(r10, &(0x7f0000000140)=""/31, 0x1f)
r11 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r11, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$INOTIFY_IOC_SETNEXTWD(r11, 0x40044900, 0x3)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2, 0x5, 0x5, 0xa, 0xa, 0x6, 0x6, 0x113})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  359.678294] binder: 20911:20914 got transaction to invalid handle
[  359.678301] binder: 20911:20914 transaction failed 29201/-22, size 72-24 line 3138
[  359.697736] binder: release 20911:20914 transaction 2772 out, still active
[  359.697749] binder: undelivered TRANSACTION_COMPLETE
[  359.699360] binder: 20909:20915 got transaction with invalid parent offset or type
[  359.699385] binder: 20909:20915 transaction failed 29201/-22, size 88-24 line 3454
22:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r3, &(0x7f0000000680)=""/156)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd2a, 0x3, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000000)
r5 = dup3(r1, 0xffffffffffffffff, 0x1c0000)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000840)={0x49c, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @empty, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xc5df, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4753}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}]}, @TIPC_NLA_BEARER={0x134, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6000000000, @mcast2, 0xbbb2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @empty, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6340}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x341bc63d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0x120, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x7b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @local, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x49c}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r7}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:16 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xc3, 0x0)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000140))
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2120, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000480)={'syz1\x00', {0xafd5, 0x9, 0xd2d, 0x1}, 0x51, [0x100000000, 0x3, 0x0, 0x2, 0x0, 0xff, 0x5, 0x7fffffff, 0x1, 0x8, 0x540b, 0x4d, 0x8a, 0x0, 0x6, 0x2, 0x5, 0xf18, 0x7fff, 0x9, 0xfffffffffffffffa, 0x6, 0x2, 0x4, 0x100000001, 0x3f, 0x3, 0x7fc0, 0x7, 0x1, 0x5, 0x6, 0xb899, 0xfffffffffffff000, 0x9, 0x5, 0x8, 0x3, 0x4, 0x7, 0x2, 0x80000000, 0x8, 0x0, 0x5d, 0x100000000, 0x4, 0xfffffffffffffff7, 0x2, 0x8c, 0x548, 0x101, 0x9, 0x0, 0x5b3, 0x167c, 0xb0ed, 0x5, 0x3, 0x3, 0x3, 0x8, 0x8, 0xffffffffffffff2c], [0x8001, 0x4, 0x2, 0x68, 0x8, 0x1, 0x7, 0x9, 0x1e, 0x1, 0x2, 0x3, 0x7726483f, 0x8d, 0x0, 0xffffffffffff0001, 0x1, 0x8, 0x455, 0x7fffffff, 0x1f, 0x0, 0x6, 0xfffffffffffffffe, 0x3, 0x7, 0xfffffffffffffff9, 0x5, 0x40, 0xfff, 0x380, 0x1, 0x3ff, 0x4, 0x0, 0x5, 0xfffffffffffffffa, 0x7, 0x80000000, 0xfffffffffffffff9, 0x8, 0xc061, 0x8001, 0x2, 0x9, 0x6, 0x5, 0x1, 0x81, 0x6, 0x7ff, 0xcb88, 0x0, 0x1, 0x7f, 0x2, 0xffffffffffffffa4, 0x1, 0x0, 0x5, 0x3, 0x10000, 0x1, 0x7fffffff], [0x0, 0x6, 0x7, 0x6, 0x61aa7083, 0x1, 0x442e, 0x3, 0x5, 0x7f, 0x100, 0x9, 0x8, 0x1, 0x7ff, 0x1, 0x7ff, 0x4, 0x0, 0xffffffffffffff8e, 0x4, 0x3, 0x1, 0x3ff, 0x800, 0x0, 0x1, 0xf5, 0x1, 0xfff, 0xbf, 0x800000080000001, 0x1, 0xffff, 0xb9, 0x1, 0x87, 0x100, 0x7, 0x1000, 0x0, 0xb4cc, 0x52, 0x8, 0x10001, 0x3f, 0x9, 0x6, 0x400, 0x0, 0x5, 0x4, 0x5, 0x3, 0x100, 0xfffffffffffffffe, 0x6, 0x5, 0xb9, 0x1000, 0x9, 0x7, 0x6, 0x3], [0x7, 0xfffffffffffffc01, 0xcc90, 0x0, 0xfffffffffffffff7, 0xfffffffffffff801, 0x0, 0x7, 0xd94, 0x800, 0x800, 0x1000, 0x90000, 0x579e, 0xfff, 0x8, 0x3f, 0x100000001, 0x80, 0x910, 0xbfb, 0x322, 0x200, 0x57e, 0x3, 0x6, 0x800, 0x12, 0x0, 0x0, 0x4, 0x9f0000000, 0x5, 0x7ff, 0x4, 0x9, 0x8, 0xff, 0xc8c, 0x2622, 0x9, 0x7fffffff, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x1000, 0xc1, 0x2, 0x345, 0xbc2000000000000, 0x8001, 0x2, 0x94, 0x7, 0x8, 0x1c2, 0x32a88c5, 0x320, 0x88, 0xffffffffffffffd4, 0x5, 0x7fffffff, 0x3]}, 0x45c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000085510000000000000000000000000000000000000000000000080000000000000000000000000000000053ada3d8d81e28ed758c43b269230bbd18539379315a26c3cc1f264ccda5e4ebb5f74c7f573e0e4b6e2464f7be56d02f98801996eea7c779714ed17c6c467c5154f3f307d307ca46b5abf1b811f92807b096980f1c7e96de5af3300ce187940003d2c2"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x2f, 0x0, &(0x7f0000000100)="6e6e155f63ed96f296489c4e65e4346467964402000000534a70ab4785a4f05b529d80f329767e64040185ca54a90f"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000000200))
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
faccessat(r5, &(0x7f0000000240)='./file0\x00', 0x50, 0xe00)

[  359.699391] binder: send failed reply for transaction 2770 to 20909:20915
[  359.702811] binder: undelivered TRANSACTION_ERROR: 29190
[  359.703775] binder: undelivered TRANSACTION_COMPLETE
[  359.703782] binder: undelivered TRANSACTION_ERROR: 29201
[  359.709029] binder: 20911:20917 ioctl 54a0 0 returned -22
[  359.710611] binder: release 20909:20919 transaction 2775 in, still active
22:42:16 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
accept$packet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000100)=[0x3, 0x8])
r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x131, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0xfffffffffffffd93, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  359.710618] binder: send failed reply for transaction 2775 to 20909:20919
[  359.711361] binder: undelivered TRANSACTION_COMPLETE
[  359.711368] binder: undelivered TRANSACTION_ERROR: 29189
[  359.737707] binder: release 20911:20914 transaction 2776 out, still active
[  359.737711] binder: undelivered TRANSACTION_COMPLETE
22:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000100"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  359.740640] binder: release 20911:20914 transaction 2772 in, still active
[  359.740645] binder: send failed reply for transaction 2772, target dead
[  359.740662] binder: send failed reply for transaction 2776, target dead
[  359.793993] binder: 20924:20925 Acquire 1 refcount change on invalid ref 2 ret -22
[  359.898097] binder: 20929:20931 got transaction with invalid parent offset or type
[  359.898122] binder: 20929:20931 transaction failed 29201/-22, size 88-24 line 3454
22:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:16 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80000, 0x9)
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000240)={0x2, 0x3, [@remote, @broadcast, @random="12cad89f7092"]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
accept$inet(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  359.898128] binder: send failed reply for transaction 2779 to 20929:20931
[  359.901922] binder: undelivered TRANSACTION_ERROR: 29190
[  359.902884] binder: undelivered TRANSACTION_COMPLETE
[  359.902891] binder: undelivered TRANSACTION_ERROR: 29201
[  359.938543] binder_alloc: 20929: binder_alloc_buf failed to map pages in userspace, no vma
[  359.938564] binder: 20929:20931 transaction failed 29189/-3, size 0-0 line 3284
22:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
syz_open_pts(r3, 0x20042)

[  359.942447] binder: undelivered TRANSACTION_ERROR: 29189
[  359.955518] binder: 20942:20943 unknown command 808464432
[  359.955526] binder: 20942:20943 ioctl c0306201 20000040 returned -22
[  359.955589] binder: 20942:20943 got reply transaction with no transaction stack
[  359.955596] binder: 20942:20943 transaction failed 29201/-71, size 0-0 line 3046
[  359.989025] binder: undelivered TRANSACTION_ERROR: 29201
[  359.989047] binder: send failed reply for transaction 2784 to 20942:20943
[  359.989581] binder: undelivered TRANSACTION_COMPLETE
[  359.989588] binder: undelivered TRANSACTION_ERROR: 29189
[  359.998957] binder: 20942:20943 unknown command 808464432
[  359.998965] binder: 20942:20943 ioctl c0306201 20000040 returned -22
[  359.998994] binder: 20942:20948 got reply transaction with no transaction stack
[  359.999007] binder: 20942:20948 transaction failed 29201/-71, size 0-0 line 3046
[  360.005896] binder: 20945:20946 got transaction with invalid parent offset or type
[  360.005925] binder: 20945:20946 transaction failed 29201/-22, size 88-24 line 3454
[  360.005933] binder: send failed reply for transaction 2787 to 20945:20946
[  360.012989] binder_alloc: 20945: binder_alloc_buf, no vma
[  360.013011] binder: 20945:20950 transaction failed 29189/-3, size 0-0 line 3284
[  360.018708] binder: undelivered TRANSACTION_COMPLETE
[  360.018717] binder: undelivered TRANSACTION_ERROR: 29201
[  360.018786] binder: 20945:20950 got reply transaction with no transaction stack
[  360.018795] binder: 20945:20950 transaction failed 29201/-71, size 88-24 line 3046
[  360.019066] binder: undelivered TRANSACTION_ERROR: 29201
[  360.027512] binder: undelivered TRANSACTION_ERROR: 29190
[  360.027598] binder: undelivered TRANSACTION_ERROR: 29189
[  360.041660] binder: undelivered TRANSACTION_ERROR: 29201
[  360.041680] binder: send failed reply for transaction 2789 to 20942:20948
[  360.041766] binder: undelivered TRANSACTION_COMPLETE
[  360.041773] binder: undelivered TRANSACTION_ERROR: 29189
[  360.061131] binder: 20951:20955 got transaction with invalid parent offset or type
[  360.061156] binder: 20951:20955 transaction failed 29201/-22, size 88-24 line 3454
[  360.061163] binder: send failed reply for transaction 2795 to 20951:20955
[  360.067298] binder: undelivered TRANSACTION_ERROR: 29190
[  360.067685] binder: undelivered TRANSACTION_COMPLETE
[  360.067692] binder: undelivered TRANSACTION_ERROR: 29201
[  360.080718] binder: 20951:20958 got reply transaction with no transaction stack
[  360.080728] binder: 20951:20958 transaction failed 29201/-71, size 88-24 line 3046
[  360.092248] binder: release 20951:20956 transaction 2797 in, still active
[  360.092255] binder: send failed reply for transaction 2797 to 20951:20956
[  360.092271] binder: undelivered TRANSACTION_ERROR: 29201
[  360.092461] binder: undelivered TRANSACTION_COMPLETE
[  360.092468] binder: undelivered TRANSACTION_ERROR: 29189
[  360.118437] binder: undelivered TRANSACTION_COMPLETE
[  360.118575] binder: undelivered TRANSACTION_COMPLETE
[  360.118584] binder: undelivered transaction 2802, process died.
[  360.130889] binder: release 20954:20960 transaction 2803 in, still active
[  360.130897] binder: send failed reply for transaction 2803 to 20954:20960
[  360.130981] binder: undelivered TRANSACTION_COMPLETE
[  360.130988] binder: undelivered TRANSACTION_ERROR: 29189
[  360.152224] binder: 20962:20963 got transaction with invalid parent offset or type
[  360.152251] binder: 20962:20963 transaction failed 29201/-22, size 88-24 line 3454
[  360.152258] binder: send failed reply for transaction 2806 to 20962:20963
[  360.158901] binder: undelivered TRANSACTION_ERROR: 29190
[  360.159020] binder: undelivered TRANSACTION_COMPLETE
[  360.159026] binder: undelivered TRANSACTION_ERROR: 29201
[  360.181289] binder: 20962:20965 got transaction with invalid parent offset or type
[  360.181317] binder: 20962:20965 transaction failed 29201/-22, size 88-24 line 3454
[  360.181326] binder: send failed reply for transaction 2809 to 20962:20965
[  360.199761] binder: undelivered TRANSACTION_ERROR: 29190
[  360.199838] binder: undelivered TRANSACTION_COMPLETE
[  360.199844] binder: undelivered TRANSACTION_ERROR: 29201
[  360.596500] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  360.607561] binder: 20908:20912 transaction failed 29201/-28, size 4503599627370496-0 line 3284
22:42:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r2, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2400, 0x0)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, 0xc8, 0x2, 0x2, 0x8, 0x9, 0x4}, 0x20)
r6 = mmap$binder(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3ff)
r7 = mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
r8 = mmap$binder(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000006c0)={0x88, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r6, @ANYBLOB="086310400000000000000000000000000000000003630840", @ANYRES64=r7, @ANYBLOB="00634040020000000000000000000000000000000000000011000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r5, @ANYBLOB="000000000000000000000000852a62730010000003000000000000000000000000000000852a6277001000000100"/60], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0363084050016f0851238a83c2d99a0f8ad72f1ef6633915a1d1e3ab5a3eadf703345a4301d43cf28cf6", @ANYRES64=r8], 0xa6, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d5c356e32e66fd2fd301b31b78e2d539c63f5455e5ed20af59886e0c11ccbd0f948967a981320c563df8176a12e68ac44bcc131e3430470a56d43da6676723099df8e80d5184b456459b2bdddb6bfc9811f901bc1b28d5bac9423278e8a2e1fbfbe90a6189e91b1f4f86689f89f40519d23c537cac9aa8d8b3f53ef9757dfdfd3ba5b9dd985ed1d59df3b6988b802d1dd1bc237b3f9767afdab702ca428"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffed9, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r8}, @decrefs, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r9}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

22:42:17 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x418246, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={<r4=>0x0}, &(0x7f0000000180)=0xc)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000200)=r4)

22:42:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = dup(r2)
write$P9_RREADLINK(r3, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  360.607678] binder_alloc: 20908: binder_alloc_buf size 4503599627370496 failed, no address space
[  360.607687] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  360.607708] binder: 20908:20967 transaction failed 29201/-28, size 4503599627370496-0 line 3284
[  360.607867] binder: undelivered TRANSACTION_ERROR: 29201
[  360.630567] binder: 20924:20925 Acquire 1 refcount change on invalid ref 2 ret -22
[  360.662398] binder: undelivered TRANSACTION_ERROR: 29201
22:42:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000e1ffffff00000000000000ec00000000000000000000004000"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  360.710907] binder: release 20975:20977 transaction 2817 out, still active
[  360.722597] binder: undelivered TRANSACTION_COMPLETE
[  360.729153] binder: BINDER_SET_CONTEXT_MGR already set
22:42:17 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c0, 0x80)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8)
recvfrom$packet(r2, &(0x7f0000000180)=""/39, 0x27, 0x40010161, &(0x7f0000000240)={0x11, 0x1b, r3, 0x1, 0x4}, 0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="096340000000000200000000f8ffffffffff06000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000f61aab36903f7ffb55b55a4fbd67a2c00e26a83ad2f46c5fe8e6d3d940aecce86f2f7999dd3c9af3ee90e3902f8184d026e3de8713d686dd74aa60064fc0e660690925034506cddaccb23ff8fd52a0f38771815774eae147731769b6eced2eaa14d461bbf1d0f9ab7046f121fdcde195"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x140, 0x0)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000500)={0x1, 0x7, 0x9})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000006c0)={{0x0, @remote, 0x4e21, 0x4, 'wlc\x00', 0x1, 0x4, 0x6}, {@rand_addr=0x3f, 0x4e21, 0x2, 0x6, 0xcaf, 0x8}}, 0x44)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001000"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$VT_RELDISP(r3, 0x5605)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
setxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
bind$inet6(r4, &(0x7f0000000540)={0xa, 0x4e20, 0x40, @mcast1, 0x80000000}, 0x1c)
io_setup(0x80000001, &(0x7f0000000580)=<r5=>0x0)
io_cancel(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xcac478fe55b4a097, 0x101, r0, &(0x7f00000005c0)="2480451f54b5085a008e1abaf2941e236c3c1c7bf221ea8858f7e43949a7a184a75f9203bc9acc3234433fa23a382861d76857b2f49e01d5c3967b227aa97b1573c42e40b3ecf083d327a7827bf654639a8915ac207389f3fe050ed8a0f0cf4c1f78ffd82b4ed52754bfcfde5acbae5a385b186fbb9e5d01183612e8a2d5606f", 0x80, 0x3, 0x0, 0x1}, &(0x7f0000000680))
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/enforce\x00', 0x80000, 0x0)
getsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000400), &(0x7f0000000480)=0x4)

22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
ptrace$setregset(0x4205, r2, 0x203, &(0x7f00000000c0)={&(0x7f0000000040)="f47647577932adbd250989d0c048c9da20fed35cfbc3be000196f6aa6d71126fe35f7997e5b5041af19d2aa0dd99160e48cf52d3032a216e89074976725d20c1a77a375d9cba41f09ac196e0e996de4fbd307f47fda8f4583892d4eceecbc85799b11bcbe90fe16a77d3", 0x6a})

22:42:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x802)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/58], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='\xd7\xf5\x95E\\\xce\xad\xe9\xe9\x89g\xb7\xb8\xba\x16V\x857!\x9a\xd2\xa8\xff\xeb\n/oZU\xb2!\x90h\xba\x18\x8d\x9a\"\xd7\f\xdc\xc2\xb8\x1e\xb9\x8f\xc0^\x8d\xd3\x83\xcee,`|\r\xc9[6\xe5\x8c\xfd\x9fX\xe4\x11\xb8\xd6\x8d\xff\xf9\x0fu\xac\xbaO\xaa}H\x06\xbb\x18\xb1\xb1/\xac\xbc\x8c\x9f\x14\x8e\xf7I\'\xf5\xd9\xe4@\x9f\xe9\"C\xeb\x14\xf6gL\xb4{\xcc\xa3\xce\x8c\x1b\xe3\xff\xd5\x81\xff\xe5\xb8\xdd\xf7\xff\x8e!\xb4\x19\x98\x81w\x1fR\x13\xa3\xda\xd8c/\xbf\xef)\x99\x13\x06\xac\xc2\x80\x92\x13FS\xe1gD\xb8<\'\xa5\xa8\xc5\x179\xa2E\xee\xf80\x92\x9bN\x81')
ioctl$TUNSETOWNER(r4, 0x400454cc, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="b1a8223aa212a00baf3dd3b77cc80732235f6acbb003956e5b596f2e2225dc20ca36aed648e299e37dc413f03e7af06817afcdfc49dbcc3f3067fec3df0f042d53b9fd246d7387adedbe40ef018cbca0da2fa07fbd5f984d4c0260250c84db4d61ba08846b2fbc1123625623ad"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x1})
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101000, 0x0)
r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000200)=""/192)
r6 = dup2(r4, r5)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r7, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
ioctl$TUNSETGROUP(r3, 0x400454ce, r7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  360.729161] binder: 20975:20977 ioctl 40046207 0 returned -16
[  360.729540] binder: BINDER_SET_CONTEXT_MGR already set
[  360.729548] binder: 20974:20978 ioctl 40046207 0 returned -16
22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/r#\x00', 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:17 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14)

22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}})
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
accept$packet(r2, 0x0, &(0x7f0000000040))

[  360.729603] binder_alloc: 20974: binder_alloc_buf, no vma
[  360.729619] binder: 20974:20981 transaction failed 29189/-3, size 0-0 line 3284
22:42:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:17 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
fcntl$getflags(r0, 0x408)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
write$apparmor_current(r2, &(0x7f0000000140)=@profile={'changeprofile ', 'attr\x00'}, 0x13)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f0000000200))
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
getdents(r6, &(0x7f00000000c0)=""/31, 0xc1e29d52)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r7, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$RNDCLEARPOOL(r7, 0x5206, &(0x7f0000000180)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xa, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0}, 0x2020}], 0xfffffffffffffe5c, 0x0, 0x0})

22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x48725dd295fa2dd1)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x14, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
write$binfmt_aout(r2, &(0x7f0000000080)={{0xcc, 0x2af, 0x0, 0x373, 0x18, 0xffffffffffff8001, 0x147, 0x5}, "e31259fb36b296deffcddbd9a1c9c457065dc2fc151713d2a808269c71c36a0c9e9a454f4ed7407f9ced3f0227329e22ab21ed4cd09dec3e474b43065585e99b5cafdd9175a7d440303e132cc371ea3b9bd6445e10c090057fb5aeecc505090052424b62de5fd78520f05a88b371fd5550c39d58cdb33fa74a1d20b4e07f8ab0418f017081148d7c50cedbcce4919b0a01c40ec5ff53e17aeecc3427d6ab06e19e0ceae49eee465431104b70ebd686aa1438c3c5bde8fe17918c8af528b59c75ba9ade", [[], [], [], [], [], [], [], []]}, 0x8e3)

[  360.730011] binder_alloc: 20975: binder_alloc_buf, no vma
[  360.730027] binder: 20975:20982 transaction failed 29189/-3, size 0-0 line 3284
[  360.730353] binder: 20974:20981 got reply transaction with no transaction stack
22:42:17 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0)
sigaltstack(&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080))
write$apparmor_exec(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="65786563a0776c616e100a656c3c447b5d30d9a458d87a49c2b9889f3df1bf8e9605051c4b2121d35207abd9f18f1caffaa21b4c9dc2b8"], 0x12)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1010, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  360.730360] binder: 20974:20981 transaction failed 29201/-71, size 0-0 line 3046
[  360.741254] binder: 20972:20979 ioctl 54a0 0 returned -22
[  360.743599] binder: 20972:20979 BC_FREE_BUFFER uffffffffffffffff no match
[  360.752361] binder: 20972:20979 BC_INCREFS_DONE u0000000000000000 no match
22:42:17 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x4, 0x8}, 0x9}}, 0x18)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9})

[  360.752372] binder: 20972:20979 BC_FREE_BUFFER uffffffffffffffff no match
[  360.752380] binder: 20972:20979 got transaction to invalid handle
[  360.752391] binder: 20972:20979 transaction failed 29201/-22, size 72-24 line 3138
[  360.753377] binder: 20972:20979 got reply transaction with no transaction stack
[  360.753385] binder: 20972:20979 transaction failed 29201/-71, size 88-24 line 3046
[  360.754908] binder: BINDER_SET_CONTEXT_MGR already set
[  360.754916] binder: 20972:20979 ioctl 40046207 0 returned -16
[  360.761241] binder: 20983:20985 transaction failed 29189/-22, size 0-0 line 3138
[  360.762521] binder: 20972:20979 ioctl 54a0 0 returned -22
[  360.765993] binder: 20972:20979 BC_FREE_BUFFER uffffffffffffffff no match
[  360.766002] binder: 20972:20979 BC_INCREFS_DONE u0000000000000000 no match
[  360.766008] binder: 20972:20979 BC_FREE_BUFFER uffffffffffffffff no match
[  360.766016] binder: 20972:20979 got transaction to invalid handle
[  360.766024] binder: 20972:20979 transaction failed 29201/-22, size 72-24 line 3138
[  360.775720] binder: 20983:20985 transaction failed 29189/-22, size 0-0 line 3138
[  360.841440] binder: BINDER_SET_CONTEXT_MGR already set
[  360.841448] binder: 20993:20998 ioctl 40046207 0 returned -16
[  360.841793] binder: 20993:20998 unknown command 4219657
[  360.841800] binder: 20993:20998 ioctl c0306201 20000440 returned -22
[  360.844113] binder: 20993:20998 got reply transaction with no transaction stack
[  360.844121] binder: 20993:20998 transaction failed 29201/-71, size 0-0 line 3046
[  360.845826] binder: BINDER_SET_CONTEXT_MGR already set
[  360.845834] binder: 20992:20999 ioctl 40046207 0 returned -16
[  360.849305] binder_alloc: 20972: binder_alloc_buf, no vma
[  360.849324] binder: 20992:20999 transaction failed 29189/-3, size 0-0 line 3284
[  360.852018] binder: BINDER_SET_CONTEXT_MGR already set
[  360.852026] binder: 20994:21001 ioctl 40046207 0 returned -16
[  360.852107] binder_alloc: 20975: binder_alloc_buf, no vma
[  360.852123] binder: 20994:21001 transaction failed 29189/-3, size 0-0 line 3284
[  360.852676] binder: 20994:21001 unknown command 975349937
[  360.852684] binder: 20994:21001 ioctl c0306201 200001c0 returned -22
[  360.854958] binder: BINDER_SET_CONTEXT_MGR already set
[  360.854966] binder: 20993:21002 ioctl 40046207 0 returned -16
[  360.855052] binder: 20993:20998 unknown command 4219657
[  360.855060] binder: 20993:20998 ioctl c0306201 20000440 returned -22
[  360.856234] binder: 20993:21002 got reply transaction with no transaction stack
[  360.856242] binder: 20993:21002 transaction failed 29201/-71, size 0-0 line 3046
[  360.860776] binder: BINDER_SET_CONTEXT_MGR already set
[  360.860787] binder: 20994:21001 ioctl 40046207 0 returned -16
[  360.860836] binder_alloc: 20975: binder_alloc_buf, no vma
[  360.860854] binder: 20994:21004 transaction failed 29189/-3, size 0-0 line 3284
[  360.864895] binder: BINDER_SET_CONTEXT_MGR already set
[  360.864904] binder: 20996:21006 ioctl 40046207 0 returned -16
[  360.865087] binder_alloc: 20996: binder_alloc_buf, no vma
[  360.865107] binder: 20996:21000 transaction failed 29189/-3, size 0-0 line 3284
[  360.911504] binder: 20992:21013 got reply transaction with no transaction stack
[  360.911513] binder: 20992:21013 transaction failed 29201/-71, size 88-24 line 3046
[  360.929043] binder: BINDER_SET_CONTEXT_MGR already set
[  360.929052] binder: 21012:21016 ioctl 40046207 0 returned -16
[  360.929168] binder_alloc: 20975: binder_alloc_buf, no vma
[  360.929184] binder: 21012:21016 transaction failed 29189/-3, size 0-0 line 3284
[  360.945217] binder: BINDER_SET_CONTEXT_MGR already set
[  360.945225] binder: 21018:21020 ioctl 40046207 0 returned -16
[  360.945315] binder_alloc: 20996: binder_alloc_buf, no vma
[  360.945332] binder: 21018:21020 transaction failed 29189/-3, size 0-0 line 3284
[  360.967902] binder: BINDER_SET_CONTEXT_MGR already set
[  360.967910] binder: 21021:21023 ioctl 40046207 0 returned -16
[  360.968031] binder_alloc: 20974: binder_alloc_buf, no vma
[  360.968049] binder: 21021:21023 transaction failed 29189/-3, size 0-0 line 3284
[  361.025452] binder: 21021:21033 got reply transaction with no transaction stack
[  361.025461] binder: 21021:21033 transaction failed 29201/-71, size 0-264 line 3046
[  361.025477] binder: 21021:21033 ioctl c0306201 20000080 returned -14
[  361.441059] binder: undelivered TRANSACTION_ERROR: 29189
[  361.446606] binder: undelivered TRANSACTION_ERROR: 29189
[  361.452793] binder: release 20996:21000 transaction 2828 in, still active
[  361.459749] binder: send failed reply for transaction 2828 to 20996:21000
[  361.466812] binder: undelivered TRANSACTION_COMPLETE
[  361.471947] binder: undelivered TRANSACTION_ERROR: 29189
[  361.477513] binder: undelivered TRANSACTION_ERROR: 29201
[  361.483172] binder: undelivered TRANSACTION_ERROR: 29189
[  361.488738] binder: undelivered TRANSACTION_ERROR: 29201
[  361.494336] binder: undelivered TRANSACTION_ERROR: 29189
[  361.499954] binder: undelivered TRANSACTION_ERROR: 29189
[  361.505545] binder: undelivered TRANSACTION_ERROR: 29201
[  361.511168] binder: undelivered TRANSACTION_ERROR: 29189
[  361.516650] binder: undelivered TRANSACTION_ERROR: 29189
[  361.522166] binder: undelivered TRANSACTION_ERROR: 29201
[  361.527755] binder: release 20975:20977 transaction 2817 in, still active
[  361.534758] binder: send failed reply for transaction 2817, target dead
[  361.541695] binder: undelivered TRANSACTION_COMPLETE
[  361.546838] binder: undelivered TRANSACTION_COMPLETE
[  361.552000] binder: undelivered transaction 2815, process died.
[  361.633818] binder: 20992:21039 ioctl 5603 20000500 returned -22
[  361.640284] binder_alloc: 20992: binder_alloc_buf, no vma
[  361.640483] binder: undelivered TRANSACTION_ERROR: 29189
[  361.642932] binder: 20992:21040 got reply transaction with no transaction stack
[  361.642941] binder: 20992:21040 transaction failed 29201/-71, size 88-24 line 3046
[  361.644043] binder: undelivered TRANSACTION_ERROR: 29201
[  361.672897] binder: 20992:21013 transaction failed 29189/-3, size 0-0 line 3284
[  361.709022] binder: undelivered TRANSACTION_ERROR: 29189
[  361.717175] binder: release 21012:21027 transaction 2844 out, still active
[  361.727728] binder: undelivered TRANSACTION_COMPLETE
[  361.732989] binder: release 21012:21016 transaction 2844 in, still active
[  361.739843] binder: 21018:21042 transaction failed 29189/-22, size 0-0 line 3138
22:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
tee(r0, 0xffffffffffffffff, 0x100000001, 0x2871684b70cab4b4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES16=r2], 0x1}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9df}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2ba}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
sendmsg(r1, &(0x7f0000001c40)={&(0x7f0000000740)=@x25={0x9, @null='               \x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f00000007c0)="e61c0c7bf54307a1690b64e96e7e38b684008c108abb7f156a5c5a7d2f5dac95b17034f1ef73153f3a530e452a35036ee006e6bf59292f0aa8f3d3e23220b9d5aac99d2488e3c245bbd3cdc1ee85fd7430dfedcdaaa0c1e61f8b0b60b62ef850ca614a3a48deecfee59bf9e6665087bed50da2ebbf821ed945a8355cc6ca216896baa192218891", 0x87}], 0x1, &(0x7f0000000880)=[{0x40, 0x0, 0x0, "3c362f8ca0058ee9086b7daa2ad33d490a6ea99cedcfade2e69e852358119b32b35960842d9b22bf6baa3247"}, {0xa8, 0x0, 0x1, "181faf89a86d19740acfb9ac02e407a015927d048645096e634e5b7c9dc0d39cd5514111289ead3b4dbb8ce0b25827e990d9b13e1cfe1d6f088c2a898e9cb0c75055b4f8bd22cec2eb5bd6fdf1ef65c9fd529bee53d3e1f3636781e00bce3cf15520e8948e0c9153f282086d1443d0bebc9e0ca6e5e0530b71686f6cb8029d589ce994a40b6a8f2a8b29d3cceef1b6c2b0979b"}, {0xa8, 0x116, 0x0, "2e4840f31f45465b15b26c11e183688415e11bae581094cd5a761a0c4917062f683cbe7923abaa9ce28e786d87df998b69defed59de831ff8f8cc32b3008377b448240140385fb9e947aa1cfbf870211f908d7f8ae04175c978c2f42ca535cba8a5e84b7b8023860bd6b0ee519ae46c0351c38cc03619e3452d78aa984bd21164405d620e5ba8ca62cc9d892badfe4f97bb9dfa8c243"}, {0xc8, 0x29, 0x4, "25bdb589b98cf81d47d814ee1c1aa2e4ea038792e7ad50ab9fddbd92ecb085f93a2daae8bcf9e25b8856349c3239818791eaefd6b4b316adbb4a76ebd01aae6d95484ed345a9f2a3ad1aa01c7ba12c4b3a37f19c34aad02bf2879ca6816cdb6e57fc1bac1f15d306c2340bdf97eeb83d018ba3be237df2db0c85e75d005498a7bf68ef60d98e1303ad605dda66724610d85b0fa0ac44647f47ab2c9df56aa2df473dacc0c323e5a62f6e7990d6d0c91e9bcf8da0"}, {0xa8, 0x108, 0x55dd, "01be5efe8bd532a42e1a024d7235ff3294e07d8224a1f6780da107a240972c2052f891392316868828b6e6bbecaeb74a94bf29513837d1ff06229d298880e64b67c18e61c84c492d8fbc05451829e2c1df74f464bf40f28b801f19b90ec1bf7e1ca6417155bec413e88d4c99b26a00db423c65c07f2864f7b983f8aed6415a2ec04017c5dcb55af6983278b0cd06947fd9288484c6"}, {0x98, 0x104, 0x100, "46512c67f3fab472f87d7e5ecad420fa6d480e69a7e7b698736077fa877af3e1c3a7b80bff6d5f786a656d68db787e258e6d8073f356b9d2c649d22a49ae30f7f8345050cf0e72375670c25893950aed445b12611a25fe7baccafe67f867dcc3ade6118c92ffd507a55f7f2289e112435acef3cce64c4cb17731087dda72beabb88b271f06306f"}, {0x1010, 0x111, 0x7, "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"}], 0x13a8}, 0x4000804)
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x2, 0x0, <r5=>0x0, 0x0, &(0x7f0000000200)={0x1, 0x3}, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x1, 0x400, 0x81}, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x7}}, 0xffffff01)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r5, 0x4)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r7, &(0x7f00000000c0)=""/31, 0x10000067f)
pidfd_send_signal(r7, 0x2d, &(0x7f00000030c0)={0x27, 0x9, 0x9}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
readv(0xffffffffffffffff, &(0x7f0000002f00)=[{&(0x7f0000001c80)=""/28, 0x1c}, {&(0x7f0000001cc0)=""/15, 0xf}, {&(0x7f0000001d00)=""/181, 0xb5}, {&(0x7f0000001dc0)=""/58, 0x3a}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/229, 0xe5}], 0x6)
setxattr$security_evm(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)='security.evm\x00', &(0x7f0000003000)=@v2={0x3, 0x2, 0x5, 0x5, 0x5f, "ba1d4df99c33dad2618105e80b2a71ff4a06d9b6b470fb83d9b2e0ee72c79b6352c92165395519a767e0dcd071a96987e789a6404dbf001381079d2ad2e3ad98939b9724e87397c17487504ca243a02ce7d1fed7b404fc62e5db40e905c6c0"}, 0x69, 0x2)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r8, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000003080))
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0cb247debaefd00154aefb48861bb2e45e932e182c3de498de98a5003e451ebea6476c358253a9"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac34970a7ceb7edf909d2842389f"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180))
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x38)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r5, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000200)='att\x8a\xd5V\x02[\xf9\x91\xe6\xe4X<')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000000000/0xd000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000000080)="39a6d6980657b5c743edf7048a004fc3c3df24a74623ad0e", 0x18, r6}, 0x68)

[  361.753533] binder: send failed reply for transaction 2844, target dead
22:42:18 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x22c2f88297589343, 0x20011, r1, 0x40000000000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:18 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = creat(&(0x7f0000000680)='./file0\x00', 0x2)
ioctl$UI_DEV_DESTROY(r3, 0x5502)
recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/144, 0x90}, {&(0x7f0000000200)=""/124, 0x7c}], 0x2}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000480)=""/195, 0xc3}], 0x2, &(0x7f0000000580)=""/234, 0xea}, 0xbc0}], 0x2, 0x80, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="006340400000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002e1817bdc3da39f79b3a08cf0fa405ebd3258957d883c4b6c901439315447669c0b08d01276fa9e96b1c3ab835ca6fff19ba5329bccb9d0813358a0e541efe8517ab356992b673c670aac0b994290a9b0d0f10100000000000000947bb82828faae00ae9f0482497c32feb04dd4f1bfbd183a65276a389669a798f4a8a030d503c21e205dbcb7"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  361.776727] binder: 21021:21049 got reply transaction with no transaction stack
[  361.776737] binder: 21021:21049 transaction failed 29201/-71, size 0-264 line 3046
22:42:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x401000, 0x0)
ioctl$TCGETX(r3, 0x5432, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3ccd22476c1c737a, &(0x7f0000000140)=0x1, 0x4)

22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x984)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x8400, 0x0)
accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x1000)

[  361.776755] binder: 21021:21049 ioctl c0306201 20000080 returned -14
[  361.806622] binder: 21046:21054 got transaction with invalid parent offset or type
[  361.806650] binder: 21046:21054 transaction failed 29201/-22, size 88-24 line 3454
[  361.806658] binder: send failed reply for transaction 2852 to 21046:21054
[  361.808670] binder: BINDER_SET_CONTEXT_MGR already set
[  361.808678] binder: 21044:21052 ioctl 40046207 0 returned -16
[  361.808840] binder_alloc: 21044: binder_alloc_buf, no vma
[  361.808856] binder: 21044:21058 transaction failed 29189/-3, size 0-0 line 3284
[  361.813978] binder: BINDER_SET_CONTEXT_MGR already set
22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\fK\x00\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r3, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2400, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = mmap$binder(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x3ff)
r8 = mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0)
r9 = mmap$binder(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x88, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r7, @ANYBLOB="086310400000000000000000000000000000000003630840", @ANYRES64=r8, @ANYBLOB="00634040020000000000000000000000000000000000000011000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a62730010000003000000000000000000000000000000852a6277001000000100"/60], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0363084050016f0851238a83c2d99a0f8ad72f1ef6633915a1d1e3ab5a3eadf703345a4301d43cf28cf6", @ANYRES64=r9], 0xa6, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d5c356e32e66fd2fd301b31b78e2d539c63f5455e5ed20af59886e0c11ccbd0f948967a981320c563df8176a12e68ac44bcc131e3430470a56d43da6676723099df8e80d5184b456459b2bdddb6bfc9811f901bc1b28d5bac9423278e8a2e1fbfbe90a6189e91b1f4f86689f89f40519d23c537cac9aa8d8b3f53ef9757dfdfd3ba5b9dd985ed1d59df3b6988b802d1dd1bc237b3f9767afdab702ca428"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})

22:42:18 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x212880, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
openat$cgroup_ro(r2, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0)
fcntl$setown(r0, 0x8, r1)
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x20011, r3, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)

22:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={<r2=>0x0}, &(0x7f0000000240)=0xc)
sched_getparam(r2, &(0x7f0000000380))
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  361.813987] binder: 21046:21054 ioctl 40046207 0 returned -16
[  361.814216] binder_alloc: 21046: binder_alloc_buf, no vma
[  361.814234] binder: 21046:21062 transaction failed 29189/-3, size 0-0 line 3284
[  361.815961] binder: 21046:21062 got reply transaction with no transaction stack
22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x100, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$KDSKBLED(r1, 0x4b65, 0x100000001)
r2 = syz_open_dev$binder(0x0, 0x0, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @loopback}, 0x1f0, 0x0, 0x3, 0xd, 0x8, 0x3}, 0x20)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:18 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  361.815971] binder: 21046:21062 transaction failed 29201/-71, size 88-24 line 3046
[  361.857548] binder: 21050:21055 unknown command -565726708
[  361.857556] binder: 21050:21055 ioctl c0306201 200001c0 returned -22
[  361.858778] binder: BINDER_SET_CONTEXT_MGR already set
[  361.858785] binder: 21061:21067 ioctl 40046207 0 returned -16
[  361.860156] binder_alloc: 21021: binder_alloc_buf, no vma
[  361.860172] binder: 21061:21067 transaction failed 29189/-3, size 0-0 line 3284
[  361.871044] binder: BINDER_SET_CONTEXT_MGR already set
[  361.871052] binder: 21050:21075 ioctl 40046207 0 returned -16
[  361.871708] binder_alloc: 21050: binder_alloc_buf, no vma
[  361.871725] binder: 21050:21075 transaction failed 29189/-3, size 0-0 line 3284
[  361.875478] binder: BINDER_SET_CONTEXT_MGR already set
[  361.875486] binder: 21066:21073 ioctl 40046207 0 returned -16
[  361.875596] binder_alloc: 21044: binder_alloc_buf, no vma
[  361.875614] binder: 21066:21073 transaction failed 29189/-3, size 0-0 line 3284
[  361.876181] binder: BINDER_SET_CONTEXT_MGR already set
[  361.876188] binder: 21070:21077 ioctl 40046207 0 returned -16
[  361.877333] binder_alloc: 21051: binder_alloc_buf, no vma
[  361.877353] binder: 21070:21077 transaction failed 29189/-3, size 0-0 line 3284
[  361.910025] binder: 21061:21081 got reply transaction with no transaction stack
[  361.910034] binder: 21061:21081 transaction failed 29201/-71, size 0-0 line 3046
[  361.938246] binder: BINDER_SET_CONTEXT_MGR already set
[  361.938253] binder: 21079:21083 ioctl 40046207 0 returned -16
[  361.938415] binder_alloc: 21050: binder_alloc_buf, no vma
[  361.938433] binder: 21079:21083 transaction failed 29189/-3, size 0-0 line 3284
[  361.994654] binder: BINDER_SET_CONTEXT_MGR already set
[  361.994662] binder: 21090:21092 ioctl 40046207 0 returned -16
[  361.994760] binder_alloc: 21046: binder_alloc_buf, no vma
[  361.994776] binder: 21090:21092 transaction failed 29189/-3, size 0-0 line 3284
[  361.995059] binder: 21090:21092 unknown command 19212
[  361.995066] binder: 21090:21092 ioctl c0306201 200001c0 returned -22
[  361.996647] binder: 21090:21092 ioctl 54a0 0 returned -22
[  361.997473] binder: 21090:21092 BC_FREE_BUFFER uffffffffffffffff no match
[  361.997481] binder: 21090:21092 BC_INCREFS_DONE u0000000000000000 no match
[  361.997487] binder: 21090:21092 BC_FREE_BUFFER uffffffffffffffff no match
[  361.997494] binder: 21090:21092 got transaction to invalid handle
[  361.997502] binder: 21090:21092 transaction failed 29201/-22, size 72-24 line 3138
[  361.998514] binder: BINDER_SET_CONTEXT_MGR already set
[  361.998521] binder: 21090:21092 ioctl 40046207 0 returned -16
[  361.998567] binder_alloc: 21046: binder_alloc_buf, no vma
[  361.998584] binder: 21090:21093 transaction failed 29189/-3, size 0-0 line 3284
[  361.998771] binder: 21090:21093 unknown command 19212
[  361.998778] binder: 21090:21093 ioctl c0306201 200001c0 returned -22
[  361.999699] binder: 21090:21092 ioctl 54a0 0 returned -22
[  362.000317] binder: 21090:21093 BC_FREE_BUFFER uffffffffffffffff no match
[  362.000324] binder: 21090:21093 BC_INCREFS_DONE u0000000000000000 no match
[  362.000330] binder: 21090:21093 BC_FREE_BUFFER uffffffffffffffff no match
[  362.000337] binder: 21090:21093 got transaction to invalid handle
[  362.000344] binder: 21090:21093 transaction failed 29201/-22, size 72-24 line 3138
[  362.045118] binder: BINDER_SET_CONTEXT_MGR already set
[  362.045128] binder: 21095:21098 ioctl 40046207 0 returned -16
[  362.045271] binder_alloc: 21046: binder_alloc_buf, no vma
[  362.045290] binder: 21095:21098 transaction failed 29189/-3, size 0-0 line 3284
[  362.115238] binder: 21095:21107 got reply transaction with no transaction stack
[  362.115245] binder: 21095:21107 transaction failed 29201/-71, size 88-24 line 3046
[  362.395882] binder: undelivered TRANSACTION_ERROR: 29189
[  362.401477] binder: undelivered TRANSACTION_ERROR: 29189
[  362.407224] binder: undelivered TRANSACTION_ERROR: 29189
[  362.412942] binder: send failed reply for transaction 2860 to 21050:21055
[  362.420101] binder: undelivered TRANSACTION_COMPLETE
[  362.425252] binder: undelivered TRANSACTION_ERROR: 29189
[  362.430950] binder: undelivered TRANSACTION_ERROR: 29189
[  362.436424] binder: undelivered TRANSACTION_ERROR: 29201
[  362.442008] binder: undelivered TRANSACTION_ERROR: 29189
[  362.447581] binder: undelivered TRANSACTION_COMPLETE
[  362.452677] binder: undelivered TRANSACTION_ERROR: 29201
[  362.458245] binder: release 21044:21052 transaction 2850 in, still active
[  362.465173] binder: send failed reply for transaction 2850 to 21044:21052
[  362.472313] binder: undelivered TRANSACTION_COMPLETE
[  362.477450] binder: undelivered TRANSACTION_ERROR: 29189
[  362.482958] binder: undelivered TRANSACTION_ERROR: 29190
[  362.488599] binder: release 21021:21033 transaction 2847 out, still active
[  362.495636] binder: undelivered TRANSACTION_COMPLETE
[  362.500819] binder: release 21021:21033 transaction 2847 in, still active
[  362.507868] binder: send failed reply for transaction 2847, target dead
[  362.514708] binder: undelivered TRANSACTION_ERROR: 29201
[  362.520245] binder: undelivered TRANSACTION_ERROR: 29201
[  362.525810] binder: undelivered TRANSACTION_ERROR: 29189
[  362.531548] binder: undelivered TRANSACTION_ERROR: 29201
[  362.537053] binder: undelivered TRANSACTION_ERROR: 29189
[  362.542572] binder: undelivered TRANSACTION_ERROR: 29189
[  362.548145] binder: undelivered TRANSACTION_ERROR: 29189
[  362.554053] binder: release 21051:21056 transaction 2854 out, still active
[  362.561191] binder: undelivered TRANSACTION_COMPLETE
[  362.566318] binder: release 21051:21056 transaction 2854 in, still active
[  362.573267] binder: send failed reply for transaction 2854, target dead
22:42:19 executing program 2:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
write$eventfd(r0, &(0x7f0000000140)=0x800, 0x8)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c5d570607bb5a004566b1f9d3a3c00e96627aee9fb7b0cf45bd581a4d73e4832ce96bde341c"], 0x46, 0x0, 0x0})

22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x24013, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x1}, 0x10)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x40, 0x20, 0x8})

22:42:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0xb573, 0x5}, {0x10001, 0x2000000}]}, 0x14, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000ca36cf8ad541002000000428bd7000fddbdf250a0020b5030000000f0000000000000008000a7303000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x8d5a6c9754f00df5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  362.633022] binder: undelivered TRANSACTION_ERROR: 29201
[  362.633348] binder_alloc: 21061: binder_alloc_buf, no vma
[  362.633365] binder: 21061:21067 transaction failed 29189/-3, size 0-0 line 3284
[  362.652009] binder: undelivered TRANSACTION_ERROR: 29189
[  362.658254] binder: undelivered TRANSACTION_ERROR: 29189
[  362.662015] binder: 21070:21111 transaction failed 29189/-22, size 0-0 line 3138
[  362.692964] binder: undelivered TRANSACTION_ERROR: 29189
[  362.705054] binder: BINDER_SET_CONTEXT_MGR already set
[  362.705062] binder: 21114:21119 ioctl 40046207 0 returned -16
[  362.705941] binder_alloc: 21066: binder_alloc_buf, no vma
22:42:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/5})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:19 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={@fda={0x66646185, 0x1, 0x0, 0x18}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000180)}}, @enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/111, 0x0, 0x2, 0x34}, @flat=@weak_handle}, &(0x7f0000000400)}}, @request_death={0x400c630e, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/117, 0x0, 0x1, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/130, 0x0, 0x0, 0x36}, @flat=@handle={0x73682a85, 0x2001, 0x1}}, &(0x7f0000000640)}, 0x800}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x0, 0x0, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x15}}, &(0x7f0000000700)}}], 0xf2, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  362.705959] binder: 21114:21119 transaction failed 29189/-3, size 0-0 line 3284
22:42:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
connect(r0, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x2, 0x0, 0x4, 0x2, "2ede2f6a302f31b052207e7c7734d58e9909c04cdb40173cc23464cfaa93d199c8ae18cf3c1006ab0da3f7f53c9fa75a6a1eb34c24c9ce849062e6fb93b4b9", 0x25}, 0x80)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x8000, 0x1b0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@initdev, @in=@loopback}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)=<r5=>0x0)
syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/pid_for_children\x00')

22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)

[  362.714339] binder: 21118:21121 unknown command 106388748
[  362.714347] binder: 21118:21121 ioctl c0306201 20000100 returned -22
[  362.715366] binder: BINDER_SET_CONTEXT_MGR already set
22:42:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff3b, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f0000000200)="db"})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  362.715374] binder: 21118:21121 ioctl 40046207 0 returned -16
[  362.715421] binder_alloc: 21118: binder_alloc_buf, no vma
[  362.715440] binder: 21118:21124 transaction failed 29189/-3, size 0-0 line 3284
[  362.733174] binder: 21079:21128 transaction failed 29189/-22, size 0-0 line 3138
22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
personality(0x100000)

22:42:19 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f00000000c0)=[{r1, 0x1a}], 0x1, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={0x6}, 0x8)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  362.780456] binder: BINDER_SET_CONTEXT_MGR already set
[  362.780464] binder: 21130:21133 ioctl 40046207 0 returned -16
[  362.780838] binder: 21130:21133 got reply transaction with no transaction stack
[  362.780846] binder: 21130:21133 transaction failed 29201/-71, size 0-0 line 3046
[  362.780859] binder: 21130:21133 ioctl c0306201 20000440 returned -14
[  362.813218] binder: BINDER_SET_CONTEXT_MGR already set
[  362.813226] binder: 21137:21141 ioctl 40046207 0 returned -16
[  362.813505] binder_alloc: 21116: binder_alloc_buf, no vma
[  362.813523] binder: 21137:21141 transaction failed 29189/-3, size 0-0 line 3284
[  362.831177] binder: 21130:21148 got reply transaction with no transaction stack
[  362.831185] binder: 21130:21148 transaction failed 29201/-71, size 0-0 line 3046
[  362.832910] binder: 21095:21147 got transaction with invalid fd, 5
[  362.832934] binder: 21095:21147 transaction failed 29201/-9, size 88-24 line 3427
[  362.832941] binder: send failed reply for transaction 2892 to 21095:21147
[  362.851509] binder: BINDER_SET_CONTEXT_MGR already set
[  362.851517] binder: 21152:21154 ioctl 40046207 0 returned -16
[  362.851601] binder_alloc: 21131: binder_alloc_buf, no vma
[  362.851619] binder: 21152:21154 transaction failed 29189/-3, size 0-0 line 3284
[  362.884673] binder: BINDER_SET_CONTEXT_MGR already set
[  362.884682] binder: 21153:21158 ioctl 40046207 0 returned -16
[  362.884793] binder_alloc: 21095: binder_alloc_buf, no vma
[  362.884812] binder: 21153:21158 transaction failed 29189/-3, size 0-0 line 3284
[  362.934968] binder: 21153:21167 got reply transaction with no transaction stack
[  362.934982] binder: 21153:21167 transaction failed 29201/-71, size 88-24 line 3046
[  363.042138] binder: undelivered TRANSACTION_COMPLETE
[  363.047402] binder: undelivered TRANSACTION_ERROR: 29201
[  363.052887] binder: undelivered TRANSACTION_ERROR: 29190
[  363.058521] binder: undelivered TRANSACTION_ERROR: 29201
[  363.064010] binder: undelivered TRANSACTION_ERROR: 29189
[  363.069592] binder: release 21131:21142 transaction 2889 out, still active
[  363.076601] binder: undelivered TRANSACTION_COMPLETE
[  363.081818] binder: release 21131:21132 transaction 2888 in, still active
[  363.088782] binder: send failed reply for transaction 2888 to 21131:21132
[  363.095889] binder: send failed reply for transaction 2889, target dead
[  363.102740] binder: undelivered TRANSACTION_COMPLETE
[  363.107888] binder: undelivered TRANSACTION_ERROR: 29189
[  363.113486] binder: release 21116:21120 transaction 2885 out, still active
[  363.120538] binder: undelivered TRANSACTION_COMPLETE
[  363.125668] binder: undelivered TRANSACTION_ERROR: 29189
[  363.131195] binder: release 21116:21120 transaction 2883 in, still active
[  363.138162] binder: send failed reply for transaction 2883 to 21116:21120
[  363.145143] binder: send failed reply for transaction 2885, target dead
[  363.152089] binder: undelivered TRANSACTION_COMPLETE
[  363.157257] binder: undelivered TRANSACTION_ERROR: 29189
[  363.162813] binder: undelivered TRANSACTION_ERROR: 29189
[  363.168339] binder: undelivered TRANSACTION_ERROR: 29189
[  363.173857] binder: release 21118:21121 transaction 2880 out, still active
[  363.180897] binder: undelivered TRANSACTION_COMPLETE
[  363.186281] binder: release 21118:21121 transaction 2880 in, still active
[  363.193224] binder: send failed reply for transaction 2880, target dead
[  363.200148] binder: release 21066:21109 transaction 2877 in, still active
[  363.207094] binder: send failed reply for transaction 2877 to 21066:21109
[  363.214071] binder: undelivered TRANSACTION_COMPLETE
[  363.219217] binder: undelivered TRANSACTION_ERROR: 29189
[  363.224755] binder: undelivered TRANSACTION_ERROR: 29189
[  363.230305] binder: undelivered TRANSACTION_ERROR: 29189
22:42:19 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="00000000887fc200000000")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = openat(r3, &(0x7f0000000100)='./file0\x00', 0x40, 0x81)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r5, &(0x7f0000000680)=""/156)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x68, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10084800}, 0x40000800)
getrandom(&(0x7f0000000480)=""/197, 0xfffffffffffffe6a, 0x3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[], 0x6c7a62660a6be252, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$TIOCNXCL(r7, 0x540d)

[  363.501197] binder: undelivered TRANSACTION_ERROR: 29189
[  363.508517] binder: 21114:21169 transaction failed 29189/-22, size 0-0 line 3138
[  363.516758] binder: undelivered TRANSACTION_ERROR: 29189
22:42:20 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40000, 0x0)

22:42:20 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="a9dff4039a7221ec913808552fe4c342ecb43ebba1c267630d80263724a690ea88c7bed9cb17dd70b24e90237dd65f92115e25f201161763bcffd14d99271350189f30f251322d1f073ff6db8808300cd4bc6cbad4c844e31b5c97f3b29489868ec035c2de959918a008196e33e91cfd92dfb756b37509c6bf03b8c77db8c8febd0711e83d12fe8ea0b610a6faa2fd3f41f7a8ab2d3b4b1b9e97aac38f496bc90b6986436ce36ea306a14bed9c366434b530583798104077c03362b3da42be52a3ba2d4a0ec98e71dc569a4a4fe81231d7c8e2121b6509bd86ccd2defac5097e333d397cf179665b68852cc22febc238014aa36084eddd5ee1ba7698e23c70277e40016e6430378889e506738d84c90a17f66e6652bd2bda75e16e1930bf8b6f8f8693c064c007bb604d865c92d10b05e6ec8fd6e1e992f5d56140a6a14adb0232e860c8a5a89e8be4531810a8a3a541db92aed4b2fde89e7d0cf9283bdb2ea07f7a4a1befc0a1751ce30d18f0f046b9063094d9dd5fbadf"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  363.544591] binder: 21171:21172 unknown command 0
[  363.549779] binder: 21171:21172 ioctl c0306201 20000440 returned -22
[  363.557838] binder: 21171:21172 unknown command 5
[  363.562948] binder: 21171:21172 ioctl c0306201 200001c0 returned -22
[  363.563977] binder: undelivered TRANSACTION_ERROR: 29201
[  363.564418] binder: 21130:21174 got reply transaction with no transaction stack
[  363.564426] binder: 21130:21174 transaction failed 29201/-71, size 0-0 line 3046
22:42:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:20 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xffffff83, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, <r2=>0x0}, &(0x7f0000000180)=0xc)
quotactl(0x7, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000200)="4a1abf61d810d899a21a08ae1b025a8dd8b9aea8f24d202e788eaa008ba5bfa7d355567b39df0fba9517675d4882b5c75825bfceab402d1cc6cbfaf9dcb0c3aaf5e17ac0536392fcba89d39461320b311b763e64e9c84bf3277c88e1553c4fccbd4df3bf503d141926fccf9859186055131e13d195eeaa0b77c1ce7ad86b45d2")

[  363.564439] binder: 21130:21174 ioctl c0306201 20000440 returned -14
[  363.570931] binder: undelivered TRANSACTION_ERROR: 29201
[  363.570980] binder: undelivered TRANSACTION_ERROR: 29201
[  363.589272] binder: undelivered TRANSACTION_COMPLETE
[  363.589387] binder: undelivered TRANSACTION_COMPLETE
22:42:20 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c63d000"], 0xcb, 0x0, &(0x7f0000000480)="0e3e6c860b9db77adf2ca32731ed97f6b99f8cfa383222e506e14bcc9bb481cbc52e273b0f4061a9951029764833cba0fc2f85b66b47b5b01cfde9cc47a6aeb87401d13cb19fceb2d937abb6c6cfe633c78e87b699449f762f3ec2c833b54f7772b66d83a828af6add745002ecdb9a86546008000024d08f0daab5643d36547c40d06ae8380bc3f85ea4ebb728b053295de20b27c3240010020dec5064de8437d20daf810edc4adddac2967572a9c05400a12a93a6817d9dd88581ffff8644e58f06574870f740ac13581d"})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  363.589396] binder: undelivered transaction 2904, process died.
[  363.590042] binder: 21175:21176 got reply transaction with no transaction stack
[  363.590050] binder: 21175:21176 transaction failed 29201/-71, size 0-0 line 3046
[  363.593572] binder: undelivered TRANSACTION_ERROR: 29189
[  363.594869] binder: undelivered TRANSACTION_ERROR: 29201
22:42:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r4 = dup3(r3, r2, 0x100000)
ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0xd2d4, 0x1, 0x0, 0x6, 0xe, 0x2, 0x4, 0x8000003ff, 0x81, 0x2e5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
write$FUSE_OPEN(r5, &(0x7f0000000100)={0x20, 0x0, 0x1}, 0x20)

22:42:20 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0x0, 0x4, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xc8140, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100), 0xffffffffffffff7e, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r3, &(0x7f0000000680)=""/156)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x3f, @link='broadcast-link\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x2000000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f1<\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
fallocate(r0, 0x41, 0x3, 0x8)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@rand_addr=0x1000, @local}, 0x8)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  363.594881] binder: release 21175:21178 transaction 2906 in, still active
[  363.594887] binder: send failed reply for transaction 2906 to 21175:21178
[  363.594970] binder: undelivered TRANSACTION_COMPLETE
22:42:20 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x5e2, 0x87, 0x100, 0x1, 0x8, 0x7567afb5532550b7, 0x6, 0x200, 0x351, 0x40, 0x1f4, 0x7f, 0xbb, 0x38, 0x1, 0x2, 0x9, 0x1}, [{0x6474e550, 0x0, 0x23, 0x7, 0x8, 0x4, 0x1f, 0xb001}], "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", [[], [], [], [], []]}, 0x1578)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  363.594976] binder: undelivered TRANSACTION_ERROR: 29189
[  363.595436] binder: release 21137:21155 transaction 2909 out, still active
[  363.595440] binder: undelivered TRANSACTION_COMPLETE
[  363.598982] binder: release 21137:21141 transaction 2909 in, still active
[  363.598987] binder: send failed reply for transaction 2909, target dead
[  363.622932] binder: 21182:21183 transaction failed 29189/-22, size 0-0 line 3138
[  363.623214] binder: 21182:21183 unknown command 66379689
[  363.623221] binder: 21182:21183 ioctl c0306201 200001c0 returned -22
[  363.623279] binder: 21182:21183 got reply transaction with no transaction stack
[  363.623285] binder: 21182:21183 transaction failed 29201/-71, size 0-0 line 3046
[  363.624142] binder: undelivered TRANSACTION_ERROR: 29201
[  363.624240] binder: undelivered TRANSACTION_ERROR: 29189
[  363.624342] binder: 21182:21183 transaction failed 29189/-22, size 0-0 line 3138
[  363.624611] binder: 21182:21183 unknown command 66379689
[  363.624618] binder: 21182:21183 ioctl c0306201 200001c0 returned -22
[  363.624646] binder: 21182:21184 got reply transaction with no transaction stack
[  363.624652] binder: 21182:21184 transaction failed 29201/-71, size 0-0 line 3046
[  363.630396] binder: undelivered TRANSACTION_ERROR: 29201
[  363.630462] binder: undelivered TRANSACTION_ERROR: 29189
[  363.644439] binder: 21187:21188 unknown command 0
[  363.644446] binder: 21187:21188 ioctl c0306201 20000080 returned -22
[  363.647517] binder: undelivered TRANSACTION_COMPLETE
[  363.647635] binder: undelivered TRANSACTION_COMPLETE
[  363.647643] binder: undelivered transaction 2917, process died.
[  363.648226] binder: 21187:21188 got reply transaction with no transaction stack
[  363.648233] binder: 21187:21188 transaction failed 29201/-71, size 0-0 line 3046
[  363.651491] binder: undelivered TRANSACTION_ERROR: 29189
[  363.653525] binder: undelivered TRANSACTION_ERROR: 29201
[  363.653537] binder: release 21187:21189 transaction 2919 in, still active
[  363.653544] binder: send failed reply for transaction 2919 to 21187:21189
[  363.653670] binder: undelivered TRANSACTION_COMPLETE
[  363.653677] binder: undelivered TRANSACTION_ERROR: 29189
[  363.668438] binder: undelivered TRANSACTION_ERROR: 29201
[  363.668466] binder: undelivered TRANSACTION_ERROR: 29189
[  363.669367] binder: 21153:21167 got reply transaction with no transaction stack
[  363.669377] binder: 21153:21167 transaction failed 29201/-71, size 88-24 line 3046
[  363.673300] binder: undelivered TRANSACTION_ERROR: 29201
[  363.673320] binder: send failed reply for transaction 2922 to 21153:21167
[  363.673404] binder: undelivered TRANSACTION_COMPLETE
[  363.673411] binder: undelivered TRANSACTION_ERROR: 29189
[  363.673605] binder_alloc: 21152: binder_alloc_buf, no vma
[  363.673631] binder: 21152:21193 transaction failed 29189/-3, size 0-0 line 3284
[  363.689341] binder: 21192:21195 got reply transaction with no transaction stack
[  363.689351] binder: 21192:21195 transaction failed 29201/-71, size 72-24 line 3046
[  363.689432] binder: 21192:21195 got reply transaction with no transaction stack
[  363.689440] binder: 21192:21195 transaction failed 29201/-71, size 0-0 line 3046
[  363.696300] binder: undelivered TRANSACTION_ERROR: 29201
[  363.696323] binder: send failed reply for transaction 2927 to 21192:21195
[  363.696677] binder: undelivered TRANSACTION_COMPLETE
[  363.696684] binder: undelivered TRANSACTION_ERROR: 29189
[  363.702764] binder: 21194:21197 unknown command 13656844
[  363.702773] binder: 21194:21197 ioctl c0306201 200001c0 returned -22
[  363.703870] binder: 21194:21197 got reply transaction with no transaction stack
[  363.703878] binder: 21194:21197 transaction failed 29201/-71, size 88-24 line 3046
[  363.705110] binder: undelivered TRANSACTION_ERROR: 29201
[  363.705129] binder: send failed reply for transaction 2931 to 21194:21197
[  363.705238] binder: undelivered TRANSACTION_COMPLETE
[  363.705244] binder: undelivered TRANSACTION_ERROR: 29189
[  363.705625] binder: 21194:21199 unknown command 13656844
[  363.705632] binder: 21194:21199 ioctl c0306201 200001c0 returned -22
[  363.706372] binder: 21194:21199 got reply transaction with no transaction stack
[  363.706379] binder: 21194:21199 transaction failed 29201/-71, size 88-24 line 3046
[  363.710371] binder: 21192:21195 got reply transaction with no transaction stack
[  363.710378] binder: 21192:21195 transaction failed 29201/-71, size 72-24 line 3046
[  363.711185] binder: undelivered TRANSACTION_ERROR: 29201
[  363.711203] binder: send failed reply for transaction 2936 to 21194:21199
[  363.711271] binder: undelivered TRANSACTION_COMPLETE
[  363.711276] binder: undelivered TRANSACTION_ERROR: 29189
[  363.717388] binder: 21192:21198 got reply transaction with no transaction stack
[  363.717397] binder: 21192:21198 transaction failed 29201/-71, size 0-0 line 3046
[  363.722051] binder: undelivered TRANSACTION_ERROR: 29201
[  363.722073] binder: send failed reply for transaction 2933 to 21192:21198
[  363.725892] binder: undelivered TRANSACTION_ERROR: 29189
[  363.733939] binder: undelivered TRANSACTION_COMPLETE
[  363.733951] binder: undelivered TRANSACTION_ERROR: 29189
[  363.780569] binder: 21209:21213 unknown command 0
[  363.780578] binder: 21209:21213 ioctl c0306201 200001c0 returned -22
[  363.780658] binder: 21209:21213 got reply transaction with no transaction stack
[  363.780667] binder: 21209:21213 transaction failed 29201/-71, size 0-0 line 3046
[  363.794213] binder: 21204:21207 unknown command 3944716
[  363.794222] binder: 21204:21207 ioctl c0306201 200001c0 returned -22
[  363.794995] binder: 21204:21207 got reply transaction with no transaction stack
[  363.795005] binder: 21204:21207 transaction failed 29201/-71, size 88-24 line 3046
[  363.797556] binder: BINDER_SET_CONTEXT_MGR already set
[  363.797565] binder: 21209:21215 ioctl 40046207 0 returned -16
[  363.797728] binder_alloc: 21209: binder_alloc_buf, no vma
[  363.797746] binder: 21209:21215 transaction failed 29189/-3, size 0-0 line 3284
[  363.798066] binder: 21209:21215 unknown command 0
[  363.798072] binder: 21209:21215 ioctl c0306201 200001c0 returned -22
[  363.798633] binder: BINDER_SET_CONTEXT_MGR already set
[  363.798642] binder: 21206:21208 ioctl 40046207 0 returned -16
[  363.807240] binder: undelivered TRANSACTION_ERROR: 29189
[  363.807301] binder: release 21206:21208 transaction 2944 in, still active
[  363.807308] binder: send failed reply for transaction 2944 to 21206:21208
[  363.807351] binder: undelivered TRANSACTION_COMPLETE
[  363.807357] binder: undelivered TRANSACTION_ERROR: 29189
[  363.807391] binder: release 21209:21213 transaction 2942 out, still active
[  363.807394] binder: undelivered TRANSACTION_COMPLETE
[  363.807423] binder: undelivered TRANSACTION_ERROR: 29201
[  363.807436] binder: send failed reply for transaction 2942, target dead
[  363.809172] binder: undelivered TRANSACTION_ERROR: 29201
[  363.809192] binder: send failed reply for transaction 2946 to 21204:21207
[  363.809325] binder: undelivered TRANSACTION_COMPLETE
[  363.809332] binder: undelivered TRANSACTION_ERROR: 29189
[  363.817118] binder: 21206:21216 transaction failed 29189/-22, size 0-0 line 3138
[  363.837669] binder: undelivered TRANSACTION_ERROR: 29189
[  363.838363] binder: 21204:21218 unknown command 3944716
[  363.838370] binder: 21204:21218 ioctl c0306201 200001c0 returned -22
[  363.838928] binder: 21204:21218 got reply transaction with no transaction stack
[  363.838942] binder: 21204:21218 transaction failed 29201/-71, size 88-24 line 3046
[  363.842754] binder: undelivered TRANSACTION_ERROR: 29201
[  363.842771] binder: send failed reply for transaction 2951 to 21204:21218
[  363.842839] binder: undelivered TRANSACTION_COMPLETE
[  363.842845] binder: undelivered TRANSACTION_ERROR: 29189
[  364.338603] binder: BINDER_SET_CONTEXT_MGR already set
22:42:21 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000080)=[{}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8)
r0 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0)

22:42:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f0000000800)={'broute\x00', 0x0, 0x4, 0x2d, [], 0x3, &(0x7f0000000780)=[{}, {}, {}], &(0x7f00000007c0)=""/45}, &(0x7f0000000880)=0x78)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f00000000c0)={0x2})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
stat(&(0x7f0000000640)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
mount$bpf(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='bpf\x00', 0x2100850, &(0x7f0000000480)=ANY=[@ANYBLOB="6d6f64653d30313737373737373737373737373737373737373737312c6d6f08000000000000003030413030303030303030303030303030332d6d6f64653d30303030303030303030303030303030303030303030352c6d6f64653d3030303030303030303030303030303030303030c4c1f5c6f50b3036312c6d6f64653d30303030303030303030303030303030303030323030312c736d61636b6673726f6f743d", @ANYRESDEC=r4, @ANYBLOB=',\x00'])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
setxattr$security_smack_entry(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)='security.SMACK64\x00', &(0x7f00000005c0)='/dev/binder#\x00', 0xd, 0x1)
symlink(&(0x7f0000000380)='./bus\x00', &(0x7f0000000600)='./bus\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x16, 0x0, &(0x7f0000000680)="2d4e05942e9a0a22c97f9d58f886ffb73edd8033b84e"})
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
prctl$PR_SET_ENDIAN(0x14, 0x0)
r6 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$describe(0x6, r6, &(0x7f0000000740)=""/45, 0x2d)

22:42:21 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000180)=@hopopts={0x1, 0x4, [], [@jumbo={0xc2, 0x4, 0x4601}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x5}]}, 0x30)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000fccd3a6316f38f3d000000000300000000000000000000000000ed61c89fc340a536a90e769263bc00"/82], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = accept$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r6, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r10, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r11, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000900)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@empty}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8)
getresuid(&(0x7f00000004c0)=<r13=>0x0, &(0x7f0000000500), &(0x7f0000000540))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r15=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r15, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r16=>0xffffffffffffffff})
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r17=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r17, 0x0)
r18 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r19 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r19, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r19, 0x80284504, &(0x7f0000000200)=""/192)
r20 = dup2(r18, r19)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r20, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r21, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r22 = getegid()
lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
r24 = getegid()
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0})
getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=<r26=>0x0)
r27 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r28 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r28, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r28, 0x80284504, &(0x7f0000000200)=""/192)
r29 = dup2(r27, r28)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r30=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r29, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r30, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
fsetxattr$system_posix_acl(r4, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x4}, [{0x2, 0x5, r6}, {0x2, 0x4, r8}, {0x2, 0x1, r10}, {0x2, 0x2, r12}, {0x2, 0x1, r13}, {0x2, 0x3, r15}, {0x2, 0xc62f8b61aebe0cd8, r17}], {0x4, 0x2}, [{0x8, 0x0, 0xee00}, {0x8, 0x2, r21}, {0x8, 0x6}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r22}, {0x8, 0x7, r23}, {0x8, 0x4, r24}, {0x8, 0x0, r25}, {0x8, 0x2, r26}, {0x8, 0x3, r30}], {0x10, 0x1}, {0x20, 0x4}}, 0xac, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = dup3(r1, r2, 0x180000)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x18, 0x32, 0x53b7de228b7fefd2, 0x70bd29, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4881)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xe7f4c0eba08960ba, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x8, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
accept(r4, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x80)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = fcntl$dupfd(r0, 0x406, r3)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
ioctl$RTC_UIE_ON(r5, 0x7003)
tkill(r6, 0x38)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r6, 0x0, 0x0)
capget(&(0x7f0000000280)={0x0, r6}, &(0x7f00000002c0)={0x100, 0x100000000, 0x80000001, 0xffffffffffffffff, 0x2, 0x2})
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000080)={0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffd1c, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f00000007c0)='=dev/binddr#\x00', 0x0, 0x2)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000140))
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000780)={&(0x7f0000000380), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb0, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9db}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x1a1, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @ipv4={[], [], @local}, 0xfff}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x38)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={<r8=>0x0, r4, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30)
r9 = syz_open_procfs(r8, &(0x7f00000003c0)='\bO-\xca\x16\xcb\xb0iVd_map\x00')
getdents(r9, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000200)=""/144)
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)=0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000480)="70bb8c562afd55d1e2210b674786234a396acfd06cd39dea73540d3ddb33aa6a78d4b1385287681b8ca28396907703c8efc920f519971b4d5ccbdf6664c542c4cb69db9c8381a5275e0d5e1fdc5787f2d7566b80d95b528e4fdb74314174b66a7d603ef91c0b2cdc6fc5e2e152de7665be98db873a90bd00dc9f0e0d69d13814f0d1f47faea7c47ab6eb37c8d878f1545753897dc23a6731a20db273154ed99a19a310f3bebb5f0d40a8c205164ab460bb2ee9e3ae100273338e56ace81cea15f58a1dcd05e2", 0xc6)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0c63000076ec367e2136604ae075bfa6b29466a3a41dc2e0ddaac1167484cfafe3d7a7ebbb834d7010730cda45276a61f442980202dc575cde87465d8333cb32189e27960c82594795f937418060c6f9d0e37d1dd923c984d61974ca45108a010156f4d175c148bdab00d1436c441a667e80331630886e9ead71cd3e9bd6b547dd114e932fa4dd2a293cd9150695214b2c2dbd12fc9f532148aa35bcd12e85983e7e9b7c15aa40886e13777f1e4566e44615657f38b3b153b6ec670329755655df0b16e20c9c6fd7"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  364.338611] binder: 21171:21179 ioctl 40046207 0 returned -16
[  364.340191] binder: 21171:21228 unknown command 0
[  364.340201] binder: 21171:21228 ioctl c0306201 20000440 returned -22
[  364.340231] binder: 21171:21230 unknown command 5
[  364.340241] binder: 21171:21230 ioctl c0306201 200001c0 returned -22
22:42:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x800006, 0x110, r1, 0x0)
socket$inet(0x2, 0x80006, 0x8)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x203, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = fcntl$dupfd(r2, 0x406, r4)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f00000001c0))
ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x800, 0x9000000000000000})
fcntl$setflags(r0, 0x2, 0x1)
getsockopt$netlink(r5, 0x10e, 0x16, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2)

22:42:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
set_thread_area(&(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x4000, 0xffffffff00000000, 0x3, 0x80000000, 0x2fc, 0x7, 0x1b82, 0x6})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x10000, 0x0)
ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140))
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xc8, 0x80, 0x0, 0x12, 0x6, 0x8, "01ee8881eb21dc79c1e8031c1302fdc65839892f3b0671aec12e5438de0114abf897c7fdf27048f66c904e7a378e02166a3a0fa5d3c69d7431971da813f374aa", "ea2264b448c069581a6d9eaffc2662c8cf16da5d036cc084477e52c75fcb0262f19adce1275a6b511323dd28b3ca8c737b4ffa1e25fdd78ef3cd233f80abf026", "27110951895d9f1506b695db57e543b416aacac5106243cedfa3803f7fbaeacf", [0x1, 0x101]})
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x3d, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000ff05fbe529b7b99cc66911f43afaf5960000000000efffffff2a0000006b39d9fe32dd12c092880e30f71df3d30000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000340))

[  364.608730] binder: 21236:21241 got reply transaction with no transaction stack
[  364.613730] binder_alloc: 21235: binder_alloc_buf size 7056296191159435272 failed, no address space
[  364.613737] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
22:42:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x8000, @empty}, 0x10)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
munlock(&(0x7f0000001000/0x2000)=nil, 0x2000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040e1ff00000000000000000000000000ca55320041dd0000000000000000000000000000000100"/54], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\fk\x00\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x10)

[  364.613754] binder: 21235:21245 transaction failed 29201/-28, size 3-7056296191159435264 line 3284
[  364.618233] binder_alloc: 21237: binder_alloc_buf, no vma
[  364.618250] binder: 21237:21239 transaction failed 29189/-3, size 0-0 line 3284
22:42:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x100000001, 0x1, 0x7, 0xffffffff, 0xfff}, 0xc)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r3, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8884}, 0x1)
creat(&(0x7f0000000180)='./file0\x00', 0x144)

22:42:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e1d02baa"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
accept$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e)

22:42:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3)
ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  364.640392] binder_alloc: 21246: binder_alloc_buf, no vma
[  364.640412] binder: 21246:21247 transaction failed 29189/-3, size 0-0 line 3284
[  364.652059] binder: undelivered TRANSACTION_ERROR: 29189
[  364.690760] binder: 21254:21257 transaction failed 29201/-28, size 7710162562779709439--7872271407390992071 line 3284
[  364.700631] binder: 21235:21265 got reply transaction with no transaction stack
22:42:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="b8d769274a94c415f08da67a6d8ba1ad0a9df809caed67b53b0e9c0a11d63c0526ea40478cb624bdc1dc32f362cef4ef1e6b90994fe0b00a13ec0cb5059c60f7929dfcb618d98877dc", 0x49, 0xfffffffffffffff8)
r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="57d04f7b58c8fd2fcc37014a6d1250cd1cfaa2c4040e81f9e95462ac61bcfc6a92d31f29111f5722782d4315d762df798bd4dcaf4f6889daf6fc335912ed197073f2ec483c440a26bd09dc9212e0937cb8290980af8e1f078b9b61dac9395a45b173360442a06e1f0e452a2ac85dcdb772f2a7608a9dde6b69c56182648fe586be643a77defcbb834157291e76f4aa21d752e8", 0x93, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000280)={0x0, r1, r2}, &(0x7f00000002c0)=""/58, 0x3a, &(0x7f00000003c0)={&(0x7f0000000300)={'rmd256\x00'}, &(0x7f0000000340)="c9c1362e8a0706bbe41358a853cba3f4c3382565ca4c34a55996b06ffd4f1897a56ce191194a7b1aa13beb0b6e78d0bfc54b944c193737e60d80959957b3126991390ca20888772e8f30e8943cdd1a25115ed958f5305aac040e0c58fde9a2b57037f9", 0x63})
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  364.700640] binder: 21235:21265 transaction failed 29201/-71, size 0-0 line 3046
[  364.706331] binder: 21261:21264 got transaction to invalid handle
[  364.706348] binder: 21261:21264 transaction failed 29201/-22, size 4294967296-0 line 3138
[  364.706421] binder: 21261:21264 unknown command 27404
[  364.706429] binder: 21261:21264 ioctl c0306201 200001c0 returned -22
[  364.706751] binder: undelivered TRANSACTION_ERROR: 29201
[  364.714881] binder: 21261:21270 got transaction to invalid handle
[  364.714891] binder: 21261:21270 transaction failed 29201/-22, size 4294967296-0 line 3138
[  364.714925] binder: 21261:21271 unknown command 27404
[  364.714932] binder: 21261:21271 ioctl c0306201 200001c0 returned -22
[  364.715238] binder: undelivered TRANSACTION_ERROR: 29201
[  364.750599] binder: 21276:21279 unknown command -1439969055
[  364.750606] binder: 21276:21279 ioctl c0306201 200001c0 returned -22
[  364.751513] binder: release 21276:21279 transaction 2969 out, still active
[  364.751549] binder: undelivered TRANSACTION_COMPLETE
[  364.752587] binder: send failed reply for transaction 2969, target dead
[  364.753067] binder: 21276:21279 unknown command -1439969055
[  364.753074] binder: 21276:21279 ioctl c0306201 200001c0 returned -22
[  364.753646] binder: release 21276:21280 transaction 2971 out, still active
[  364.753650] binder: undelivered TRANSACTION_COMPLETE
[  364.757806] binder: send failed reply for transaction 2971, target dead
[  364.785593] binder: release 21281:21283 transaction 2973 out, still active
[  364.785598] binder: undelivered TRANSACTION_COMPLETE
[  364.798874] binder: release 21281:21285 transaction 2974 out, still active
[  364.798878] binder: undelivered TRANSACTION_COMPLETE
[  364.802220] binder: release 21281:21283 transaction 2973 in, still active
[  364.802226] binder: send failed reply for transaction 2973, target dead
[  364.802247] binder: send failed reply for transaction 2974, target dead
[  364.964474] binder: 21236:21241 transaction failed 29201/-71, size 88-24 line 3046
[  364.975216] binder: BINDER_SET_CONTEXT_MGR already set
[  364.980609] binder: 21236:21252 ioctl 40046207 0 returned -16
[  364.980647] binder_alloc: 21236: binder_alloc_buf, no vma
[  364.980673] binder: 21236:21293 transaction failed 29189/-3, size 0-0 line 3284
[  364.980992] binder: release 21236:21241 transaction 2954 out, still active
[  364.980996] binder: undelivered TRANSACTION_COMPLETE
22:42:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="00000000000000000000000085616466000000000000000000000000000000000000000000000000000000008561646600"/76], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB="0000000000000000e87c1a857bfeff89a2eb063e71b7e4b847263512ff232bb10c8c214bdc41b01bd5a12c66d2de2cba1295b56555c5e841cfff4b09000000a5bb0000001febd9d4d388ade36556d97d4b4f5b0ab54b1710dbbda60ed9c7474191c5a3d6efe55e0fa9a414c3747147cf9a4dea500f8b6800000000000000"], 0x0, 0x0, 0x0})

[  364.981866] binder: 21236:21293 got reply transaction with no transaction stack
[  364.981873] binder: 21236:21293 transaction failed 29201/-71, size 88-24 line 3046
[  365.027799] binder: undelivered TRANSACTION_ERROR: 29201
[  365.035721] binder: undelivered TRANSACTION_ERROR: 29201
[  365.041321] binder: send failed reply for transaction 2954, target dead
[  365.051185] binder: undelivered TRANSACTION_ERROR: 29189
[  365.060438] binder: 21294:21295 got transaction with invalid parent offset or type
[  365.068274] binder: 21294:21295 transaction failed 29201/-22, size 88-24 line 3454
[  365.076227] binder: send failed reply for transaction 2978 to 21294:21295
[  365.084969] binder: undelivered TRANSACTION_ERROR: 29190
[  365.087807] binder: 21294:21297 transaction failed 29189/-22, size 0-0 line 3138
[  365.097252] binder: 21294:21297 got reply transaction with no transaction stack
[  365.097260] binder: 21294:21297 transaction failed 29201/-71, size 88-24 line 3046
[  365.116478] binder: undelivered TRANSACTION_ERROR: 29189
[  365.122362] binder: undelivered TRANSACTION_ERROR: 29201
[  365.128121] binder: undelivered TRANSACTION_COMPLETE
[  365.133399] binder: undelivered TRANSACTION_ERROR: 29201
22:42:21 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
syz_open_procfs$namespace(r2, &(0x7f00000003c0)='hL\n\x9d\x9b\xcb\xca\x86E\x04\x00\xfe\xff\x00\x00\x00\x000\nsx\xbc\xed\xfdLi\x01\x00\x00\x00\x01\x00\x00\x94f\x1c\x00m')
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000180)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', r5})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x800, 0x0)

[  365.400226] binder: undelivered TRANSACTION_ERROR: 29189
[  365.407405] binder_alloc: 21237: binder_alloc_buf, no vma
[  365.413106] binder: 21237:21300 transaction failed 29189/-3, size 0-0 line 3284
[  365.414179] binder: undelivered TRANSACTION_ERROR: 29201
[  365.414291] binder: undelivered TRANSACTION_ERROR: 29201
[  365.414732] binder: 21235:21265 transaction failed 29189/-22, size 3-7056296191159435264 line 3138
[  365.426121] binder: undelivered TRANSACTION_ERROR: 29189
22:42:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x1b)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:21 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
fgetxattr(r1, &(0x7f0000000240)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/78, 0x4e)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = fcntl$getown(r0, 0x9)
sched_setattr(r3, &(0x7f0000000480)={0x30, 0x6, 0x0, 0xfffffffffffffffc, 0x4e5, 0x1, 0x0, 0xbbe}, 0x0)
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r4, &(0x7f0000000680)=""/156)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r5, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000b08bfac5c5427a83c12a48745cbfaa7255f66042dc37908b3b3b5ead6691e719e760232e247d87eab3769c8a150260f3d0bb1c785b3ef6b2524d945e6fc327bab676727fe204a6372194009a43d0611a384095e74dfa47afa3566634da5a8d051f77e4c9a0a92b3c576febf9e5cf109fcd3d92d487db5a89c923a70f"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = request_key(&(0x7f0000000bc0)='\xd2\x04!\xb3user\x00\x98!\xc5P\x88w\x89\xe7h\xd8\xda\xa2\xa5\xb5Q f\x8c\xcf\x8e\xa8\xc4w\x9b\xed\xa1\x16p\xdbP\\t}\xc9Ik]\x84\x80!\x89\x93\x13EMR\xd0\x04\xac\xe2qb\xdc\xec\x9dI\xd0\xaf\x1b\xdb\xadO\x8f\x96\x8bg\'x\x1b\xf3\x03\xe9\x1f\x87\xce\xab\x05\xdaF\xaa6~Bc\x14\xe4\xec\xfb\x81\xd1-\xd6\xaf>\x10*\xd1\x1a\xc5\xb0e\x1b\x88k\xa4c\x7fs_y\x1a?\x9a]Wh\x9a\xe4\xa0f\bhe\x9f\x0fx\xa1B\xfb\x8dw\xc5\xda8\xec\xcbg\xfa\xe4\xde\xf5\x8f\x0f4E\xceB\x14|\xbf\x99\xd5[V\x85z\x90\xf1\xd7\xda\xd3Xa\xc0\xffj\xd3s\xa2\xdf\xc6\x8aP\xc1\x91\xda\x91\xc4\xb1\xbf\x87\xa2\xb1\xf2o\x96\t\x99d%>$\xd4\x0e\xde\x89\xc7\xf3\xd4^>\"\xd8\x9f\xcb\x8a\x1dmA\xea\xb0\xd6\xc0\xa8\xfa\x9d\xf4 \x15\xa6\xa6\xff\xbf\xb1\xae\xfc\xf6\xb9\\m*\xc7\x1a{)n', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd)
add_key$user(&(0x7f0000000ec0)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000500), 0x0, r6)
r7 = request_key(&(0x7f0000000bc0)='\xd2\x04!\xb3user\x00\x98!\xc5P\x88w\x89\xe7h\xd8\xda\xa2\xa5\xb5Q f\x8c\xcf\x8e\xa8\xc4w\x9b\xed\xa1\x16p\xdbP\\t}\xc9Ik]\x84\x80!\x89\x93\x13EMR\xd0\x04\xac\xe2qb\xdc\xec\x9dI\xd0\xaf\x1b\xdb\xadO\x8f\x96\x8bg\'x\x1b\xf3\x03\xe9\x1f\x87\xce\xab\x05\xdaF\xaa6~Bc\x14\xe4\xec\xfb\x81\xd1-\xd6\xaf>\x10*\xd1\x1a\xc5\xb0e\x1b\x88k\xa4c\x7fs_y\x1a?\x9a]Wh\x9a\xe4\xa0f\bhe\x9f\x0fx\xa1B\xfb\x8dw\xc5\xda8\xec\xcbg\xfa\xe4\xde\xf5\x8f\x0f4E\xceB\x14|\xbf\x99\xd5[V\x85z\x90\xf1\xd7\xda\xd3Xa\xc0\xffj\xd3s\xa2\xdf\xc6\x8aP\xc1\x91\xda\x91\xc4\xb1\xbf\x87\xa2\xb1\xf2o\x96\t\x99d%>$\xd4\x0e\xde\x89\xc7\xf3\xd4^>\"\xd8\x9f\xcb\x8a\x1dmA\xea\xb0\xd6\xc0\xa8\xfa\x9d\xf4 \x15\xa6\xa6\xff\xbf\xb1\xae\xfc\xf6\xb9\\m*\xc7\x1a{)n', &(0x7f0000000e40)={'syz', 0x3}, &(0x7f0000000e80)='wlan0]\'\x00', 0xfffffffffffffffd)
add_key$user(&(0x7f0000000ec0)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000500), 0x0, r7)
r8 = request_key(&(0x7f0000000540)='blacklist\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='trusted.syz\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000600)={r6, r7, r8}, &(0x7f0000000840)=""/4096, 0x1000, &(0x7f00000018c0)={&(0x7f0000000640)={'streebog256\x00'}, &(0x7f0000001840)="a6efbb27219fe731f102a6e0455b1d9fdad5d7527ffb905495d0b907fcdde632db21e311be88e3ccd6b5080eef02433a88d930932395691707cb64648386a8f2296850e4d786f66e8e8a933e69454604428211ee0e894fcfbddede017a32fc2a06aa028245b291fa7b", 0x69})

22:42:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00')
ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000140)={0x3, 0x6, 0x1})

22:42:21 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x200, 0x901002)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x98, 0x0, &(0x7f0000000200)=[@register_looper, @exit_looper, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/140, 0x8c, 0x0, 0x32}, @fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}, @request_death, @dead_binder_done], 0x54, 0x0, &(0x7f00000002c0)="e75842a8fb27929f93ff67eb01607a9afe64f747d835c1407a97259c147f86caafc7cfef2ea5ef43682ebe46c4d4abb558b6943cc97c6eb5a160d790895fde130b594c6e1c26d5e8435c2f38cdcb809f5de845eb"})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
fsetxattr$security_selinux(r4, &(0x7f0000000380)='security.selinux\x00', &(0x7f00000003c0)='system_u:object_r:hald_acl_exec_t:s0\x00', 0x25, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = fcntl$dupfd(r3, 0xacb8764862be6f1f, r4)
ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:21 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000588dc63a89e62ed48febc6f7712154c39b0fb1a9effc015818423c0d6f205da89efe390b84c7e50b58535ee53fc3b99eb58549899a91b5e4d15576e6d39c4ceedc40fb7aa3f17e3b81730c6d0b7170d15e351587a36677fc81ccce2d22bab9ec9f2c"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000380)=[@increfs={0x40046304, 0x1}], 0x71, 0x0, &(0x7f0000000580)="2d2d6e82d790e7804c7ed8f237170c925000496a08eda941d935d93d5e50fa9d2902166794813667b4274e94cec5751e1b649260e0bbbeffffffffffffffffe0e0e78dc675535462954f3cf9f4f94db903facd5276139a5de765030000007107a68c6ee0f1c400000000000000f1bbf400"})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x9, &(0x7f0000000200)=[{0x7fff, 0x20, 0xcff0, 0x20}, {0x9, 0x1, 0x2, 0xfff}, {0x8, 0x3, 0x4, 0x7}, {0x2, 0xfffffffffffffeff, 0x100, 0x1400000000}, {0x7cda, 0x4, 0x2, 0x3}, {0x1, 0x1, 0x100000000, 0xffff}, {0x5, 0x80000000, 0x9, 0x800}, {0x3, 0x8, 0x0, 0xffffffffffffffc1}, {0xe9f7, 0x4, 0x6b388208, 0x3f}]}, 0x10)
fcntl$getown(r0, 0x9)

[  365.449395] binder: send failed reply for transaction 2988 to 21303:21304
[  365.449510] binder: undelivered TRANSACTION_COMPLETE
[  365.449516] binder: undelivered TRANSACTION_ERROR: 29189
[  365.468577] binder: undelivered TRANSACTION_ERROR: 29201
[  365.471941] binder: 21254:21257 transaction failed 29201/-28, size 7710162562779709439--7872271407390992071 line 3284
[  365.472246] binder: undelivered TRANSACTION_ERROR: 29201
[  365.493342] binder: undelivered TRANSACTION_ERROR: 29189
22:42:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getcwd(0x0, 0xe15c9f95369ef)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x8500, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x40}}, 0x4)
write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x1bce295d40000000, 0x0, 0x0, 0x100000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19be, 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
io_setup(0x38, &(0x7f0000000100)=<r2=>0x0)
io_destroy(r2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
prctl$PR_CAPBSET_READ(0x17, 0x11)
fstat(r0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000003dc0)=ANY=[], @ANYRESDEC=r0, @ANYBLOB="8d389342c5ebd1d362fce50a1eadb3946273e6c0ce0fee9eb0441039", @ANYPTR])
r4 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x20)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x3, {{0xa, 0x4e23, 0xc9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, 0x7}}, 0x0, 0x2, [{{0xa, 0x4e23, 0x1, @mcast2, 0x5}}, {{0xa, 0x4e20, 0x3, @remote, 0x7}}]}, 0x190)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000100)="1f0000000104ffce9e67fa5eaca27100", 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0xff4a)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x20032600)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8090)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0)
ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000700)=ANY=[@ANYBLOB="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"])
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000200))

22:42:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x3, 0x200)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
write$P9_RCLUNK(r3, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000002000000000000000900005800000000000000aaf773cbeeee14cc9d957fd43b19f2e02377d69eeecbdf7d412330fd8f6881ece67de37207fe7f8419a21c4cfc024e4e291deda5fe0711192d42f04f2483cfbee720dca454c3f684cf36cc8a378213a5b163058712c24d27d67be660409b6cf35a0ca9613eaf87669d7194ee6c0b0c99b06031b0a5b7f783a8ba6405ef7b6effdd5bc590536bb102af00dd1ae6790bb54980bc42396350266b3867553466993f8ff5b2aa3266c726e614457c4d0664ddd676f9424940610676671b16afaf5b1d91383c67b15b25afba7dee64174cdedbaff3c27406165470a031cb784b2a6ba4e46b41a23f74b2852d79704382d0fa57debb27b338efb6f420edf84e11b0c97415a4d91196694bcaeb1e55db104e715d1c82d229d09cc04a78f13116831ad87c9b856a9966e7d3a5ccf7be9110edf5e2e9be9419f53d9d1f73f13fe3ce111f2e3290cfe24c5b1298672e43ebc32e4b3d013b41cf74c149195840340e747034593849ee48", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000c1ce00d752d63e46379cfee748f240174439258cbe3389e5365c150ad909b30fad0bdb7c7e019235ae9802df99e7c9d5d3407c83f4f2ced233ee4607668d89b40bef4859b53d27d19674693fa72209c816e1d99d4b91d032417a42ca633bcdefcc7dadba9d4d9d7bd254ea992706f8f823ddf90f03b4bc374dbd583b1083443b7a0999a1758769a9379454d82d1364f661e1c15131398fb219c0d606acaafb1f9713b9592842c889191bd5724f1359109a8f8f5366b9e1e993a3962d5010fef9f61ede9a64dba3dcc383fde942bd60f4e8f1f20738c30fff4ab688cbc70f", @ANYRES32=r3, @ANYBLOB="0000000000000000000000008561646600"/44], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  365.523182] binder: release 21307:21309 transaction 2991 out, still active
[  365.532169] audit: type=1400 audit(1568760141.976:36): avc:  denied  { relabelto } for  pid=21311 comm="syz-executor.5" name="UDP-Lite" dev="sockfs" ino=73243 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hald_acl_exec_t:s0 tclass=rawip_socket permissive=1
22:42:22 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x120011, r1, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x1a6, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x88, 0x0, &(0x7f0000000380)=[@increfs_done, @clear_death={0x400c630f, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x110b}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/206, 0xce, 0x0, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/91, 0x5b, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @exit_looper, @enter_looper, @enter_looper, @exit_looper, @request_death={0x400c630e, 0x1}], 0x37, 0x0, &(0x7f0000000580)="88026ef25073ab7b4c570ba75d73d71b61b811f6f64fabdd12e0ff87d5c0c9bfcc2ca4d9a60d6a2f391111ba15304aed2b4a514e3ddb1f"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x0, 0x2}, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x76}}}], 0x0, 0x0, 0x0})

[  365.534013] binder: undelivered TRANSACTION_COMPLETE
[  365.536887] binder: release 21310:21318 transaction 2993 out, still active
[  365.536891] binder: undelivered TRANSACTION_COMPLETE
[  365.538541] binder: 21312:21319 IncRefs 0 refcount change on invalid ref 1 ret -22
22:42:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)
r4 = getpgid(r3)
syz_open_procfs(r4, &(0x7f0000000080)='net/psched\x00')
socket$unix(0x1, 0x5, 0x0)
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="fe624040000000000000000000200000000000000000000000000000000000e97a175500"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x20, 0x1, 0x71, "2c3dc1f1aacedbb0b88a2f20fa0fc355", "d27084d0bd1520efb2f304"}, 0x20, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x510, 0x0, 0x1f0, 0x1f0, 0x0, 0x0, 0x440, 0x440, 0x440, 0x440, 0x440, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:dhcp_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xc8, 0x110}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x3, 0x1a800000000000}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x12, 0x6}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x1, 0x80000000}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  365.538929] binder: release 21310:21318 transaction 2993 in, still active
[  365.538934] binder: send failed reply for transaction 2993, target dead
[  365.539579] binder: release 21310:21320 transaction 2997 out, still active
22:42:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000200)=""/255)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
fstatfs(r4, &(0x7f0000000140)=""/83)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  365.539583] binder: undelivered TRANSACTION_COMPLETE
[  365.542632] binder: release 21310:21318 transaction 2997 in, still active
[  365.542636] binder: send failed reply for transaction 2997, target dead
[  365.547442] binder: release 21307:21309 transaction 2991 in, still active
[  365.547447] binder: send failed reply for transaction 2991, target dead
[  365.547981] binder: release 21307:21309 transaction 2999 out, still active
[  365.547985] binder: undelivered TRANSACTION_COMPLETE
[  365.551608] binder: release 21307:21317 transaction 2999 in, still active
[  365.551612] binder: send failed reply for transaction 2999, target dead
[  365.572139] binder: 21313:21316 got transaction with invalid parent offset or type
[  365.572172] binder: 21313:21316 transaction failed 29201/-22, size 88-24 line 3454
[  365.572236] binder: send failed reply for transaction 3001 to 21313:21316
[  365.575599] binder: undelivered TRANSACTION_ERROR: 29190
[  365.575731] binder: undelivered TRANSACTION_COMPLETE
[  365.575744] binder: undelivered TRANSACTION_ERROR: 29201
[  365.577603] binder: 21313:21325 got transaction with invalid parent offset or type
[  365.577630] binder: 21313:21325 transaction failed 29201/-22, size 88-24 line 3454
[  365.577636] binder: send failed reply for transaction 3004 to 21313:21325
[  365.580636] binder: 21308:21315 unknown command -1342177280
[  365.580646] binder: 21308:21315 ioctl c0306201 200001c0 returned -22
[  365.580729] binder: 21308:21315 got reply transaction with no transaction stack
[  365.580736] binder: 21308:21315 transaction failed 29201/-71, size 0-0 line 3046
[  365.585637] binder: undelivered TRANSACTION_ERROR: 29190
[  365.586439] binder: undelivered TRANSACTION_COMPLETE
[  365.586447] binder: undelivered TRANSACTION_ERROR: 29201
[  365.599985] binder: undelivered TRANSACTION_ERROR: 29201
[  365.600007] binder: send failed reply for transaction 3007 to 21308:21315
[  365.600046] binder: undelivered TRANSACTION_COMPLETE
[  365.600052] binder: undelivered TRANSACTION_ERROR: 29189
[  365.600569] binder: 21308:21330 unknown command -1342177280
[  365.600577] binder: 21308:21330 ioctl c0306201 200001c0 returned -22
[  365.600605] binder: 21308:21333 got reply transaction with no transaction stack
[  365.600613] binder: 21308:21333 transaction failed 29201/-71, size 0-0 line 3046
[  365.613856] binder: undelivered TRANSACTION_ERROR: 29201
[  365.613875] binder: send failed reply for transaction 3010 to 21308:21330
[  365.613948] binder: undelivered TRANSACTION_COMPLETE
[  365.613955] binder: undelivered TRANSACTION_ERROR: 29189
[  365.631558] binder: release 21321:21329 transaction 3013 out, still active
[  365.631563] binder: undelivered TRANSACTION_COMPLETE
[  365.637313] binder: 21336:21339 transaction failed 29201/-22, size 88--3741102681055037526 line 3284
[  365.637321] binder: send failed reply for transaction 3015 to 21336:21339
[  365.639290] binder: undelivered TRANSACTION_ERROR: 29190
[  365.639423] binder: undelivered TRANSACTION_COMPLETE
[  365.639430] binder: undelivered TRANSACTION_ERROR: 29201
[  365.639564] binder: 21336:21344 transaction failed 29189/-22, size 0-0 line 3138
[  365.646772] binder: 21336:21345 got reply transaction with no transaction stack
[  365.646782] binder: 21336:21345 transaction failed 29201/-71, size 88--3741102681055037526 line 3046
[  365.651005] binder: undelivered TRANSACTION_ERROR: 29201
[  365.651078] binder: undelivered TRANSACTION_ERROR: 29189
[  365.661908] binder_alloc: 21341: binder_alloc_buf, no vma
[  365.661929] binder: 21341:21346 transaction failed 29189/-3, size 0-0 line 3284
[  365.671818] binder: 21348:21350 unknown command 0
[  365.671826] binder: 21348:21350 ioctl c0306201 200001c0 returned -22
[  365.673694] binder: send failed reply for transaction 3023 to 21348:21350
[  365.673824] binder: undelivered TRANSACTION_COMPLETE
[  365.673830] binder: undelivered TRANSACTION_ERROR: 29189
[  365.677708] binder: 21348:21351 unknown command 0
[  365.677716] binder: 21348:21351 ioctl c0306201 200001c0 returned -22
[  365.681558] binder: send failed reply for transaction 3025 to 21348:21351
[  365.681635] binder: undelivered TRANSACTION_COMPLETE
[  365.681641] binder: undelivered TRANSACTION_ERROR: 29189
[  365.693925] binder: release 21321:21342 transaction 3026 out, still active
[  365.693930] binder: undelivered TRANSACTION_COMPLETE
[  365.697091] binder: release 21321:21329 transaction 3013 in, still active
[  365.697097] binder: send failed reply for transaction 3013, target dead
[  365.697119] binder: send failed reply for transaction 3026, target dead
[  365.708321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pig=21356 comm=syz-executor.1
[  365.714315] binder: 21341:21358 got reply transaction with no transaction stack
[  365.714324] binder: 21341:21358 transaction failed 29201/-71, size 0-0 line 3046
[  365.728509] binder: 21355:21360 got transaction with invalid parent offset or type
[  365.728735] binder: 21355:21360 transaction failed 29201/-22, size 88-24 line 3454
[  365.728743] binder: send failed reply for transaction 3029 to 21355:21360
[  365.732894] binder: undelivered TRANSACTION_ERROR: 29190
[  365.733821] binder: undelivered TRANSACTION_COMPLETE
[  365.733828] binder: undelivered TRANSACTION_ERROR: 29201
[  365.736662] binder: 21355:21362 transaction failed 29189/-22, size 0-0 line 3138
[  365.741954] binder: 21355:21362 got reply transaction with no transaction stack
[  365.741964] binder: 21355:21362 transaction failed 29201/-71, size 88-24 line 3046
[  365.746111] binder: undelivered TRANSACTION_ERROR: 29201
[  365.746199] binder: undelivered TRANSACTION_ERROR: 29189
[  365.793998] binder: 21365:21368 got transaction with invalid parent offset or type
[  365.794023] binder: 21365:21368 transaction failed 29201/-22, size 88-24 line 3454
[  365.794029] binder: send failed reply for transaction 3036 to 21365:21368
[  365.794766] binder: release 21367:21369 transaction 3039 out, still active
[  365.794770] binder: undelivered TRANSACTION_COMPLETE
[  365.800730] binder: release 21367:21370 transaction 3040 out, still active
[  365.800735] binder: undelivered TRANSACTION_COMPLETE
[  365.808068] binder: release 21367:21369 transaction 3039 in, still active
[  365.808073] binder: send failed reply for transaction 3039, target dead
[  365.808095] binder: send failed reply for transaction 3040, target dead
[  365.809300] binder: undelivered TRANSACTION_ERROR: 29190
[  365.809426] binder: undelivered TRANSACTION_COMPLETE
[  365.809433] binder: undelivered TRANSACTION_ERROR: 29201
[  365.810258] binder: 21365:21371 transaction failed 29189/-22, size 0-0 line 3138
[  365.818070] binder: 21365:21371 got reply transaction with no transaction stack
[  365.818079] binder: 21365:21371 transaction failed 29201/-71, size 88-24 line 3046
[  365.822455] binder: undelivered TRANSACTION_ERROR: 29201
[  365.822791] binder: undelivered TRANSACTION_ERROR: 29189
[  366.336504] binder: release 21312:21319 transaction 2995 out, still active
[  366.336509] binder: undelivered TRANSACTION_COMPLETE
[  366.338366] binder: release 21312:21378 transaction 3044 out, still active
[  366.338369] binder: undelivered TRANSACTION_COMPLETE
[  366.347217] binder: send failed reply for transaction 2995, target dead
[  366.347226] binder: send failed reply for transaction 3044, target dead
[  366.440229] binder: undelivered TRANSACTION_ERROR: 29201
[  366.440631] binder: 21341:21358 transaction failed 29189/-22, size 0-0 line 3138
22:42:22 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x1b6, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x10000000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./bus\x00', 0x0, 0x10}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:22 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000080)='fd\x00')
lseek(r2, 0x0, 0x2)
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ptrace$setopts(0x4206, 0x0, 0x9, 0x3d)
ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000100)=""/179)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000080), 0xfffffe98)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:22 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000000400"/76], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000100)={0x2, 0x8, 0x4, 0xffff, 0x1fffffffc, 0x80000001, 0x2})

22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff})
mkdir(&(0x7f0000000300)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x7})
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00')
pipe2(0x0, 0x8f104b97ce543d14)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@empty, 0x6b})
ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000340)=""/42)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="6e25c4000000000000bd82bbe60000eeffffff000000100000000800008aa023aa7321ee0000007d0000007d5759ec4fd691164fe25990444072dc2436da564004ea4ce09459106452af5be5f0df476fecfa15c84e6b65d8ca4447cdfa779027652a187212792078ae13f89cbb243a575efa56fe319e18027d79fbe7b3e410b809890298445083dd680d4da350deeba4220f023a3d776c0000000000000000000000000000eabf144c36b4efa7ef4b62acd9e5299ed86b00fb710207a799e53e881d2cc036167c218ef64743af705e244c51d586da762276f7243eafdf039544502160b1d8bb8875d10323599ba7beef2f951f5486fa672ce4f5f101b02bf1b14d73aeee41145b49e2f7ebf6c4223524771bb4438a1793b83bd0612c97d4451f971c54d796fdd97d6394f252156a9987e30742ef160838a84ea0949e48cfb79fdacb5160cb42d7824df014ab5624726c3afb581d25274ab7b1d808978c2a4ebee78f9029a530b83f44c00d943d67950902597847e1277d4369e6512ae858916557e78aad905ce2da96cfea824ba98e3b85b413a82ee3bdaf9a4c7858a49425778331a4ad7cfb2ac69ed25d91011b727581fe0a1c14402854b7f6eca6c03fb279a4546a46ebb92a64a642cfcfe6ac5f303226e4fbaf195af58923338fad0674c53ac7d86c1ae953a58dc99907a30dd04a53235a782a91aee8aa5633b3ca0ada3654ba8bef2cb181ed75f7ea11aae97a02add4144cdab00c7450c1eda5a19ba2ea36832628eaab3f95deb30af8062d3bf2ffff97469f307029d57c8ff650c7b78220c25eb2edd1e48167056cacb9390d8995117e26d0794bb07c6491eb739137d7e74784df41dc21fc25440e941ba58d83d871620e7280d999db9dcc594fd8eabfd856ffc59ba36ff8498573a332599b24a7cdbb2d90b3f19e4328125f6e2b7feea2afba2d4a31f8f5da9af055ed0729d1fccff2338607813037ca0c59d2676f3e7d17b2a14829efd38adf94352724ffb60c7d0cc66c8b149e3a8313d9495ed33082a8935a56d5c1b821d40054d286340fe9e25bb68c0d540b1c7512a22b39067a7e1eaa784147a1a582d33ae45e0abb29c1d282b32c76e19ee1328aaa323bef0200bc4675abf1a50fc52a3265e474058402d1204461b3a2cc403aee993d18e84c13c826adb976000000f4212fb21e33cc27ef91caaef60d8e8df27b8825d623620fe7d97ad9c5f425af264ff4ba2e8a62c35cbd467ed8e53c203638831cfd479b2a249cb2384fcef3c2c48b26c2c7820de725268da3f8a8825e264674282debe55f50d6c026a24e615124dd0f3a32365af16b9eee5befe6aa1d6a682163847297f9fe873374a7a1475561e23251b7055441aad477ed0966d24afba3235d108a80a5a90f387664121110f38952fcf0dab83aaf8ee9bf096996fbce468aa9674c3c7bdc337df6ef6109cc500df9c1e2855f000079ad34631ce48641ba7e1bf036736e6db6ac7b76bfe96db2003ab309817d244e4f8400bcc91115d17683788bc9d2ec05977cc408be98178d62fcdac7bb9e2ceba1e18a88fc853b53df762b11d1899d85bd04efb3375f4f6df6a15693821b47964ed35a1d2c3eb2b2e7dcdf39ba4544544a55287859855553c0ced805625e2067000053a149fed7f219daab004fa48d143856d6283a6f1c5881611ad65e49ae708bbbe42b37d4d00c2f00000000000000000000000000000000000000000000000000000000006fced4d7cc804240e38f021c0cf104c9e08b63e503dfcb2813a43a272ad4a3316299c687680d253e2bbdc6e9904b7e79a917467d1a8628afdfa96fa6029a77629b376236389b7ccc463762da197151c4449080d7850c016dda4f651659e61a48e8ac2251e83daa81cd82a995fe82"], 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r5 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
write$9p(r4, &(0x7f0000000800)="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", 0x600)
ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000100)=""/15)
mknodat(r4, &(0x7f0000000440)='./file0\x00', 0x0, 0x8)
write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x496}, 0x120)
sendfile(r4, r5, 0x0, 0x10000)
r6 = openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
fstat(r6, &(0x7f00000004c0))
mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='bpf\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000140))

[  366.440974] binder: undelivered TRANSACTION_ERROR: 29189
[  366.444995] binder: undelivered TRANSACTION_ERROR: 29189
[  366.533919] binder: 21383:21385 unknown command 0
[  366.542418] binder: 21383:21385 ioctl c0306201 20000440 returned -22
22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10)
r3 = creat(&(0x7f0000000100)='.\x00', 0x4)
sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="840000001c0102002bbd7000fedbdf2512000000080023000500000068002600705937f8d897d058dabef99ec1ab3f6702de8a89be11c7b4e146d8dd535e1178b4de191a0538a7709dcd9dbb860ba21b732e842255be15debd83e19c4dd2699905d6ab08c8a82d03410d5c036d07c45f941a2f84820abefd6be8f6e93d49529ed9000000"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1)

22:42:23 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x400, 0x81})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x6f5c3e1222488ac, 0x0)
write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:v4l_device_t:s0\x00', 0x22)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
socket$unix(0x1, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  366.553820] binder: release 21387:21390 transaction 3050 out, still active
[  366.553824] binder: undelivered TRANSACTION_COMPLETE
[  366.572250] binder: 21384:21394 got transaction with invalid parent offset or type
22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:23 executing program 2:
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  366.572277] binder: 21384:21394 transaction failed 29201/-22, size 88-24 line 3454
[  366.572284] binder: send failed reply for transaction 3055 to 21384:21394
[  366.575214] binder: undelivered TRANSACTION_COMPLETE
[  366.575356] binder: undelivered TRANSACTION_COMPLETE
[  366.575364] binder: undelivered transaction 3054, process died.
[  366.575651] binder: release 21387:21390 transaction 3050 in, still active
[  366.575655] binder: send failed reply for transaction 3050, target dead
[  366.576892] binder: undelivered TRANSACTION_ERROR: 29190
[  366.577497] binder: undelivered TRANSACTION_COMPLETE
[  366.577504] binder: undelivered TRANSACTION_ERROR: 29201
[  366.581349] binder: release 21387:21390 transaction 3062 out, still active
[  366.581353] binder: undelivered TRANSACTION_COMPLETE
[  366.584835] binder: 21388:21393 got reply transaction with no transaction stack
[  366.584844] binder: 21388:21393 transaction failed 29201/-71, size 0-0 line 3046
[  366.591465] binder: release 21387:21398 transaction 3062 in, still active
[  366.591471] binder: send failed reply for transaction 3062, target dead
[  366.591779] binder: undelivered TRANSACTION_ERROR: 29201
[  366.591790] binder: release 21388:21400 transaction 3061 in, still active
[  366.591796] binder: send failed reply for transaction 3061 to 21388:21400
[  366.591875] binder: undelivered TRANSACTION_COMPLETE
[  366.591881] binder: undelivered TRANSACTION_ERROR: 29189
[  366.611848] binder: release 21384:21394 transaction 3059 in, still active
[  366.611855] binder: send failed reply for transaction 3059 to 21384:21394
[  366.611942] binder: undelivered TRANSACTION_COMPLETE
[  366.611948] binder: undelivered TRANSACTION_ERROR: 29189
[  366.629550] binder: release 21406:21408 transaction 3065 out, still active
[  366.629555] binder: undelivered TRANSACTION_COMPLETE
[  366.644667] binder: undelivered TRANSACTION_COMPLETE
[  366.645015] binder: undelivered TRANSACTION_COMPLETE
[  366.645024] binder: undelivered transaction 3068, process died.
[  366.665173] binder: release 21406:21419 transaction 3072 out, still active
[  366.665177] binder: undelivered TRANSACTION_COMPLETE
[  366.668700] binder: release 21409:21417 transaction 3071 in, still active
[  366.668707] binder: send failed reply for transaction 3071 to 21409:21417
[  366.668792] binder: undelivered TRANSACTION_COMPLETE
[  366.668799] binder: undelivered TRANSACTION_ERROR: 29189
[  366.681020] binder: release 21406:21408 transaction 3065 in, still active
[  366.681026] binder: send failed reply for transaction 3065, target dead
[  366.681046] binder: send failed reply for transaction 3072, target dead
[  366.709169] binder: 21412:21429 got reply transaction with no transaction stack
[  366.709177] binder: 21412:21429 transaction failed 29201/-71, size 88-24 line 3046
[  366.712920] binder_alloc: 21425: binder_alloc_buf, no vma
[  366.712940] binder: 21425:21427 transaction failed 29189/-3, size 0-0 line 3284
[  366.713178] binder: undelivered TRANSACTION_COMPLETE
[  366.713187] binder: undelivered transaction 3075, process died.
[  366.717420] binder: undelivered TRANSACTION_COMPLETE
[  366.717509] binder: undelivered TRANSACTION_ERROR: 29189
[  366.988966] binder: release 21383:21385 transaction 3048 out, still active
[  366.995986] binder: undelivered TRANSACTION_COMPLETE
[  367.002600] binder: BINDER_SET_CONTEXT_MGR already set
[  367.008332] binder: 21383:21385 ioctl 40046207 0 returned -16
[  367.008403] binder: 21383:21403 unknown command 0
[  367.008411] binder: 21383:21403 ioctl c0306201 20000440 returned -22
[  367.008877] binder: release 21383:21403 transaction 3078 out, still active
[  367.008882] binder: undelivered TRANSACTION_COMPLETE
22:42:23 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x9d5})

22:42:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
prctl$PR_SET_TSC(0x1a, 0x1)

22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="1170000000000000000000")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x80, 0x800)

22:42:23 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x220, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeb13}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x100, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa92}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x53b6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x662}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x23ef}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4010}, 0x20000194)

22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="254237b2b38defb38b7849afc613356f9d0a1f3486416bd39a69907e12b7838c17bac103fc77ee278138ae226995ba3ab6b2f2dd6373e61a8f6102d8"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001280)={0x50, 0x0, &(0x7f0000000200)=[@dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/241, 0xf1, 0x0, 0x2e}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}], 0x1000, 0x0, &(0x7f0000000280)="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"})

22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000200)='/dm\x1f/\xfb\andg\xe6#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x1400)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
write$P9_RMKNOD(r3, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x80, 0x3}}, 0x14)

[  367.040004] binder: release 21383:21403 transaction 3048 in, still active
[  367.057342] binder: send failed reply for transaction 3048, target dead
[  367.078999] binder: send failed reply for transaction 3078, target dead
22:42:23 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl(r1, 0xd, &(0x7f0000000100)="0a10d039a781a255a316e8bb484d2bc7c40e4bb025ac1242ce2e3d47ae00f68a56b94d954bc244b3cb003178420f07a215f0c1b4e658b46f8abb1cdd16d38126a675ce1aa4d396b45c0c936e1ad3c9f93aa9eda8c2bd6468b85edafd8e43708ff073aba2219b6ed990623b0724d4bfd54e")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
r4 = getpgrp(0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/sockstat\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
r6 = dup(r5)
write$P9_RSTAT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="6e0000007d0100000067005deb6a00000020020000df070000000000000000000000030000005ed10000e600000008f42de11bb64a7a747200050061747472000d002f6465762f62800000007223001d00986b2790a2076a098fea5e70707030706f7369785f61636c5f6163636573736d696d655f74797065"], 0x6e)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  367.086887] binder: BINDER_SET_CONTEXT_MGR already set
[  367.086896] binder: 21441:21445 ioctl 40046207 0 returned -16
[  367.096031] binder_alloc: 21441: binder_alloc_buf, no vma
[  367.096050] binder: 21441:21451 transaction failed 29189/-3, size 0-0 line 3284
[  367.096238] binder: BINDER_SET_CONTEXT_MGR already set
[  367.096246] binder: 21439:21442 ioctl 40046207 0 returned -16
[  367.096319] binder_alloc: 21439: binder_alloc_buf, no vma
[  367.096335] binder: 21439:21448 transaction failed 29189/-3, size 0-0 line 3284
[  367.096544] binder: 21441:21445 got reply transaction with no transaction stack
[  367.096549] binder: 21441:21445 transaction failed 29201/-71, size 0-0 line 3046
[  367.130180] binder: BINDER_SET_CONTEXT_MGR already set
[  367.130189] binder: 21437:21446 ioctl 40046207 0 returned -16
[  367.130249] binder_alloc: 21437: binder_alloc_buf, no vma
[  367.130268] binder: 21437:21459 transaction failed 29189/-3, size 0-0 line 3284
[  367.170804] binder: BINDER_SET_CONTEXT_MGR already set
[  367.170812] binder: 21460:21467 ioctl 40046207 0 returned -16
[  367.170926] binder_alloc: 21439: binder_alloc_buf, no vma
[  367.170942] binder: 21460:21467 transaction failed 29189/-3, size 0-0 line 3284
[  367.268519] binder: undelivered TRANSACTION_ERROR: 29189
[  367.274002] binder: undelivered TRANSACTION_ERROR: 29189
[  367.279591] binder: release 21437:21446 transaction 3085 in, still active
[  367.286512] binder: send failed reply for transaction 3085 to 21437:21446
[  367.293630] binder: undelivered TRANSACTION_COMPLETE
[  367.298855] binder: undelivered TRANSACTION_ERROR: 29189
[  367.304349] binder: undelivered TRANSACTION_ERROR: 29189
[  367.309860] binder: undelivered TRANSACTION_ERROR: 29201
[  367.315345] binder: undelivered TRANSACTION_COMPLETE
[  367.320475] binder: undelivered transaction 3083, process died.
[  367.326585] binder: release 21439:21442 transaction 3082 in, still active
[  367.333548] binder: send failed reply for transaction 3082 to 21439:21442
[  367.340573] binder: undelivered TRANSACTION_COMPLETE
[  367.346177] binder: undelivered TRANSACTION_ERROR: 29189
[  367.351901] binder: undelivered TRANSACTION_COMPLETE
22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x8001, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x19c)
ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x80000001, 0xb5d, 0x4, 0x100, 0x5, 0x1})
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x1a6, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000c007d045b479187b4f400000000f2000000000700000000f644e0388d2c9e2222c9eb7f000c00aaf8538650e2bc83e2fd57f2accd00000000007b87200439233c710000663f43122378350194f7d19aa79dce4e973ff94a625a5551f9bf5db7b910eca36a7b35186184aca5461872f87e318be19ed32d2e1ec17d73307ec56652b1dfffa42ee5fae22e7bde292e24cc200730193cfc9773d359d89138c3cd35ab6d6095aa2ddd2500000000d35ebba5f970bd365e41e6315377db60539b6b5c9b5f58ca88ed5bef7dbbd13bd9980d2c9efd78b8b7dc1424720a9c119fa955e402df3d53fbe7ca606464cd9051f8f137e5e2b801aa8e131b6072e5281998642e2f48287423b776d7de4b7c092e67b77779937f678ecccd563a8c879e8264e2bb968550b6a0f3dade14b8682326bdd512341c334604a8f083a0b35e8591fb635b03c8a7c7dbb173c4ee595f402cee494e6755fca7362d1307203f2f48c98ece76d4386b0a1628db01cbfd2d12c6464d3741d1a0453a60d6b44356afc95e5d1c070e158261d7"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="22ab8fe8"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xfffffffffffffc74, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda={0x66646185, 0x0, 0x0, 0x4}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:23 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x31d, 0x0, &(0x7f0000000300)=[@request_death], 0xfffffd2c, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c6300005683714f29005fab1d255af2c352d744b3f09be048d25faa0aeb3c972a3486be994d20a4698da71cf8f10eff726b3e91890cd097d5fc99aba4f31e344f122a009f3c5c47c02cf2bd1949f43fbd04a4364806f0edf28b97dba8032b80901bd4d9184d3c46146b4943a5a74d1781e3d68fe3ff210eaf53881a3c8783f98a302d3f9926c08befbc75"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:23 executing program 3:
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080))
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c630000598c452d93df686e3b0865e89056a7c5981bcf031be390f792d046d14523c2d62e87150f4d9f7e10dbd7c8e4fa79e4cb3b33cb0cf88844f8e357e3fbcc7a847869d8fa03f47e71f85dc5e7d343491b8dfa7246f94864665d953a0466eac6f175692e1f212be5e9afd29bcac31cd6bb6b1d040000000000000038bc3c9b565d40b225a34a3657f28ac54d632787c073d74f13c7351e8b5c7e00000000000000000e11749ec72d06d0a2aea340ff5eb3f656763c9911a5a13c2e6f3e43c8aa152e912e700b0d651cb1a98237b9fa411745fb2602c97e3c278238d7dbcb5d5e13179bc8e1899ce5c5602b848de9ca"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x4})

22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x1806)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000008, 0x110, r1, 0x200000000005f)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000040)={0x3f, {{0xa, 0x4e23, 0xc5, @remote, 0x400}}}, 0x88)

[  367.434696] binder: BINDER_SET_CONTEXT_MGR already set
[  367.440093] binder: 21412:21429 ioctl 40046207 0 returned -16
[  367.448946] binder: undelivered TRANSACTION_ERROR: 29201
[  367.470227] binder: 21475:21479 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  367.478795] binder: 21475:21479 unknown command 0
22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/44)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:23 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x254, 0x3c, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@typed={0x14, 0x4b, @ipv6=@remote}, @generic="e0a5079ab33795cec855c791390a2a95a0e0ec4ac1637b1ee5e96630ce90892289243b0c30382b400b3e40d11d2f49498477865f5b37d341586c4460daaea2f5cb5d7dea82b49204c1fb4872b4adcdecff7d6a7c3e3ce8b496b15e8c0bca3b5b320c0ccfd77ecc2cef6f0bc1c26d901b500381cab6c6e33d40145019b17d0f9b288cd9d66f4c937533b8336331b5a5400f53fb9f660583951e75697669ec23a0a06a596489f460a1fa64f23f73c480a491d18960c429391b3cd8d4541151096456a5d131ce7215002fb7822f1526efa684c6e7321d2a9bb67dfc97267dd80e22918d7b860377ab9179c9e4c16dca8e3277d47117a5bce69d", @nested={0x12c, 0x96, [@generic="7c4736a98cf4c80041fea7bc434bdb8dd1fa179b625e1a4db8c81eece2974b6eff6521d56146ff81ca5efed8b296acdcb1e30f84a74939a6f84896c2c8b1124453b696c35adfdad0271c7033f3ac6b5057c8976dfb28e8b91d84e8ca003203265b00deef463928acc1e70f92e2230dbe7f94c5d82b6d1b5e550f2ac28cc3863195d1d705128509a31e8f85b67ba53fb4", @typed={0x8c, 0x45, @binary="458649b3d253a95b325f7cd2857e7701a60278ef51e1d2274ccbbecf6d23c2ab3451314f59ff2031c03eb7672e9bc04824ef68bea92c7706babbf481c7ecd899d4ddca7ea8a721fce544962dbb8bad3f163172145dddf9e2273822bd6060976d8f3c45b6cf1320d204c561c46d01bd9bd9cc565ecaed008027473f5b53d3e98689b9c0c1592bc9"}, @typed={0xc, 0x5f, @u64=0x9}]}, @nested={0x8, 0x48, [@typed={0x4, 0x39}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x80000}, 0x80010)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x84000)
ioctl$TIOCNOTTY(r3, 0x5422)

22:42:23 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000001, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  367.480151] binder_alloc: 21476: binder_alloc_buf size -816 failed, no address space
[  367.480157] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
[  367.480171] binder: 21476:21481 transaction failed 29201/-28, size 88--908 line 3284
[  367.480178] binder: send failed reply for transaction 3094 to 21476:21481
22:42:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
flistxattr(r2, &(0x7f0000000080)=""/3, 0x3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x8000, 0x0)
write$P9_RAUTH(r3, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x20, 0x1, 0x8}}, 0x14)

22:42:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000200)={0xbbc0000000000000, 0x800, 0x2, 0xa8, 0x17, 0x10000, 0x4, 0x3e780000000, 0x2, 0x68df, 0x3ff, 0x3ff})

[  367.484254] binder: undelivered TRANSACTION_ERROR: 29190
[  367.484370] binder: undelivered TRANSACTION_COMPLETE
[  367.484377] binder: undelivered TRANSACTION_ERROR: 29201
[  367.503181] binder: 21476:21486 got reply transaction with no transaction stack
[  367.503190] binder: 21476:21486 transaction failed 29201/-71, size 88--908 line 3046
[  367.511251] binder: release 21476:21484 transaction 3097 in, still active
[  367.511259] binder: send failed reply for transaction 3097 to 21476:21484
[  367.511273] binder: undelivered TRANSACTION_ERROR: 29201
[  367.511349] binder: undelivered TRANSACTION_COMPLETE
[  367.511355] binder: undelivered TRANSACTION_ERROR: 29189
[  367.535617] binder: 21475:21492 got reply transaction with no transaction stack
[  367.535627] binder: 21475:21492 transaction failed 29201/-71, size 0-0 line 3046
[  367.546386] binder: 21495:21499 got transaction with invalid parent offset or type
[  367.546416] binder: 21495:21499 transaction failed 29201/-22, size 88-24 line 3454
[  367.546424] binder: send failed reply for transaction 3101 to 21495:21499
[  367.554055] binder: undelivered TRANSACTION_ERROR: 29190
[  367.554177] binder: undelivered TRANSACTION_COMPLETE
[  367.554183] binder: undelivered TRANSACTION_ERROR: 29201
[  367.555597] binder: 21495:21505 got reply transaction with no transaction stack
[  367.555608] binder: 21495:21505 transaction failed 29201/-71, size 88-24 line 3046
[  367.556047] binder: release 21495:21503 transaction 3103 out, still active
[  367.556050] binder: undelivered TRANSACTION_COMPLETE
[  367.564126] binder: release 21495:21503 transaction 3103 in, still active
[  367.564131] binder: send failed reply for transaction 3103, target dead
[  367.564172] binder: undelivered TRANSACTION_ERROR: 29201
[  367.592694] binder: 21509:21512 unknown command 0
[  367.592702] binder: 21509:21512 ioctl c0306201 200001c0 returned -22
[  367.593643] binder: 21509:21512 got reply transaction with no transaction stack
[  367.593651] binder: 21509:21512 transaction failed 29201/-71, size 88-24 line 3046
[  367.595471] binder: undelivered TRANSACTION_ERROR: 29201
[  367.595490] binder: send failed reply for transaction 3107 to 21509:21512
[  367.595798] binder: undelivered TRANSACTION_COMPLETE
[  367.595805] binder: undelivered TRANSACTION_ERROR: 29189
[  367.596225] binder: 21509:21513 unknown command 0
[  367.596232] binder: 21509:21513 ioctl c0306201 200001c0 returned -22
[  367.598580] binder: 21509:21513 got reply transaction with no transaction stack
[  367.598589] binder: 21509:21513 transaction failed 29201/-71, size 88-24 line 3046
[  367.602974] binder: undelivered TRANSACTION_ERROR: 29201
[  367.602994] binder: send failed reply for transaction 3110 to 21509:21513
[  367.603066] binder: undelivered TRANSACTION_COMPLETE
[  367.603072] binder: undelivered TRANSACTION_ERROR: 29189
[  367.847718] binder: 21475:21479 ioctl c0306201 20000100 returned -22
[  367.856827] binder: 21475:21479 got reply transaction with no transaction stack
[  367.864674] binder: 21475:21479 transaction failed 29201/-71, size 0-0 line 3046
[  367.872868] binder: undelivered TRANSACTION_ERROR: 29201
[  367.881849] binder: undelivered TRANSACTION_ERROR: 29201
22:42:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x38e, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0})

22:42:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
inotify_init1(0x138b27b9a55a4bd3)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xc000000000000000)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x7fffffff, 0x7fff, 0x931b, 0x5a2, 0x1a, 0x1, 0x1000, 0x40, 0x81, 0x1, 0x3, 0x4d97})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
timerfd_create(0x2, 0x800)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000080))

22:42:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="8da3974ed113fb1d9b1df57d4250f596aad5a2ff1092"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r7, 0x0)
r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x20, 0x0, 0x0, 0x100000000, 0x0, 0x100000001, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x0, 0x0, 0x1, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000200)=""/192)
r10 = dup2(r8, r9)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r10, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r11, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001700)=""/4096, 0x1000)
write$FUSE_ATTR(r5, &(0x7f0000000100)={0x78, 0x0, 0x7, {0x100000000, 0x9, 0x0, {0x5, 0xffffffff, 0x1f, 0x9, 0x6, 0x3, 0xff, 0x6, 0x3f, 0x40, 0x9, r7, r11, 0xd38, 0x4}}}, 0x78)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r12, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000003c0)={r12, 0x1, 0x6, @local}, 0x10)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
shutdown(r4, 0x0)

22:42:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  367.944586] binder: undelivered TRANSACTION_ERROR: 29189
[  367.950170] binder: release 21460:21467 transaction 3114 out, still active
[  367.964159] binder: undelivered TRANSACTION_COMPLETE
[  367.973662] binder: release 21460:21516 transaction 3114 in, still active
[  367.981932] binder: 21517:21524 BC_INCREFS_DONE u0000000000000003 no match
[  367.992246] binder: send failed reply for transaction 3114, target dead
[  368.004244] binder: 21517:21524 unknown command 0
[  368.011981] binder: release 21521:21525 transaction 3118 out, still active
[  368.011985] binder: undelivered TRANSACTION_COMPLETE
[  368.029489] binder: 21517:21524 ioctl c0306201 20000080 returned -22
[  368.029831] binder: release 21521:21525 transaction 3119 out, still active
[  368.029835] binder: undelivered TRANSACTION_COMPLETE
[  368.040638] binder: release 21521:21525 transaction 3118 in, still active
[  368.040644] binder: send failed reply for transaction 3118, target dead
[  368.040666] binder: send failed reply for transaction 3119, target dead
[  368.083494] binder: release 21517:21524 transaction 3116 in, still active
[  368.091758] binder: 21517:21532 BC_INCREFS_DONE u0000000000000003 no match
[  368.098950] binder: send failed reply for transaction 3116 to 21517:21524
[  368.099010] binder: undelivered TRANSACTION_COMPLETE
[  368.099016] binder: undelivered TRANSACTION_ERROR: 29189
[  368.118375] binder: 21517:21532 unknown command 0
[  368.123345] binder: 21517:21532 ioctl c0306201 20000080 returned -22
[  368.133826] binder: release 21517:21532 transaction 3121 in, still active
[  368.141209] binder: send failed reply for transaction 3121 to 21517:21532
[  368.154517] binder: undelivered TRANSACTION_COMPLETE
[  368.164764] binder: undelivered TRANSACTION_ERROR: 29189
22:42:24 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffea2, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c43a4b248f42da6b74747191b3d9de68207517c27f19db3828f39c2e7a19eaa6f7a9ccf93446f848fa082752955245870df13c4dd926343dcac3e343d3657e0373cd9a7124f8b3eb8b15c49a18f405db45c20100c3945b97a131df64ad0354166d8d4333be557e5ac2d5b6f299c97c0b23cd74b84f503fa9c2cd690210c2fea31d32c8864dafb4b40aa8675ff803e3982f77afc8e83747e6085bf3e604359232e2331e744bfbc8a4d5bf4ee048d9858d992ec801be5fa122cd434cc71c8a55ae34199f5a519d806b0d879246d4aaead0bc66f0315fb4e4699861bed62b4e212b6"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:24 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340409dd766068ca73d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005cebccdcce1118db7a75e460837aa5050091b7c0c53dbfd723ac52d046808a6d1aa8225abe65aaaf18d93306f38df7e40ca3520308b64be142dd47f13a32"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:24 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7dd6}, [@jmp={0x5, 0x4, 0x8, 0xa, 0x0, 0xdac38dfa9a1ff2b7, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb113}]}, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000400)=""/237, 0x40f00, 0x2, [], r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x3, 0xfffffffffffff87f, 0x4}, 0x10}, 0x70)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, <r6=>0x0}, &(0x7f0000000180)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r8, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001800}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=@getae={0x220, 0x1f, 0x0, 0x70bd25, 0x25dfdbfe, {{@in=@local, 0x4d5, 0x8, 0xcd}, @in=@local, 0x9, 0x3505}, [@mark={0xc, 0x15, {0x350759, 0x4c93}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(twofish-generic)\x00'}, 0x70, 0x3c0, "acc468bf9c061f1982303ee9941e"}}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in6=@rand_addr="f47986329e36082f1912b744378d3d71", 0x4e23, 0x9, 0x4e21, 0x9, 0x8, 0x0, 0x80, 0x6c, r4, r6}, {0x208, 0xaa1, 0x1, 0x0, 0x6, 0x5, 0x8, 0x5}, {0x57, 0x5, 0x6, 0x2}, 0x9, 0x6e6bb6, 0x1, 0x0, 0x1, 0x2}}, @replay_thresh={0x8, 0xb, 0x2bb663b7}, @ipv6_hthresh={0x8, 0x4, {0x21, 0xa}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd2d, 0x7fff}}, @policy={0xac, 0x7, {{@in6=@rand_addr="1420b0da9e73b219aa5eb6715ad20ff2", @in=@dev={0xac, 0x14, 0x14, 0xd}, 0xe92d, 0x0, 0x4e20, 0x342d14e8, 0xa, 0x60, 0x100, 0x87, 0x0, r8}, {0x401, 0x8, 0x1, 0x7, 0x2, 0xb7, 0x80000001, 0x2}, {0x1800000000000, 0x4, 0x8001, 0x8}, 0x7fffffff, 0x6e6bb4, 0x0, 0x8b85b4ad910f9794, 0x1, 0x1}}]}, 0x220}, 0x1, 0x0, 0x0, 0x2c840}, 0x1)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)

22:42:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000793b6121b458d161313dbf2c619e38ee63ff305da4577e770880413c48381b358d68b474a8d6d20ab7853349da72b2b466ebbd63c55b948041e492fc91f8a083307fe7ccd4dfc9416f9450dd73f22328df881f11a217011b8cb1db020829b2ead3e7e3df7b3c3a127761958c9100d45652c3ac24111809"], 0x0, 0x0, 0x0})
io_setup(0x5, &(0x7f0000000080)=<r4=>0x0)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000240)=0x6)
io_cancel(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r1, &(0x7f0000000300)="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", 0xfffffffffffffd9d, 0x302c, 0x0, 0x1}, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x1ac, 0x0, &(0x7f0000000480)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x1}, @acquire, @clear_death={0x400c630f, 0x3}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/69, 0x0, 0x0, 0x12}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/3, 0x0, 0x0, 0x35}}, &(0x7f0000000280)}}, @decrefs={0x40046307, 0x3}], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), 0x3, 0x0, &(0x7f0000000180)="fb4554"})

22:42:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000580)={@dev={0xfe, 0x80, [], 0x1b}, @empty, @loopback, 0xffffffffffff604e, 0x7ff, 0x80, 0x500, 0x8001, 0x20, r3})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
pipe2(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x2800)
bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x40, @local, 0x10001}, 0x1c)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0008000009f0409755b2d1c0b03d58a67be847356eb82b792b72524944e6647fbb87cdb0"], 0x1, 0x0, &(0x7f00000000c0)='-'})
fsync(0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @multicast2}, {0x0, @dev={[], 0x20}}, 0x28, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_bond\x00'})
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r6}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x803)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  368.297670] binder: 21535:21539 got transaction to invalid handle
[  368.308670] binder: release 21538:21544 transaction 3127 out, still active
[  368.318812] binder: 21542:21546 unknown command 2048
[  368.324722] binder: undelivered TRANSACTION_COMPLETE
22:42:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2f}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xff8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}}, 0x808)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
dup(r3)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:24 executing program 5:
ftruncate(0xffffffffffffffff, 0x7)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x5, 0x20011, r0, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x1)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x17, 0x4)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x1, 0x200, 0x4, 0x1, 0x0, 0x4, 0x80000, 0x8, 0xffffffffffffffff, 0x1, 0xfff, 0x3f, 0xba3d, 0x2, 0x8, 0xbc9f, 0x9, 0x3f, 0x19f1, 0xffffffffffff7fff, 0x7fff, 0x7, 0xfffffffffffffbff, 0x1, 0x7, 0x4, 0xffffffffffff315b, 0x100000000, 0x4, 0x10d, 0x7, 0xd7, 0x0, 0x7e, 0x100, 0x101, 0x0, 0xad, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x4000, 0xff, 0x3bf, 0x0, 0x8, 0x400000000, 0x2}, r2, 0x8, r0, 0x1)
prctl$PR_SET_FPEXC(0xc, 0x4)

[  368.326008] binder: 21535:21539 transaction failed 29201/-22, size 0-0 line 3138
[  368.326301] binder: release 21538:21544 transaction 3127 in, still active
22:42:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r2, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:24 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$TCGETX(r3, 0x5432, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:24 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  368.326306] binder: send failed reply for transaction 3127, target dead
[  368.327920] binder: release 21538:21544 transaction 3131 out, still active
[  368.327923] binder: undelivered TRANSACTION_COMPLETE
[  368.379706] binder: 21542:21555 got reply transaction with no transaction stack
[  368.379713] binder: 21542:21555 transaction failed 29201/-71, size 88-24 line 3046
[  368.383862] binder: 21535:21557 got reply transaction with no transaction stack
[  368.383871] binder: 21535:21557 transaction failed 29201/-71, size 0-0 line 3046
[  368.390575] binder: release 21538:21548 transaction 3131 in, still active
[  368.390582] binder: send failed reply for transaction 3131, target dead
[  368.427946] binder: release 21563:21567 transaction 3135 out, still active
[  368.427950] binder: undelivered TRANSACTION_COMPLETE
[  368.430640] binder: release 21563:21567 transaction 3135 in, still active
[  368.430645] binder: send failed reply for transaction 3135, target dead
[  368.431182] binder: release 21563:21567 transaction 3137 out, still active
[  368.431185] binder: undelivered TRANSACTION_COMPLETE
[  368.436964] binder: release 21563:21571 transaction 3137 in, still active
[  368.436969] binder: send failed reply for transaction 3137, target dead
[  368.556417] binder: 21542:21546 ioctl c0306201 200001c0 returned -22
[  368.565666] binder_alloc: 21542: binder_alloc_buf, no vma
[  368.565680] binder: BINDER_SET_CONTEXT_MGR already set
[  368.565686] binder: 21542:21546 ioctl 40046207 0 returned -16
[  368.582841] binder: 21542:21555 transaction failed 29189/-3, size 0-0 line 3284
[  368.591091] binder: release 21542:21546 transaction 3129 out, still active
[  368.597180] binder: 21542:21575 unknown command 2048
[  368.597189] binder: 21542:21575 ioctl c0306201 200001c0 returned -22
[  368.598474] binder: 21542:21575 got reply transaction with no transaction stack
[  368.598482] binder: 21542:21575 transaction failed 29201/-71, size 88-24 line 3046
[  368.625560] binder: undelivered TRANSACTION_COMPLETE
[  368.631052] binder: undelivered TRANSACTION_ERROR: 29201
[  368.636731] binder: send failed reply for transaction 3129, target dead
[  368.643764] binder: undelivered TRANSACTION_ERROR: 29201
[  368.649274] binder: undelivered TRANSACTION_ERROR: 29189
22:42:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x802)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  369.089212] binder: 21535:21557 got transaction to invalid handle
[  369.095753] binder: 21535:21557 transaction failed 29201/-22, size 0-0 line 3138
[  369.095984] binder: release 21534:21543 transaction 3125 out, still active
[  369.095988] binder: undelivered TRANSACTION_COMPLETE
[  369.097617] binder: release 21534:21578 transaction 3141 out, still active
[  369.097620] binder: undelivered TRANSACTION_COMPLETE
[  369.100773] binder: send failed reply for transaction 3125, target dead
[  369.100781] binder: send failed reply for transaction 3141, target dead
[  369.110469] binder: release 21579:21581 transaction 3143 out, still active
[  369.110473] binder: undelivered TRANSACTION_COMPLETE
[  369.111354] binder: release 21579:21581 transaction 3143 in, still active
[  369.111358] binder: send failed reply for transaction 3143, target dead
[  369.111837] binder: release 21579:21582 transaction 3145 out, still active
[  369.111841] binder: undelivered TRANSACTION_COMPLETE
22:42:25 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
set_tid_address(&(0x7f0000000140))

22:42:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x362000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$void(r3, 0x5450)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000"], 0x5c, 0x0, &(0x7f0000000280)="2dc1e8be8826500de63f258142c3cb98793976a48bd3aad4c3c1074f06545cfcd0b0fe25189e5e14a5911540555e3e3ea42433c2470279db9c5c044c39e8dfa29a8a7a94ad1db8c3cb0292825bac950425e052160ed1f272c82e15cc"})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x4, 0x9, 0x400}}, 0x28)
fsetxattr$security_capability(r2, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x6, 0x401}, {0x1ff, 0x400}], 0xffffffffffffffff}, 0x18, 0x0)

22:42:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x6, 0x2)
getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="01")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404100000000000000000000000000000000000000001000"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fff7ff7f"], 0x1, 0x0, &(0x7f00000000c0)='-'})
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x0, 0x0})

22:42:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r4, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2400, 0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = mmap$binder(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3ff)
r9 = mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
r10 = mmap$binder(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x88, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03630840", @ANYRES64=r8, @ANYBLOB="086310400000000000000000000000000000000003630840", @ANYRES64=r9, @ANYBLOB="00634040020000000000000000000000000000000000000011000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r7, @ANYBLOB="000000000000000000000000852a62730010000003000000000000000000000000000000852a6277001000000100"/60], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0363084050016f0851238a83c2d99a0f8ad72f1ef6633915a1d1e3ab5a3eadf703345a4301d43cf28cf6", @ANYRES64=r10], 0xa6, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d5c356e32e66fd2fd301b31b78e2d539c63f5455e5ed20af59886e0c11ccbd0f948967a981320c563df8176a12e68ac44bcc131e3430470a56d43da6676723099df8e80d5184b456459b2bdddb6bfc9811f901bc1b28d5bac9423278e8a2e1fbfbe90a6189e91b1f4f86689f89f40519d23c537cac9aa8d8b3f53ef9757dfdfd3ba5b9dd985ed1d59df3b6988b802d1dd1bc237b3f9767afdab702ca428"})
r11 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r11, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x13, 0x0, &(0x7f0000000840)=[@free_buffer={0x40086303, r3}, @request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/244, 0xfffffffffffffe54, 0x0, 0x1f}, @fd={0x66642a85, 0x0, r11}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/151, 0x0, 0x1, 0x3a}}, &(0x7f0000000140)}}], 0x0, 0x0, 0x0})
r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r12, 0x40284504, &(0x7f0000000200)={0x76, 0xa, 0x1, 0xf6d6, "b4718c09a506710192063aea35eda9004719d77b8ea67536252af2bc4d7be404"})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
fdatasync(r1)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xa40a, 0x1, 0x3, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x8010, r2, 0xfffffffffffffffe)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  369.114931] binder: send failed reply for transaction 3145, target dead
[  369.142516] binder: undelivered TRANSACTION_ERROR: 29201
[  369.204244] binder: undelivered TRANSACTION_ERROR: 29201
[  369.218715] binder: undelivered TRANSACTION_ERROR: 29201
[  369.232200] binder: 21585:21592 unknown command 5
22:42:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000080)={@ipv4={[], [], @remote}}, &(0x7f0000000180)=0x14)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040f3000000000000000000e25d074644c07100000000000000000000000000000000000000d78d702a0868e592f50204d452d6d49f00e924000000000000000000000000dc000000000000a80820b3000000f8ffffff0000"], 0x0, 0x0, 0x0})
accept$unix(r3, &(0x7f0000000200), &(0x7f0000000280)=0x6e)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x7530}}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='security.s\x00', &(0x7f0000000140)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29, 0x2)

22:42:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000380)="e271a6cc1f8e791657232d8916ca0d95a812b402f93c6d3cf5f2742c0bc240c04d9c9e4e86017a5905dc8814794654167dacfe68e9fe3396943ce237d903513998b274086d17f12bbabd0cf06563a11de55e0a16e48a0d81553f692a115dcb2bf740fa366a44b4e3c3ed27775b4c37ad46032e5de3839d92a01d929fb8f394a962f36aad1bfab0629849e265d47d62569c7512bee67d46f019fc5d42a8e457e72c8e71e7a11974f5002661e40867ff0a2f1c8637adce10", &(0x7f00000000c0)=""/19}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f0000000240)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100000000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00')
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
sync_file_range(r1, 0x8, 0x6, 0x3)

22:42:25 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/bnep\x00')
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0x108, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x59}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2f7f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa24}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfee5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x6, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x108}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x66122c275f5db6d4}, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8480805}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0xf0, r6, 0x703, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="8cc77147d608c495023db1d07b150980"}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8c6d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}]}, 0xf0}}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c630000b7879d704d1ec458ad202302249e6dbea279e6540bd7842145bc92d018f39b3ad07bd5d89fa77e761517f98c66d5e31e535ef9bd8e202fd61d0eb882b9c18fd2b29f4a2d5afaebe5"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:25 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000e9ffffff00008c9b46a200"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x2, 0xffffffffffff2e48})
r4 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r4}, {0xffffffffffffffff, 0x1080}], 0x2, 0x4f)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xe5, 0x0, 0xffff, "d6d697af61862c87d98ef0a31534d9e6", "dafb563f1bf89dcb05d183701f9da7d73a22268978725714107dcd535a54df6a0735bcd814fac6d9872d41cb12e4e1e095564caf4bdc007e55744e58d332645a1ea2477e5c3ccce07f6b8e2299f526a6cad1bcec1ffa9d07d49fcc2934031706785fa5e1bbd4a82efcacb86ffa4cc608a0dc7558823c7edadbe34777ae57b4231f6eac6e5b5c764b7f360d0fd6f2d77deaf9fc31886665021b1a1b07ece2a02cd6430d84e01e83bc64b15e83ee5e5e5d54211c517e9870e8692c7ec809ed48ba1902ed59e003c7e6d3815a62423d848b"}, 0xe5, 0x0)

[  369.232210] binder: 21585:21592 ioctl c0306201 200001c0 returned -22
[  369.236828] binder_alloc: binder_alloc_mmap_handler: 21589 20ffb000-20fff000 already mapped failed -16
22:42:25 executing program 5:
syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x100000000, 0x40000)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
alarm(0x3)
r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0xa9cb, 0x20000)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080))
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x5, 0x7, 0x1, 0xffffffffffffff8a, 0x4, 0x5, 0x5, 0x87d, 0xc3c, 0x3})

22:42:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x8, 0xffffffffffff0001, {0x53, 0x60, 0x7ff, {0x4, 0x80000001}, {0x5, 0x6}, @const={0x100, {0x3ff, 0x6d67, 0x7, 0x9}}}, {0xf73cb38326958086, 0x1, 0x10000, {0x3, 0x100000001}, {0x5, 0x3}, @const={0x0, {0x8000, 0x19cc, 0x2, 0xfffffffffffff047}}}})
r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0)
fcntl$setstatus(r4, 0x4, 0x6c00)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x80000000, 0xe7, 0x9c, 0x8}, 0x10)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000053ea0000000000000000005cbbc02fd7ad750238ee35d89300"/81], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  369.237272] binder: 21589:21595 ioctl 54a0 0 returned -22
[  369.238104] binder: 21589:21595 BC_FREE_BUFFER uffffffffffffffff no match
[  369.238112] binder: 21589:21595 BC_INCREFS_DONE u0000000000000000 no match
[  369.238118] binder: 21589:21595 BC_FREE_BUFFER uffffffffffffffff no match
22:42:25 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0)
pipe(&(0x7f0000000040))

[  369.238125] binder: 21589:21595 got transaction to invalid handle
[  369.238132] binder: 21589:21595 transaction failed 29201/-22, size 72-24 line 3138
[  369.239266] binder: 21589:21595 BC_FREE_BUFFER u0000000000000000 no match
[  369.239280] binder: 21589:21595 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  369.241920] binder: BINDER_SET_CONTEXT_MGR already set
[  369.241928] binder: 21590:21594 ioctl 40046207 0 returned -16
[  369.241975] binder_alloc: 21590: binder_alloc_buf, no vma
[  369.241992] binder: 21590:21599 transaction failed 29189/-3, size 0-0 line 3284
[  369.242352] binder: 21590:21594 got reply transaction with no transaction stack
[  369.242359] binder: 21590:21594 transaction failed 29201/-71, size 0-0 line 3046
[  369.242753] binder: 21586:21596 unknown command 1094738688
[  369.242761] binder: 21586:21596 ioctl c0306201 20000440 returned -22
[  369.243023] binder: 21586:21596 unknown command 2147481599
[  369.243030] binder: 21586:21596 ioctl c0306201 200001c0 returned -22
[  369.244022] binder: 21586:21596 Release 1 refcount change on invalid ref 0 ret -22
[  369.252777] binder: 21586:21601 unknown command 1094738688
[  369.252787] binder: 21586:21601 ioctl c0306201 20000440 returned -22
[  369.254197] binder: BINDER_SET_CONTEXT_MGR already set
[  369.254206] binder: 21586:21596 ioctl 40046207 0 returned -16
[  369.261300] binder: 21586:21603 unknown command 2147481599
[  369.261309] binder: 21586:21603 ioctl c0306201 200001c0 returned -22
[  369.261708] binder: 21586:21601 Release 1 refcount change on invalid ref 0 ret -22
[  369.336761] binder: BINDER_SET_CONTEXT_MGR already set
[  369.336770] binder: 21611:21620 ioctl 40046207 0 returned -16
[  369.337730] binder_alloc: 21585: binder_alloc_buf, no vma
[  369.337748] binder: 21611:21620 transaction failed 29189/-3, size 0-0 line 3284
[  369.338033] binder: BINDER_SET_CONTEXT_MGR already set
[  369.338041] binder: 21612:21618 ioctl 40046207 0 returned -16
[  369.338149] binder_alloc: 21586: binder_alloc_buf, no vma
[  369.338166] binder: 21612:21618 transaction failed 29189/-3, size 0-0 line 3284
[  369.345194] binder: BINDER_SET_CONTEXT_MGR already set
[  369.345201] binder: 21619:21624 ioctl 40046207 0 returned -16
[  369.345285] binder_alloc: 21590: binder_alloc_buf, no vma
[  369.345302] binder: 21619:21624 transaction failed 29189/-3, size 0-0 line 3284
[  369.393442] binder: 21612:21634 got reply transaction with no transaction stack
[  369.393451] binder: 21612:21634 transaction failed 29201/-71, size 88-24 line 3046
[  369.402373] binder: BINDER_SET_CONTEXT_MGR already set
[  369.402381] binder: 21633:21637 ioctl 40046207 0 returned -16
[  369.402474] binder_alloc: 21585: binder_alloc_buf, no vma
[  369.402495] binder: 21633:21637 transaction failed 29189/-3, size 65956404015398912-0 line 3284
[  369.417156] binder: 21619:21642 got reply transaction with no transaction stack
[  369.417165] binder: 21619:21642 transaction failed 29201/-71, size 0-0 line 3046
[  369.686419] binder: undelivered TRANSACTION_ERROR: 29189
[  369.691942] binder: undelivered TRANSACTION_ERROR: 29201
[  369.698104] binder: undelivered TRANSACTION_COMPLETE
[  369.703209] binder: undelivered transaction 3149, process died.
[  369.709346] binder: undelivered TRANSACTION_COMPLETE
[  369.715246] binder: undelivered TRANSACTION_ERROR: 29189
[  370.032610] binder_alloc: binder_alloc_mmap_handler: 21589 20ffb000-20fff000 already mapped failed -16
[  370.042948] binder: 21589:21647 ioctl 54a0 0 returned -22
[  370.049753] binder: 21589:21595 BC_FREE_BUFFER uffffffffffffffff no match
[  370.056934] binder: 21589:21595 BC_INCREFS_DONE u0000000000000000 no match
[  370.057476] binder: 21589:21648 BC_FREE_BUFFER u0000000000000000 no match
[  370.057490] binder: 21589:21648 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
22:42:26 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x20)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000c100000000000000000000000000000000000000000000000000000000002800000046ba000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0xffffffff, 0x80000000, 0x3, 0x64b, 0x56dc, 0x3c}, 0x1c)

22:42:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/de\x03\x00\x00\x00\x00\x00\x00\x00#\x00', 0x0, 0x803)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01005330"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:26 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40, 0x0)
openat$cgroup_type(r2, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
getdents(0xffffffffffffffff, &(0x7f0000000280)=""/31, 0xfffffffffffffd96)
getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  370.079018] binder: 21589:21595 BC_FREE_BUFFER uffffffffffffffff no match
[  370.086032] binder: 21589:21595 got transaction to invalid handle
[  370.092303] binder: 21589:21595 transaction failed 29201/-22, size 72-24 line 3138
22:42:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0xd, 0x0, &(0x7f0000000200)="2da99cd27cec5b9d2c84129059"})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$LOOP_SET_FD(r4, 0x4c00, r5)

[  370.130343] binder: undelivered TRANSACTION_ERROR: 29201
[  370.139156] binder: undelivered TRANSACTION_ERROR: 29189
[  370.144097] binder_alloc: 21619: binder_alloc_buf, no vma
[  370.144116] binder: 21619:21642 transaction failed 29189/-3, size 0-0 line 3284
22:42:26 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0063b77b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ce1e900"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x2}], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xec, 0x0, &(0x7f0000000280)=ANY=[], 0xfffffffffffffe0a, 0x0, 0x0})

22:42:26 executing program 4:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/dev_snmp6\x00')
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  370.145803] binder: 21612:21634 got transaction with invalid parent offset or type
[  370.145829] binder: 21612:21634 transaction failed 29201/-22, size 88-24 line 3454
[  370.145836] binder: send failed reply for transaction 3166 to 21612:21634
[  370.178315] binder: BINDER_SET_CONTEXT_MGR already set
[  370.178326] binder: 21667:21668 ioctl 40046207 0 returned -16
[  370.178432] binder_alloc: 21612: binder_alloc_buf, no vma
22:42:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000009b1796e644db1918522b2e1760dbd4df7ac05208effdbd6490aa00eb4b3dde61e25d72e888299fade0e98def0789a6a544589058fdbe00d3565568341ebae13088e768cb954fd2615e485ba5d10de07736faea64696c6a81b3bb0a8b3d"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\f#\x00\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:26 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000000)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5ff7f000000000000")
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r8, &(0x7f00000000c0)=""/31, 0x10000067f)
connect$unix(r8, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r9, &(0x7f00000000c0)=""/31, 0x10000067f)
poll(&(0x7f0000000080)=[{r6, 0x20}, {r7, 0x450}, {r5, 0x5021}, {r0, 0x4}, {r9, 0x4501}], 0x5, 0x80000001)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7b7fd2dafb4ff48fc5dc2bb99a2416ec58bd1d8441c43f75d60c88b7d326eee001a92d63d451f2db00c9420d247a207c24b01ce58161fa0d44cc1ac9e2"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:26 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40087}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0xfffffffffffffffb, 0x81}, {0x0, 0x3}, {0x6, 0x6}]})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x40042, 0x103)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  370.178451] binder: 21667:21668 transaction failed 29189/-3, size 0-0 line 3284
[  370.180562] binder: 21667:21668 got reply transaction with no transaction stack
[  370.180570] binder: 21667:21668 transaction failed 29201/-71, size 88-24 line 3046
[  370.190046] binder: BINDER_SET_CONTEXT_MGR already set
[  370.190054] binder: 21667:21668 ioctl 40046207 0 returned -16
[  370.190936] binder_alloc: 21612: binder_alloc_buf, no vma
[  370.190955] binder: 21667:21670 transaction failed 29189/-3, size 0-0 line 3284
[  370.196143] binder: 21633:21673 transaction failed 29189/-22, size 65956404015398912-0 line 3138
[  370.199708] binder: 21667:21670 got reply transaction with no transaction stack
[  370.199718] binder: 21667:21670 transaction failed 29201/-71, size 88-24 line 3046
[  370.259254] binder: BINDER_SET_CONTEXT_MGR already set
[  370.259262] binder: 21678:21683 ioctl 40046207 0 returned -16
[  370.259346] binder: 21678:21683 unknown command 2075616000
[  370.259353] binder: 21678:21683 ioctl c0306201 20000440 returned -22
[  370.259643] binder: 21678:21683 IncRefs 0 refcount change on invalid ref 2 ret -22
[  370.260770] binder: BINDER_SET_CONTEXT_MGR already set
[  370.260778] binder: 21680:21684 ioctl 40046207 0 returned -16
[  370.260885] binder_alloc: 21612: binder_alloc_buf, no vma
[  370.260903] binder: 21680:21684 transaction failed 29189/-3, size 0-0 line 3284
[  370.261158] binder: 21680:21684 unknown command 8972
[  370.261165] binder: 21680:21684 ioctl c0306201 200001c0 returned -22
[  370.261998] binder: 21680:21684 got reply transaction with no transaction stack
[  370.262006] binder: 21680:21684 transaction failed 29201/-71, size 88-24 line 3046
[  370.270318] binder: BINDER_SET_CONTEXT_MGR already set
[  370.270327] binder: 21680:21684 ioctl 40046207 0 returned -16
[  370.270383] binder_alloc: 21612: binder_alloc_buf, no vma
[  370.270401] binder: 21680:21685 transaction failed 29189/-3, size 0-0 line 3284
[  370.270624] binder: 21680:21685 unknown command 8972
[  370.270631] binder: 21680:21685 ioctl c0306201 200001c0 returned -22
[  370.272245] binder: 21680:21685 got reply transaction with no transaction stack
[  370.272254] binder: 21680:21685 transaction failed 29201/-71, size 88-24 line 3046
[  370.298717] binder: 21682:21689 unknown command -623739013
[  370.298726] binder: 21682:21689 ioctl c0306201 200001c0 returned -22
[  370.309415] binder: BINDER_SET_CONTEXT_MGR already set
[  370.309423] binder: 21682:21700 ioctl 40046207 0 returned -16
[  370.309531] binder_alloc: 21682: binder_alloc_buf, no vma
[  370.309550] binder: 21682:21695 transaction failed 29189/-3, size 0-0 line 3284
[  370.314846] binder: 21678:21697 unknown command 0
[  370.314855] binder: 21678:21697 ioctl c0306201 20000080 returned -22
[  370.627078] binder: send failed reply for transaction 3180 to 21682:21689
[  370.634160] binder: undelivered TRANSACTION_COMPLETE
[  370.639439] binder: undelivered TRANSACTION_ERROR: 29189
[  370.645333] binder: undelivered TRANSACTION_ERROR: 29189
[  370.651162] binder: undelivered TRANSACTION_ERROR: 29201
[  370.656655] binder: undelivered TRANSACTION_ERROR: 29189
[  370.662205] binder: undelivered TRANSACTION_ERROR: 29201
[  370.667774] binder: undelivered TRANSACTION_ERROR: 29189
[  370.673227] binder: undelivered TRANSACTION_ERROR: 29189
[  370.678790] binder: undelivered TRANSACTION_ERROR: 29189
[  370.684305] binder: undelivered TRANSACTION_ERROR: 29189
[  370.689931] binder: undelivered TRANSACTION_ERROR: 29201
[  370.695514] binder: undelivered TRANSACTION_ERROR: 29189
[  370.701097] binder: undelivered TRANSACTION_ERROR: 29201
[  370.706758] binder: undelivered TRANSACTION_COMPLETE
[  370.712431] binder: undelivered TRANSACTION_ERROR: 29201
[  370.717956] binder: undelivered TRANSACTION_ERROR: 29190
[  370.723560] binder: undelivered TRANSACTION_ERROR: 29201
[  370.729052] binder: undelivered TRANSACTION_ERROR: 29189
22:42:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xffffffffffffff88, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000600000000200000000c50000000deffffff00005a000000000000003e980000000000c98b86256900"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="008a3750e351083915b6ec367a23b6e8280000004be5472305070245b40b48dbfaf529308b87844db7f4b3e62470b1da6f5af3c420d73d283e254439007e2f48ca7eec7a858f2fe7ced96a4d3b63dd2812c9ee5a51be135015f816a539ec0394b514251f03e8c7009af6e9844598fbafb0fe7f394f4c136b09c26c6b46bb3a09f5e4e8bb5be48fe33a43f91d4e510e730a5be7e39d96219c90"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000080)=0x2ee, 0x4)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000200)={0x37f44511, {{0xa, 0x4e20, 0x3, @local, 0x9}}}, 0x88)

22:42:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0xa0081, 0x0)
ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f0000000140))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0006004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da3b8a0c514c7eb03d8ac59417c8d968c403b161babfcc425d21397b64c9c50d277628660d540e8ad3a1e7ef67409d43823284302c9e3241c0f25928907c009ae8680e0700"/150], 0x0, 0x0, 0x0})
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5)
r6 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="dd08ba645e80a3681cad2bd97ffd0b9895fed3f3fc58", 0x16, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(r9, r9, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r10, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, <r11=>0x0}, &(0x7f00000002c0)=0xc)
keyctl$chown(0x4, r6, r9, r11)
pipe2(&(0x7f0000000080), 0x82800)
r12 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r12, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000680)=[@reply_sg={0x40486312, {0x4000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/84, 0x0, 0x2, 0x36}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/140, 0x1a, 0x2, 0x30}}, &(0x7f0000000640)}, 0x1200}], 0xffffffffffffff23, 0x0, &(0x7f0000000480)="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"})

22:42:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000001500"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000200)="53d86cf802dd5547ec333006bc6d8ebb7807cbcf64686400ff40e5c177b8596d24f852f3bfb51fc7a4a4ca33fb0e1741424c5aa1b22a6d2ca9d5c8cf1a80a24d85de1e0568437d4a0ebc1ab5530687c88f5aa2b539dcc408103168b35ffb29e49f9a8c18d859dc073b37dee521a91716b41774fd9177aecb8bd9b12718e302127ef4e6a5fea84738ac3e4153e623234d18cc1abdad1db01e32ede40f00c3d991f322a175185df39765fa9d0a01a2117bce620fab1a8bf669c2c4913c2a1652ac610f90f32ec1d1cf1fe3884704", 0xcd, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000001800)=@generic={0x0, 0x0, 0x1})
r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r4)
keyctl$instantiate_iov(0x14, r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="b2dbaa4abd9cb68f5c23dde032c62eb725aa1bdef5fca27b4afccd10e31d765971bdbf1bb39208e8e8360e1c5ac872de7cb2818006dde569e7ae5c5aabad2512e2fe4ef872b299cbca49c1d76f1211853921d284fa2ee16a0a7bd61a0e1ef882e36249303993aa17245375cec9a0dc9941edc621bdbfe83ef2d992a5ac0864c77498ae47a54ab4298759", 0x8a}, {&(0x7f0000000480)="f48ead7e5aad3df60083e085f3127d393c88cb94cf2e2f765d15d372efd8a97a8b4f7f2b163a5436ac29366e1f606e26b95d04a05983f2ab680523c274989773c1c83d836f1938451926b3008b4be5b74bd2dc428ab729fb677e0a5c59ad786ead8a8c424f5c951d732314d385a8450f6e30833be0a2a515ea351e751f94c2367554b6e9", 0x84}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="141fec4a75b441ae31d91aeeeaf921d631bbe5b9b10fd8b81e48bd9b225f2f86be81c3d481fc70d11bdeed6290a9900f28482a6bcbdfba8316f0858fbf26d3b043e0dc4f35b88a88c8f3f25a867e7249d168e4740d7df675b8318bcac26eae27eb62d614f74f80bd582acadb3c7442412643367d9e35483420d60cb375aa1e3ece848518392c0d6cf7e3328a9e6753aa6de8df6b0c9ddf97269d4e45748c607ce152a6bc74f53d93125cdc02ffb7e9e65fcc66e15031a9afdcff88767d23ac370d", 0xc1}, {&(0x7f0000001640)="df4394e4ad9e768c67f46cfcc74365cf14bcaf117be402610b8735470f5f0c0cace42e6a4f78be6bf66d93d0a76d3069444bea53b2686d54a86e17490118c8511f85187528e26771cd0bc6a9b7e9c7e2e532c9ef147f4f79bd3eed50d9d909e939e1fa88ba88f70c8799d9101e148350325150a97c5533e0d29afc426fb88c098a3e865b9a68e9330c90482c5e325498ab4f165967194b03cb176529981a8067dfe402a588f78ded79afd221b04b4b6b51a360721299c0463492eb9ff440f6fad3ed85ba1dbd", 0xc6}, {&(0x7f0000001740)="43f07689a45034042024cfc537208bb6549f23bce3d5a975cab500bdea6584c721e0cb6a96d85f574fe9922cf0c00a117d85157c10cee2a7f6509eb04c9811cbdd82f2f5c9bd4e755d527adf39c7d78a39e332b52cdc94de04cbefb1c2e70553499c31c0a92cb4845ee74b67a378fe018e99b849afc9e0be823098ff433a8447a6b86f632ae65f573d8d84d2bb7c8fd246248b7713b398f2e6ee5a532b59c57d49aaa26c13b2269e3b2764bd254f4267019e2c52", 0xb4}, {&(0x7f0000000180)="54033317d22c754399e588f88e03c9ae6352ea3135bdc399c430515d4c4a7cc94decfe4832810836fceded96e4", 0x2d}], 0x7, r4)
r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x155, 0x0, 0x0})
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r7, &(0x7f00000000c0)=""/31, 0x10000067f)
preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000080)=""/42, 0x2a}], 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="396c7fa895211c62f6d2440e112fcb13373b5fe6861f7e76efcd22f8f37597d56e0ef04b4cc562ce3ccdbe8bf01de37177a3466e214060ad0f80e86fe083cad12ab5d6f62a35b4a0"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:27 executing program 5:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002400)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000002780)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002740)={&(0x7f0000002c80)=ANY=[@ANYBLOB="70e36788", @ANYRES16=0x0, @ANYBLOB="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"], 0x2c0}}, 0x24004804)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r5=>0x0})
ioctl$int_in(r1, 0x5421, &(0x7f0000002480)=0x679c)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
pipe2(&(0x7f00000028c0)={<r7=>0xffffffffffffffff}, 0x800)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002940)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000002c40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000002c00)={&(0x7f0000002980)={0x268, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x12c, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @empty, 0x9a}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @mcast1, 0xfffffffffffffffd}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2016}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe46e00000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6e27ed95}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68da4667}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x94, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x22}, 0x23}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8ac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x268}}, 0x4008004)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)={0xf, 0x1, 0x9, 0x8, 0x7a, r0, 0x6e7, [], 0x0, r6, 0x2, 0x5}, 0x3c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002880)={r9, &(0x7f0000002800)="a98cfec216ff5991e051403eefcf8474da55aca42f3a300e948508c5159dc921b45da69b6a1f046ea7bed7926e0cb6914777cf8171a509e2e5257622c1f9c16ce34671c26c65a67c740cde305d80069d1776c946826ccb5acf6b4dee48f3f62405c180cf216dba010373f4e718d4195f5c7b9bf2f6f673b7ba6405"}, 0x10)
sendmsg$nl_route_sched(r3, &(0x7f00000023c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000000100)=@newtfilter={0x2248, 0x2c, 0x200, 0x70bd2a, 0x25dfdbfe, {0x0, r5, {0xd7e87266a935f895, 0xfff1}, {0x1801b, 0x10}, {0x3, 0x8}}, [@TCA_RATE={0x8, 0x5, {0x8, 0x7ff}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0xd8, 0x2, [@TCA_FW_ACT={0x44, 0x4, @m_csum={0x40, 0xd, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x7f, 0x1}, 0xa}}}, {0xc, 0x6, "1e35c1f971"}}}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'teql0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0x1}}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x100000000, 0x3, 0x500000000000, 0x52fe, 0xffff, {0xff, 0x0, 0x7, 0x6, 0x8, 0x3f}, {0x0, 0x2, 0x9, 0x5, 0x3ff, 0xfffffffffffffffe}, 0x9, 0x20, 0x5}}}, @TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}}]}}, @filter_kind_options=@f_cgroup={{0xc, 0x1, 'cgroup\x00'}, {0x2130, 0x2, [@TCA_CGROUP_ACT={0x1044, 0x1, @m_nat={0x1040, 0xc, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x8000, 0xffffffffffffffff, 0x5, 0x7}, @local, @loopback, 0xffffff00, 0x1}}}, {0x1004, 0x6, "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"}}}}, @TCA_CGROUP_ACT={0x1044, 0x1, @m_nat={0x1040, 0x12, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x10000000, 0x9, 0xfffffffffffffffd}, @loopback, @broadcast, 0xff, 0x1}}}, {0x1004, 0x6, "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"}}}}, @TCA_CGROUP_EMATCHES={0x34, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_CMP={0x1c, 0x7ff, {0x2, 0x1, 0x6, 0x0, {0xa2, 0x7, 0x100, 0x4, 0x3, 0x3, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x70, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x7, {0x6, 0x3, 0x101, 0x0, {0x0, 0xff, 0x33c9bf44, 0x100000000}}}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, @TCF_EM_NBYTE={0x1c, 0x80000001, {0x2, 0x2, 0xffff, 0x0, {0x5, 0x4, 0x2, "ca2e6a19"}}}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPSET={0x14, 0x864, {0x1, 0x8, 0x1c, 0x0, {0x4, 0x3, 0x8}}}}]}]}}]}, 0x2248}, 0x1, 0x0, 0x0, 0x20000011}, 0x4048090)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
getpeername$packet(r7, &(0x7f00000024c0), &(0x7f0000002500)=0x14)

[  370.917592] binder: release 21654:21655 transaction 3164 out, still active
[  370.926270] binder: undelivered TRANSACTION_COMPLETE
[  370.932907] binder: release 21654:21655 transaction 3182 out, still active
[  370.940408] binder: undelivered TRANSACTION_COMPLETE
[  370.959609] binder: send failed reply for transaction 3164, target dead
22:42:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x40, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)
r4 = getpgid(r3)
r5 = syz_open_procfs(r4, &(0x7f0000000480)='attr\x00u\x00t,n\ase\'=\x87\x8fi\xb3\xf7\xf7~\x02\x00\x00\x00\x00\x00\x00\x00\xe8q\xa1\x0e\xa4\xb3u\xbaZ\xa3Z#}\b\x00\x00\x00w\xdcM$\x9c\x91\xad\xd06\xe6]^\x89\xe1\xdbE\xb7\xcb\x1fP\xb4@\x0e\xba\xef\x8f\x90\x1a\xa5/6:\xefI\x02\x00\x00\x00\xb2+\x1bB\x85\xe6z\x92\xf8\xf0,\xc4\x0f#\xeet\x02\xd2v\x8ef\a\x17V\xd5\"\xcb\xf8\xf5\x0fsv6\xed\xf4l\xa2~\xef\xc5\x81F\r\x9b\xcb\x9e\xe2P\x006\x01N\x89\xde\x0fr\xcb\xd3\xddg\xfb\x17\xc1\xf9\x15\xbbr\x19]\xf2\xf5\"\x85\x9en\x89\xf0\xfd\x01\bX\x93\xc2\x96\xd7sC\xd0E\xb6\xda\x95g\xb8\x12\x9aV\xdc\x14\xc5d\x7f\xaa\xbdV\x9e\xa3\xa6\xfc\a\xf2\x94\xef\xf5\x11\x88\xfb\xfa\xa3Y\xa1\x9f\xef\f\xb5\xb1\x1a^\xbbz]\xe3\xd3\xac\xd9nA\x91^\xfd\xa6\xaf,\"\xf3\xb6\x05\x8c\xf4\xad\xba%\a\xcd\x15P\xe5\xe8\v\xa6\x18\xaa\xe3\xf1\x95M\xeeJ\xe1_+\xceB\xb8x\x16\xd3\xfd~\n\xad\t\x1fU\xca\xcc\xc5\xf8\x95K\x87\xf0\xa3\x8f\xb5\xf1\x86\x8e\xe7\x7f\xd31\xbc\xf8\xa7\xc4\x10\xb3\xb98\xc5\xa7\xfaz\x1f\xa2\xab\xb1\xb1Q =&\t\'8oGm\xff k5\xd0})\xec`\xd0\x9c\xc3\x19\t\x1eq\x987\x9b\xfaz\xc0\xfb\xb7\xc1\xd8\x88\xb4B\xd6\xa7uVW=\xea\x16k\xf2u\x85\xaa\xca\x0f\x7fbq\xc1\x17\xe4\xe5\xff\x94#')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$VT_WAITACTIVE(r5, 0x5607)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

[  370.963984] binder_alloc: 21709: binder_alloc_buf, no vma
[  370.964003] binder: 21709:21713 transaction failed 29189/-3, size 0-1513209474796486656 line 3284
[  370.989427] binder: 21710:21719 unknown command 1345817088
[  370.989444] binder: 21710:21719 ioctl c0306201 200001c0 returned -22
[  370.989786] binder: 21711:21715 ioctl c0306201 20000440 returned -14
[  370.990623] binder: 21711:21715 ioctl c0306201 200001c0 returned -14
[  370.995412] binder: 21711:21721 ioctl c0306201 20000440 returned -14
[  371.002328] binder: BINDER_SET_CONTEXT_MGR already set
[  371.002337] binder: 21710:21719 ioctl 40046207 0 returned -16
22:42:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x100000001)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x4)

22:42:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x20011, r2, 0x2000)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000140)="fbc0a0a8bd8bff022b17c9fe2958c3cfe339b09c357469ea3e8b4ee072ed3bd5177a31a6a79af097803dee6d2c62c447a9fa11ba03d172a86ab9e91f851916ad3f022c", 0x43)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
socket$inet(0x2, 0x80000, 0x7)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$KDMKTONE(r4, 0x4b30, 0x9)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40000, 0x0)
close(r5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000800000000000009e75cc31237cbcd532df8b000000000000000000000800"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)=0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x38)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r5, 0x0, 0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000180)='net/unix\x00')
r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000200)=""/192)
r9 = dup2(r7, r8)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r10, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r11 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r12 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r12, 0x80284504, &(0x7f0000000200)=""/192)
r13 = dup2(r11, r12)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r13, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r14, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r15 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r16 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r16, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r16, 0x80284504, &(0x7f0000000200)=""/192)
r17 = dup2(r15, r16)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r17, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r18, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r19 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r20, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r20, 0x80284504, &(0x7f0000000200)=""/192)
r21 = dup2(r19, r20)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r21, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r22, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
getgroups(0x7, &(0x7f0000000700)=[<r23=>r10, r14, r18, 0x0, 0x0, 0xffffffffffffffff, r22])
r24 = gettid()
ptrace$setopts(0x4206, r24, 0x0, 0x0)
tkill(r24, 0x38)
ptrace$cont(0x18, r24, 0x0, 0x0)
ptrace$setregs(0xd, r24, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r24, 0x0, 0x0)
r25 = getuid()
r26 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r27 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r27, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r27, 0x80284504, &(0x7f0000000200)=""/192)
r28 = dup2(r26, r27)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r28, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r29, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r30 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r31 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r31, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r31, 0x80284504, &(0x7f0000000200)=""/192)
r32 = dup2(r30, r31)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r33=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r32, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r33, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r34 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r35 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r35, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r35, 0x80284504, &(0x7f0000000200)=""/192)
r36 = dup2(r34, r35)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r37=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r36, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r37, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r38 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r39 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r39, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r39, 0x80284504, &(0x7f0000000200)=""/192)
r40 = dup2(r38, r39)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r41=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r40, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r41, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
getgroups(0x5, &(0x7f0000000740)=[<r42=>r29, r33, 0x0, r37, r41])
r43 = gettid()
ptrace$setopts(0x4206, r43, 0x0, 0x0)
tkill(r43, 0x38)
ptrace$cont(0x18, r43, 0x0, 0x0)
ptrace$setregs(0xd, r43, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r43, 0x0, 0x0)
r44 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r44, &(0x7f00000000c0)=""/31, 0x10000067f)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={<r45=>r43, r44, 0x0, 0xd, &(0x7f0000000780)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r46=>0x0})
r47 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r47, &(0x7f00000000c0)=""/31, 0x10000067f)
fstat(r47, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r48=>0x0})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000900)=<r49=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r50=>0xffffffffffffffff})
getsockopt$sock_cred(r50, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r51=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r51, 0x0)
lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, <r52=>0x0})
r53 = gettid()
ptrace$setopts(0x4206, r53, 0x0, 0x0)
tkill(r53, 0x38)
ptrace$cont(0x18, r53, 0x0, 0x0)
ptrace$setregs(0xd, r53, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r53, 0x0, 0x0)
r54 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r55 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r55, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r55, 0x80284504, &(0x7f0000000200)=""/192)
r56 = dup2(r54, r55)
lstat(&(0x7f0000000480)='\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r57=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r56, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r57, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
r58 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r58, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r59 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r59, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$sock_FIOGETOWN(r59, 0x8903, &(0x7f0000000a00)=<r60=>0x0)
r61 = getegid()
r62 = fcntl$getown(0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r63=>0xffffffffffffffff})
getsockopt$sock_cred(r63, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r64=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r64, 0x0)
sendmsg$unix(r6, &(0x7f0000000b40)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)="3e43eeb2bb3d506c58f5ae14850cbcb4e22e13b8fe2f278da1202c97f9efdbab33d1ed2c11e4efc908b479c34086b7e5e6d0644141b41ae60ee75740f18f13680687575a7f6805a12c668864b5147a62ec5558a5e059c6c2c4fb0ce94e0c500e5b0e48baf49858c84ade632700b30a07916ebcac9fc4d43275494b4069b664df220d7b", 0x83}, {&(0x7f0000000280)="63fa7fd56ffee8dd1123eb390b6ae9e55df4ec8f95bf16fc1e81f43ebf169aea88bb4ba633aeed", 0x27}, {&(0x7f0000000480)="f8596bd54ce1e0ede581ad41828503f37c91a2c8538afb391a2686481fd332afa685d4f57a74f7d9c493f920947b29313496b27c9b329267cd3986acaea5163e6caaa7f067d62cd3c027b63bbc48112f83c380a29ca3ec22ff45a073854799ca5d31e2e0a954e92c8b75acd7f459e8d702d09c61be58d58fe10542ace06348b5c91619bbe32688ced02c3c21d5c975c16ea49afa76cc2fac11d61d7507f8e5c26ed3a4f3b7c0dd53749bb7e8a5c78cdaf75dcdb6bd7d32503b1894ab6317fd65edaf2dac9c4eb6a5a087f79533ba0c222338c0ec9ce4a0eb5220896e857ea767aebf0a43ae9264f110ce80e385a466ce716ede02e978daa584", 0xf9}, {&(0x7f0000000580)="6202230cc383e58da73caa563216bbea25cd9f9a1c55261ce7e7813a65f48e09a6dfc4b16e6487a88d63e1bf38a27b63f8ef293bf7bb55353cc1193d8748bbaeab57a9252715d9b809e0e50337533cedcf48313bee1477813f5bfc7d6d84e5af58bc44f10263bf44b1f5ec36adfc8238a986cf5188e092d4927b02f6274d0f389a12c21fe8f7e9743b866b01a7fd8d968fb5dca68b864e66e2edeafc2fb2b4ecc8adfe027cabd43003b7cc2bf8358629e41a7b23065d865f30082d354922af3df4617c6f090a15cbe6e50ad37168b08e9a3ec33137dadc3e908c17be5a", 0xdd}, {&(0x7f00000002c0)="1beb9ff2f3877a02a1b7caafd2a9607bfd98e6aeef051989abb3339058983235f700075223c913be5cb03a9ea190461aeab2107f1a0b3d", 0x37}], 0x5, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r42}}}, @cred={{0x1c, 0x1, 0x2, {r45, r46, r48}}}, @cred={{0x1c, 0x1, 0x2, {r49, r51, r52}}}, @cred={{0x1c, 0x1, 0x2, {r53, 0x0, r57}}}, @rights={{0x14, 0x1, 0x1, [r58]}}, @cred={{0x1c, 0x1, 0x2, {r60, 0x0, r61}}}, @cred={{0x1c, 0x1, 0x2, {r62, r64, 0xee00}}}], 0xf8, 0x1}, 0x20000000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000080)={0xfffffffffffffffc, 0x2, 0x81, 0x1, 0x4})

22:42:27 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/context\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = pkey_alloc(0x0, 0x1)
pkey_mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x100000a, r2)
pkey_free(r2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = fcntl$getown(r2, 0x9)
tkill(r3, 0x6)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  371.002628] binder: 21710:21719 unknown command 1920234593
[  371.002635] binder: 21710:21719 ioctl c0306201 200001c0 returned -22
[  371.028663] binder: 21709:21727 got reply transaction with no transaction stack
[  371.028672] binder: 21709:21727 transaction failed 29201/-71, size 88-24 line 3046
[  371.063053] binder: 21678:21733 unknown command 2075616000
22:42:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
getuid()
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa00c0000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x800)
mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  371.063062] binder: 21678:21733 ioctl c0306201 20000440 returned -22
[  371.063261] binder: 21678:21733 IncRefs 0 refcount change on invalid ref 2 ret -22
[  371.137974] binder: BINDER_SET_CONTEXT_MGR already set
[  371.138036] binder: 21738:21739 ioctl 40046207 0 returned -16
[  371.157633] binder: BINDER_SET_CONTEXT_MGR already set
22:42:27 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x443)
getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000080)={@local, @broadcast}, &(0x7f00000000c0)=0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
recvfrom(r3, &(0x7f0000000100)=""/4096, 0x1000, 0x80006023, &(0x7f0000001100)=@sco={0x1f, {0x8, 0x2, 0x6, 0x6, 0x9a, 0x5f}}, 0x80)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  371.157642] binder: 21737:21745 ioctl 40046207 0 returned -16
[  371.157794] binder_alloc: 21711: binder_alloc_buf, no vma
[  371.157813] binder: 21737:21745 transaction failed 29189/-3, size 0-8855593231168215553 line 3284
[  371.174834] binder: BINDER_SET_CONTEXT_MGR already set
[  371.174842] binder: 21744:21748 ioctl 40046207 0 returned -16
[  371.174984] binder_alloc: 21678: binder_alloc_buf, no vma
[  371.175001] binder: 21744:21748 transaction failed 29189/-3, size 0-0 line 3284
[  371.181183] binder_alloc: 21710: binder_alloc_buf, no vma
[  371.181203] binder: 21738:21739 transaction failed 29189/-3, size 0-524288 line 3284
[  371.228804] binder: 21744:21760 got reply transaction with no transaction stack
[  371.228814] binder: 21744:21760 transaction failed 29201/-71, size 0-0 line 3046
[  371.288734] binder: send failed reply for transaction 3182, target dead
[  371.762035] binder: undelivered TRANSACTION_ERROR: 29189
[  371.768375] binder: BINDER_SET_CONTEXT_MGR already set
[  371.773751] binder: 21709:21767 ioctl 40046207 0 returned -16
[  371.779873] binder_alloc: 21709: binder_alloc_buf, no vma
[  371.779955] binder: undelivered TRANSACTION_ERROR: 29201
[  371.780274] binder: 21709:21727 got reply transaction with no transaction stack
[  371.780281] binder: 21709:21727 transaction failed 29201/-71, size 88-24 line 3046
22:42:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl(r0, 0x1002008915, &(0x7f0000000100)="109ca50d5e7bf070000000a78c0844e944c542fcb06c74fd7aba6de318656db3012ac1ccad9f2a1fcaa5b4703c3a50d1234a7c345a9e2f56250e5b4fd43fee")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x103002, 0x80)
setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=@dstopts={0x33, 0x2, [], [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2b}]}, 0x20)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000000, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0xfffffffffffffffd, 0xba3f, 0x1})
mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xf)

22:42:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14)
lstat(&(0x7f0000000540)='./bus\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@empty, 0x4e21, 0x5, 0x4e20, 0x0, 0xa, 0x21865f1967b3bda3, 0x0, 0x0, r5, r6}, {0x5, 0x6, 0x8, 0x4, 0x101, 0x100, 0x1a, 0x4}, {0x200, 0x3ff, 0x5, 0x5}, 0x7, 0x6e6bb7, 0x1, 0x1, 0x2, 0x3}, {{@in6=@rand_addr="70f94795e806734c0f40d6b45700b77c", 0x4d6, 0x3c}, 0xa, @in6=@empty, 0x3505, 0x1, 0x0, 0xc3, 0x2, 0x8}}, 0xe8)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r7, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000200)=0x16, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  371.806340] binder: 21709:21713 transaction failed 29189/-3, size 0-1513209474796486656 line 3284
[  371.815641] binder: undelivered TRANSACTION_ERROR: 29189
[  371.823179] binder: undelivered TRANSACTION_ERROR: 29201
22:42:28 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xe8, 0x0, 0xc44, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x600000000000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x593}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000020}, 0x8000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
splice(r4, &(0x7f0000000040), r5, &(0x7f0000000080)=0x47, 0x2, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x1a4, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc77, 0x2b4, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c6320007f88a260ff46c1f4a8503cf9f1c927b0eafac88dcfb401644e0a843e5ace8d7aa6cd1cc7c562af608a19060526d0263d734cd1d5ccec1fe23009711d25"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'vlan0\x00', &(0x7f0000000200)=@ethtool_flash={0x33, 0x22, "17f79ca93fad0d728d020706c380756ee6a654887a862734568654cbe7484bd9cfbaee495c16fb7106736e73e71a687dcd3d840708408f7eb6ed2d0f791bde3dca43408aa87b7b3471fb4277e007b5cecdbe2a6325d140cf3d6d18401275d3c343160c5a8e6058e5aa5261df0b5fff54a191a2d425ed3512440c4007bc286a21"}})

[  371.853072] binder: 21772:21775 got transaction with invalid parent offset or type
[  371.861054] binder: 21772:21775 transaction failed 29201/-22, size 88-24 line 3454
[  371.869073] binder: send failed reply for transaction 3196 to 21772:21775
[  371.883309] binder_alloc: 21772: binder_alloc_buf, no vma
[  371.891643] binder: 21772:21782 transaction failed 29189/-3, size 0-0 line 3284
[  371.900934] binder: undelivered TRANSACTION_COMPLETE
[  371.906278] binder: undelivered TRANSACTION_ERROR: 29201
[  371.913102] binder: 21772:21782 got reply transaction with no transaction stack
[  371.913113] binder: 21772:21782 transaction failed 29201/-71, size 88-24 line 3046
[  371.940399] binder: undelivered TRANSACTION_ERROR: 29189
22:42:28 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl(r1, 0x1000008913, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$KDSETMODE(r2, 0x4b3a, 0x2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc808004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3d5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x288}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:28 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5)
keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000140)='user\x00', &(0x7f0000000180)='attr\x00')
ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0x8})

22:42:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xffffff18, 0x0, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
syz_read_part_table(0x6, 0x6, &(0x7f0000000640)=[{&(0x7f0000000080)="7360c777cbc7df0574e8bffe79222dcfb5910132aa5bdcbd99d17e463633ea3aa61540c228f6c46a312ff1654996e35b4c26e3a05d33ac32ed", 0x39, 0x8}, {&(0x7f0000000100)="645625fe386b44437c9a51df5ce1fac336146ec02f73b73d61ec698b8a414d505a3e98f5353de6f0b618bad1278064de74dc452cc8c1efc658c341322c4742cd7cde7e983540db77d92bff808f417a620e501f044fddde72475c4dd19d4cbd650b550bc11442d1a87940f45391f8e79eb5cace486445c1bc9c1e7d27fec4b0403de34a50d03785f6d016d1140532b34e643f7595f2a2299ea2b85a4156d2fe9bb0956f98616616c1cfefe97e849aaaca62c18fbb33bb6aa303a1ff", 0xbb, 0x3ff}, {&(0x7f0000000200)="b8c84f406a51ee7c53e788983dd4475926101bdee399fe4caf469b69475f8d1f13c35f7a300a46fa7c737e08084cfab10a7766b6bf61e2baf1cfbb4d4f92fca94c6ad2b17bc470bc368bec4bda95c5a5c6c97bf8254a61cc58c790916bdb91a3327658331e52f370ee244159df0e94dad861395d32003200c237dbf075438f9fab176ffca5a725f3189924713316d968f816564079d7c8763ac86310f7788f0013c0e87005f0df6e79b36c30d9598bbce7573d914921fe80529423fe67b4f4270b3328fa6d3854f291e9033c8f1e55388ca54f002877bd6c049db3f03cd26bd8593a4c24af5cbc2cb4fe3db885", 0xed, 0x9}, {&(0x7f0000000380)="eec203be11a6385a8ba29440d50c68e0f13cf94b2cb69472d4", 0xfffffffffffffef9, 0x9553}, {&(0x7f0000000480)="c37890bc0615888c2d5179ba53afca22c86c1bcd49d271b621c5ab3a08e4e2498ce5a725e4b0d13134ba05a43d51a53eb0969e0de491704449ddbb0ce40b2f1116cec560aca20c906da5cfefe0e548dbee859645226c0e3bfe0f33f2049c992aa3d95fe76e1fd1bdd09dcc6a8d23657b96a592271658e3edd2574a5c73c3f8535a005488c7591511d33c59d2dbcab72558348b9a256639be73cbfd495c6f7c69b0c703c66f724fc1f9cd48f4aa03f32600b77298dbade0bce8fafa81beae6b8139d4b77f1a0db68b78671c292c27f84dae7f00c1", 0xd4, 0x5}, {&(0x7f0000000580)="9480fd2e59787264480e90912ecb81b71f59e21595b6f844ee245aeaf88697c904ff6f64f810ddf7d2561ea96b71f04a1b2548894d0677c6f5fb7caa7b2f56ef1c73adf121f4c708cc63b86bd31d38877a2af16266e437af0ae7746b05ec9f5d08453d03aea318d88547797f280d991e265ed28882f99e660334f3fb33a18983b289df32f82289eedda5b08c21ff5e8a64fc4b97159d22e2673368d0dc3537548bcc70de574b52f2e2ba12022f", 0xad, 0x100000000}])
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  371.949466] binder: undelivered TRANSACTION_ERROR: 29189
[  371.954070] binder_alloc: 21738: binder_alloc_buf size 524288 failed, no address space
22:42:28 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x5a43523f8f5cea7d)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000080)=0xffffffffffffffe0, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)

22:42:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
accept4$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001000f8ff3fe90f7e000000000006000800000000da5c6ec0f28bc62b0000dd00"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff69, 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)="6d2aa0d1bede5086957e337e11701bf70133f27c5f4d898b3d427672fc9152c6acb40436e8af8314d6c7a2af73ae4c68dba2314cbf9eb398979d97b5a4e948d9eb95d3f13bced45b3a5708b9f1afb911d9083dc0e640a905384546416bfcfaef0f6554a5c0134253728e2c69a4ceecc8bcebfe0b3ce0bc6273175204f290dfa1e9"})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x402023)
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
pwrite64(r4, &(0x7f0000000380)="e950a9a0284e1462870b2016965b9b83efd20f126aec960c11c0be668d7c16b11b084c10ff1b649cd374816b87d89bbc2fb24ef8821eb6bbef26779addbe078f93cb44aadcb3eca3f86b30d7691d0efacba0e2f8eafde1dde8a2a622d5aa71a80c7bafda29cf0a7e20dd5111752d902ed11dae76244b632978164e7ee76c533bd2fed9d87018f0ed5d27d66897a7a750f9f270b8a119642afbb4b4096d043512b8473e33d7450cea169494941b9dcc8d8648930d42a55b56a5774f3d", 0xbc, 0xffffffffffffff2a)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0xa0, 0x0, &(0x7f0000000bc0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000008c0)={@fda={0x66646185, 0x7, 0x2, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000840)=""/70, 0x46, 0x0, 0x5}}, &(0x7f0000000940)={0x0, 0x20, 0x38}}, 0x400}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000b00)={@fda={0x66646185, 0x0, 0x2, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000000980)=""/102, 0x66, 0x1, 0x38}, @ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/198, 0xc6, 0x0, 0x1a}}, &(0x7f0000000b80)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
lstat(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
stat(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
syz_open_dev$binder(&(0x7f0000000740)='/dev/binder#\x00', 0x0, 0x2)
fchownat(r5, &(0x7f0000000580)='./bus\x00', r6, r7, 0x800)
ftruncate(r3, 0xfffffffffffffffc)

[  371.954076] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
[  371.954096] binder: 21738:21739 transaction failed 29201/-28, size 0-524288 line 3284
22:42:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="258b2becad05acffa7c2685b588757213b09eec6ad6b20bd354fa46b5494846aee15f13d03d8065f4530fe9b1c831680676535985d53afb3f582bff2c303df2b74d9697d5c33ffbc679e23ccd7b33284d788dbadb446f46177493f67b8b12765901a0b09f3df37afe609ad5ade386c84ea9d51a3019bf9c39e2a50a17def23b7ceb6e32d4bc89c30ce1033e6c9d08c354ab77eecd6fecb", 0x97, 0xfffffffffffffff8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
getrandom(&(0x7f0000000380)=""/182, 0xb6, 0x1)
r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000180)=0x2df6bcf91e050b94)
ioctl(r2, 0xc68d, &(0x7f00000002c0)="bfdab8b862626e302a493ce6c2")
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:28 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80002, 0x124)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)

22:42:28 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl(0xffffffffffffffff, 0x100000000007, &(0x7f0000000000)="11dca50d1e3f00e47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0})
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'osx.', 'vcan0\x00'}, &(0x7f00000002c0)='/dev/binder#\x00', 0xd, 0x3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r6 = dup(0xffffffffffffffff)
ioctl$sock_inet_SIOCGIFPFLAGS(r6, 0x8935, &(0x7f0000000200)={'vcan0\x00', 0x9})
getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000300)={@multicast2, @rand_addr, <r7=>0x0}, &(0x7f0000000340)=0xc)
setsockopt$inet_mreqn(r4, 0x0, 0x648d3a214fa17e87, &(0x7f0000000380)={@local, @remote, r7}, 0xc)

[  371.957961] binder: 21737:21757 transaction failed 29189/-22, size 0-8855593231168215553 line 3138
[  372.002762] binder: BINDER_SET_CONTEXT_MGR already set
[  372.002772] binder: 21799:21807 ioctl 40046207 0 returned -16
[  372.002940] binder_alloc: 21772: binder_alloc_buf, no vma
22:42:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$apparmor_exec(r3, &(0x7f0000000100)={'exec ', '/dev/binder#\x00'}, 0x12)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c807a1d49a1f0eac60200020001000000"], 0x1, 0x0, &(0x7f00000000c0)='-'})
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000003c0)=""/122)
gettid()

[  372.002958] binder: 21799:21807 transaction failed 29189/-3, size 0-0 line 3284
[  372.003786] binder: 21799:21807 unknown command 0
[  372.003797] binder: 21799:21807 ioctl c0306201 20000380 returned -22
[  372.017606] binder: 21799:21807 got reply transaction with no transaction stack
22:42:28 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0xfffffffffffffc56)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
write$binfmt_elf64(r4, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xc5ae, 0x299, 0x81, 0x7, 0x3, 0x6, 0x200, 0x3e3, 0x40, 0xad, 0x7, 0x6, 0x38, 0x2, 0xfffffffffffffff7, 0x9, 0x200}, [{0x6, 0x1, 0x23, 0xa6, 0x4, 0x401, 0x3, 0x7fff}, {0x4, 0x4, 0x3, 0x100000001, 0x10000, 0x8, 0x6ff}], "91dcd4c9c020d34d6b747b15fa81613d8964dcd7a1b7d68f2c2d726859796c9d", [[], []]}, 0x2d0)

22:42:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockname$netlink(r1, &(0x7f0000000200), &(0x7f0000000240)=0xc)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  372.017616] binder: 21799:21807 transaction failed 29201/-71, size 88-24 line 3046
[  372.020171] binder: BINDER_SET_CONTEXT_MGR already set
[  372.020179] binder: 21803:21810 ioctl 40046207 0 returned -16
[  372.020283] binder_alloc: 21744: binder_alloc_buf, no vma
[  372.020301] binder: 21803:21810 transaction failed 29189/-3, size 0-0 line 3284
[  372.021005] binder: BINDER_SET_CONTEXT_MGR already set
[  372.021013] binder: 21799:21807 ioctl 40046207 0 returned -16
[  372.021064] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.021079] binder: 21799:21814 transaction failed 29189/-3, size 0-0 line 3284
[  372.021284] binder: 21799:21814 unknown command 0
[  372.021292] binder: 21799:21814 ioctl c0306201 20000380 returned -22
[  372.021698] binder: 21799:21814 got reply transaction with no transaction stack
[  372.021706] binder: 21799:21814 transaction failed 29201/-71, size 88-24 line 3046
[  372.036715] audit: type=1400 audit(1568760148.476:37): avc:  denied  { setopt } for  pid=21812 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
[  372.058035] binder: BINDER_SET_CONTEXT_MGR already set
[  372.058045] binder: 21800:21808 ioctl 40046207 0 returned -16
[  372.058167] binder_alloc: 21738: binder_alloc_buf, no vma
[  372.058185] binder: 21800:21808 transaction failed 29189/-3, size 0-0 line 3284
[  372.075275] binder: 21803:21830 got reply transaction with no transaction stack
[  372.075286] binder: 21803:21830 transaction failed 29201/-71, size 0-0 line 3046
[  372.111880] binder: BINDER_SET_CONTEXT_MGR already set
[  372.111888] binder: 21824:21827 ioctl 40046207 0 returned -16
[  372.111984] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.112001] binder: 21824:21827 transaction failed 29189/-3, size 134219264-3154362463746415834 line 3284
[  372.116609] binder: BINDER_SET_CONTEXT_MGR already set
[  372.116625] binder: 21824:21835 ioctl 40046207 0 returned -16
[  372.116719] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.116738] binder: 21824:21827 transaction failed 29189/-3, size 134219264-3154362463746415834 line 3284
[  372.144885] binder: BINDER_SET_CONTEXT_MGR already set
[  372.144892] binder: 21838:21843 ioctl 40046207 0 returned -16
[  372.145213] binder: 21838:21843 unknown command 0
[  372.145221] binder: 21838:21843 ioctl c0306201 200001c0 returned -22
[  372.164392] binder: BINDER_SET_CONTEXT_MGR already set
[  372.164401] binder: 21838:21843 ioctl 40046207 0 returned -16
[  372.164621] binder: 21838:21844 unknown command 0
[  372.164630] binder: 21838:21844 ioctl c0306201 200001c0 returned -22
[  372.169314] binder: BINDER_SET_CONTEXT_MGR already set
[  372.169417] binder: 21845:21849 ioctl 40046207 0 returned -16
[  372.169583] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.169602] binder: 21845:21849 transaction failed 29189/-3, size 0-0 line 3284
[  372.169953] binder: 21845:21849 unknown command 494567436
[  372.169961] binder: 21845:21849 ioctl c0306201 200001c0 returned -22
[  372.182108] binder: BINDER_SET_CONTEXT_MGR already set
[  372.182117] binder: 21845:21849 ioctl 40046207 0 returned -16
[  372.182227] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.182243] binder: 21845:21849 transaction failed 29189/-3, size 0-0 line 3284
[  372.182468] binder: 21845:21849 unknown command 494567436
[  372.182475] binder: 21845:21849 ioctl c0306201 200001c0 returned -22
[  372.202328] binder: BINDER_SET_CONTEXT_MGR already set
[  372.202336] binder: 21853:21854 ioctl 40046207 0 returned -16
[  372.203395] binder_alloc: 21802: binder_alloc_buf, no vma
[  372.203414] binder: 21853:21854 transaction failed 29189/-3, size 0-0 line 3284
[  372.214126] binder: BINDER_SET_CONTEXT_MGR already set
[  372.214133] binder: 21855:21856 ioctl 40046207 0 returned -16
[  372.214216] binder_alloc: 21772: binder_alloc_buf, no vma
[  372.214230] binder: 21855:21856 transaction failed 29189/-3, size 0-0 line 3284
[  372.264748] binder: 21855:21859 got reply transaction with no transaction stack
[  372.264756] binder: 21855:21859 transaction failed 29201/-71, size 88-24 line 3046
[  372.578002] binder: undelivered TRANSACTION_ERROR: 29189
[  372.583582] binder: undelivered TRANSACTION_ERROR: 29189
[  372.589379] binder: undelivered TRANSACTION_ERROR: 29189
[  372.595891] binder: undelivered TRANSACTION_ERROR: 29189
[  372.601605] binder: release 21802:21826 transaction 3214 out, still active
[  372.608653] binder: undelivered TRANSACTION_COMPLETE
[  372.613789] binder: release 21802:21809 transaction 3211 in, still active
[  372.620772] binder: send failed reply for transaction 3211 to 21802:21809
[  372.627755] binder: send failed reply for transaction 3214, target dead
[  372.634573] binder: undelivered TRANSACTION_COMPLETE
[  372.639896] binder: undelivered TRANSACTION_ERROR: 29189
[  372.645433] binder: undelivered TRANSACTION_ERROR: 29189
[  372.650967] binder: undelivered TRANSACTION_ERROR: 29201
[  372.656436] binder: undelivered TRANSACTION_ERROR: 29189
[  372.661929] binder: undelivered TRANSACTION_ERROR: 29201
[  372.667559] binder: release 21744:21760 transaction 3204 out, still active
[  372.674559] binder: undelivered TRANSACTION_COMPLETE
[  372.679737] binder: release 21744:21794 transaction 3204 in, still active
[  372.686654] binder: send failed reply for transaction 3204, target dead
[  372.693519] binder: undelivered TRANSACTION_ERROR: 29201
[  372.699037] binder: undelivered TRANSACTION_ERROR: 29189
[  372.704549] binder: undelivered TRANSACTION_ERROR: 29189
[  372.710119] binder: undelivered TRANSACTION_ERROR: 29201
[  372.715632] binder: undelivered TRANSACTION_ERROR: 29190
[  372.721172] binder: undelivered TRANSACTION_ERROR: 29201
[  372.726647] binder: undelivered TRANSACTION_ERROR: 29189
22:42:29 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x10000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x33, @local, 0x4e22, 0x1, 'sh\x00', 0x4, 0xfffffffffffffc00, 0x6d}, 0x2c)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000a10000000000"], 0x0, 0x0, 0x0})

22:42:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000)

[  372.803223] binder: 21800:21861 transaction failed 29189/-22, size 0-0 line 3138
[  372.806816] binder: undelivered TRANSACTION_COMPLETE
[  372.806827] binder: undelivered transaction 3224, process died.
[  372.806868] binder: undelivered TRANSACTION_COMPLETE
[  372.806962] binder: undelivered TRANSACTION_ERROR: 29189
[  372.807054] binder: undelivered TRANSACTION_ERROR: 29201
[  372.807077] binder: undelivered TRANSACTION_ERROR: 29189
[  372.835198] binder_alloc: 21866: binder_alloc_buf size 16492684967936 failed, no address space
[  372.835206] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
[  372.835222] binder: 21866:21868 transaction failed 29201/-28, size 16492674416640-0 line 3284
[  372.835228] binder: send failed reply for transaction 3227 to 21866:21868
[  372.836328] binder: undelivered TRANSACTION_ERROR: 29190
22:42:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x2000)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r3, &(0x7f0000000680)=""/156)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$TIOCSIG(r5, 0x40045436, 0x9)
ioctl$TIOCNOTTY(r5, 0x5422)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000200)=""/172, &(0x7f0000000140)=0xac)
getsockopt$inet_opts(r0, 0x0, 0x1f, &(0x7f0000000080)=""/60, &(0x7f0000000100)=0x3c)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0xb, 0x0, &(0x7f0000000380)="ff7f00000000000058386f"})

22:42:29 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000002a00000000000000000000000000000000000000000000000000000000000000000000000000000000f7ff00"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

[  372.836440] binder: undelivered TRANSACTION_COMPLETE
[  372.836446] binder: undelivered TRANSACTION_ERROR: 29201
[  372.842930] binder: release 21866:21871 transaction 3230 in, still active
[  372.842937] binder: send failed reply for transaction 3230 to 21866:21869
[  372.843013] binder: undelivered TRANSACTION_COMPLETE
[  372.843019] binder: undelivered TRANSACTION_ERROR: 29189
[  372.941827] binder: undelivered TRANSACTION_ERROR: 29189
22:42:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='\xafdev/bir#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000003000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000000/0x400000)=nil, &(0x7f0000ff2000/0xb000)=nil, &(0x7f000032f000/0x4000)=nil, &(0x7f00003c2000/0x4000)=nil, &(0x7f0000182000/0x1000)=nil, &(0x7f00003a8000/0x4000)=nil, &(0x7f0000000480)="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", 0x108, r0}, 0x68)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6300f6"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  372.964298] binder: undelivered TRANSACTION_COMPLETE
[  372.969911] binder: undelivered TRANSACTION_COMPLETE
[  372.982300] binder: undelivered transaction 3233, process died.
22:42:29 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = dup3(r2, r0, 0x100000)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r4, &(0x7f0000000680)=""/156)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000400)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x3b, r5, 0x8, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18008}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x68, r5, 0x310, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x1dd0, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}}, 0x24000800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@fd, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0xfffffffffffffd39, 0x0, &(0x7f00000000c0)='-'})

22:42:29 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x40, 0x2, 0x2000}, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8c95be323b3b5f14}, 0x10)

[  373.006502] binder: undelivered TRANSACTION_ERROR: 29189
[  373.015396] binder: 21853:21854 transaction failed 29189/-22, size 0-0 line 3138
22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
poll(&(0x7f0000000040)=[{r0, 0x1004}], 0x1, 0xd41)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="50c63746d3"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:29 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  373.020205] binder: 21855:21856 got transaction with invalid fd, 6
[  373.020256] binder: 21855:21856 transaction failed 29201/-9, size 88-24 line 3427
22:42:29 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000001f00"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, 0x1}], 0x1, 0x0, &(0x7f0000000080)='-'})

22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630006569f45f0cfd739caf250ad5447be00"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:29 executing program 5:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x30)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
fstatfs(r4, &(0x7f0000000680)=""/156)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x45ec86, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000940)=[@increfs, @register_looper], 0xf1, 0x0, &(0x7f00000003c0)="e1057bfee52eb01310fa7ef72904ffdc365a4b78d3903e6a7e0a71d9919c55c2af5a2b607c25c0f7ab54a307e77fceb6ee5ec950fa0978a5c82cf05adb4d5c23d5af079941e951b6f9c2b9e0fdb07fe7504d724386731be284916e460ce740ee3189aa3063b51e5cf88e2dd1dea0a6ab0f488734c3fa7981f9f133374be1799aa10d9fc609141044f7f291e31202fa0a2ea1f1f598da1483033f5d260877fd723f84c8d51222901e5fdd465e20d4b889511c0d9eb81ed33eaa1643b64b7cf69bd9699fedc49bf053f3348e2af61131a2dd1eef70b815b43e96ab0db376fb61b71dde63ec7dbcff0b303a979a485cf63c9d"})
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r9, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r10, &(0x7f00000000c0)=""/31, 0x10000067f)
fstat(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}})
ioctl$EVIOCGKEYCODE_V2(r13, 0x80284504, &(0x7f0000000200)=""/192)
r14 = dup2(r12, r13)
lstat(&(0x7f0000000980)='\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
mount$fuseblk(0x0, 0x0, 0x0, 0x84022, &(0x7f0000000680)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r14, @ANYBLOB, @ANYRESDEC, @ANYBLOB="027e2d35a607047ea7ddc44f42dceec7e1e0abfb3d3e30", @ANYRESDEC=r15, @ANYBLOB=',blksize=0x0000000000000800,blksize=0x0000000000000200,max_read=0x0000000000000f01,allow_other,default_permissions,blksize=0x0000000000001c00,allow_other,func=PATH_CHECK,appraise_type=imasig,\x00'])
lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
fsetxattr$system_posix_acl(r6, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x2, r7}, {0x2, 0x4, r9}, {0x2, 0x2, r11}], {}, [{0x8, 0xd, r15}, {0x8, 0x3, r16}], {0x10, 0x4}, {0x20, 0x1}}, 0x4c, 0x2)
r17 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r17, &(0x7f00000000c0)=""/31, 0x10000067f)
write$nbd(r17, &(0x7f0000000140)={0x67446698, 0x0, 0x1, 0x4, 0x3, "dfac99893257cee32b827dd0c89f7fe92db1417a79f76440ae70df8121793cd2a12cd40e05b15e4b53fef8748cf4f0f5936f908bbaa42db156c372865d648329fd7289d70de51748519f2d4b827ba15c0da208dd5e7cfe002662308ceddefb94bd79036f6535ed69d88a9e07217ca0a9a75325d57e999247786ca1db711d727b590ba6188e324439978c32f147cf7e9f0afdae9c78a9dca5550c74e163559c94d1fbccc77eb6ed765e5a0466880b2e319b04430ab884d6468b5a1f56a574440d7e9e5f098d0cd46961ca7746eaa7a4879dc8044d428b034a"}, 0xe8)
r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r18, 0x2, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="34000055e28ece7b30e6f89edbeb421350c3c9f422259a867786c200", @ANYRES16=r18, @ANYBLOB="00032dbd7000fcdbdf250100000000000000014100000018001700000007000000077564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)

[  373.020263] binder: send failed reply for transaction 3238 to 21855:21859
[  373.047442] binder: BINDER_SET_CONTEXT_MGR already set
[  373.047449] binder: 21896:21900 ioctl 40046207 0 returned -16
22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x1)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x2, 0x2, 0x3, 0x4}, 0xd29, 0x7f})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="009eaa8d5aaa1d8600000097a573e1d1f9"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000240)=0x400)

[  373.047547] binder_alloc: 21879: binder_alloc_buf, no vma
[  373.047614] binder: 21896:21900 transaction failed 29189/-3, size 0-0 line 3284
[  373.061901] binder: BINDER_SET_CONTEXT_MGR already set
[  373.061910] binder: 21898:21901 ioctl 40046207 0 returned -16
[  373.062022] binder_alloc: 21855: binder_alloc_buf, no vma
[  373.062041] binder: 21898:21901 transaction failed 29189/-3, size 0-0 line 3284
[  373.069677] binder: 21902:21911 got reply transaction with no transaction stack
22:42:29 executing program 5:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001480)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000014c0)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000015c0)=0xe8)
sendmsg$inet(r3, &(0x7f00000017c0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="a27047416dd9a751ac5383fce95d8b2cfd6d1deac685675206958daefb2d9ef863074fe9e41d1674dad3eb3d63d04d08a6bf4ba9dabd2ae18d6a96d60d3b6dc5c59e6b67eaab635210ff9613aa18f1c901bc26e3a2badad257d38a0b69ca5e1280477d044ea0cc3bb2e2f1b6382a63d98af41bee489e24709b735903214a3dc9f79651b535d4dabdf434c3ce777a2a0b8d9ff5e1cc2913d689b780975d3c69511a25dcd2f4ae7d93941988c7a35ac6bb9622888194301e785f2bb6ac5cd5ae3195284bbb899bfbf26f97a8fd37808cdfac620548f1a4c253177a58ace1188de278f38c1897c505e861a98b41", 0xec}, {&(0x7f0000000480)="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", 0x1000}], 0x2, &(0x7f0000001600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7fffffff, [@remote, @multicast2]}, @lsrr={0x83, 0x13, 0x8, [@empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5a3}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xaae, [@broadcast, @broadcast, @remote, @loopback, @multicast1]}, @cipso={0x86, 0x5f, 0x1, [{0x2, 0x8, "1ae3c17c2ba8"}, {0x2, 0xd, "0a83ffbde2bd4a68252092"}, {0x364bdcf71fbe61a5, 0xa, "20f6ed8cc4688999"}, {0x1, 0x12, "cd80f02d7ddf4076a96587e0eaca1c6d"}, {0x1, 0x4, "6dd5"}, {0x2, 0x4, "0212"}, {0x1, 0x7, "35ed05246a"}, {0x5, 0xf, "fea08f87375f2c5b242d84331a"}, {0x7, 0xa, "0e8831e521bf58bb"}]}, @timestamp={0x44, 0x3c, 0x3f, 0x2, 0x10000, [{[], 0x8000}, {}, {[], 0x66e}, {[@rand_addr=0xfffffffffffff0cf], 0x6}, {[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x4}, {[@dev={0xac, 0x14, 0x14, 0x28}], 0x7}, {[@empty], 0xe5}, {[], 0x1}, {[], 0x2}, {[], 0x3498157b}]}, @timestamp={0x44, 0x38, 0x4, 0x3, 0x2, [{[@dev={0xac, 0x14, 0x14, 0x23}], 0x4}, {[@broadcast], 0xffffffff}, {[@loopback], 0xfffffffffffffff8}, {[], 0x5}, {[@rand_addr=0x9], 0x1ff}, {[], 0xee}, {[], 0x6}, {[], 0xff}, {[], 0x6}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f}}], 0x1a0}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
truncate(&(0x7f0000000140)='./file0\x00', 0x100000001)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  373.069685] binder: 21902:21911 transaction failed 29201/-71, size 72-24 line 3046
[  373.083422] binder: BINDER_SET_CONTEXT_MGR already set
[  373.083431] binder: 21902:21911 ioctl 40046207 0 returned -16
[  373.083483] binder_alloc: 21902: binder_alloc_buf, no vma
[  373.083500] binder: 21902:21913 transaction failed 29189/-3, size 0-0 line 3284
[  373.106316] binder: BINDER_SET_CONTEXT_MGR already set
[  373.106325] binder: 21920:21921 ioctl 40046207 0 returned -16
[  373.106414] binder_alloc: 21902: binder_alloc_buf, no vma
[  373.106433] binder: 21920:21921 transaction failed 29189/-3, size 0-0 line 3284
[  373.112751] binder: BINDER_SET_CONTEXT_MGR already set
[  373.112762] binder: 21890:21904 ioctl 40046207 0 returned -16
[  373.112816] binder_alloc: 21890: binder_alloc_buf, no vma
[  373.112836] binder: 21890:21916 transaction failed 29189/-3, size 0-0 line 3284
[  373.134583] binder: 21898:21924 got reply transaction with no transaction stack
[  373.134593] binder: 21898:21924 transaction failed 29201/-71, size 88-24 line 3046
[  373.136560] binder: 21896:21926 got reply transaction with no transaction stack
[  373.136569] binder: 21896:21926 transaction failed 29201/-71, size 0-0 line 3046
[  373.170214] binder: BINDER_SET_CONTEXT_MGR already set
[  373.170222] binder: 21930:21933 ioctl 40046207 0 returned -16
[  373.170367] binder_alloc: 21890: binder_alloc_buf, no vma
[  373.170387] binder: 21930:21933 transaction failed 29189/-3, size 31-0 line 3284
[  373.170476] binder: 21930:21933 BC_ACQUIRE_DONE u0000000000000001 no match
[  373.379225] binder: undelivered TRANSACTION_ERROR: 29189
[  373.384729] binder: release 21890:21904 transaction 3247 in, still active
[  373.391846] binder: send failed reply for transaction 3247 to 21890:21904
[  373.399010] binder: undelivered TRANSACTION_COMPLETE
[  373.404102] binder: undelivered TRANSACTION_ERROR: 29189
[  373.409966] binder: undelivered TRANSACTION_ERROR: 29189
[  373.415445] binder: send failed reply for transaction 3243 to 21902:21911
[  373.422532] binder: undelivered TRANSACTION_COMPLETE
[  373.427665] binder: undelivered TRANSACTION_ERROR: 29189
[  373.433824] binder: undelivered TRANSACTION_COMPLETE
[  373.438983] binder: undelivered TRANSACTION_ERROR: 29201
[  373.444551] binder: undelivered TRANSACTION_ERROR: 29190
[  373.450535] binder: undelivered TRANSACTION_ERROR: 29201
[  373.456019] binder: undelivered TRANSACTION_ERROR: 29189
[  373.461573] binder: undelivered TRANSACTION_ERROR: 29189
[  373.467100] binder: release 21879:21884 transaction 3235 out, still active
[  373.474101] binder: undelivered TRANSACTION_COMPLETE
[  373.479282] binder: release 21879:21884 transaction 3235 in, still active
[  373.486201] binder: send failed reply for transaction 3235, target dead
[  373.831846] binder_alloc: 21896: binder_alloc_buf, no vma
[  373.836289] binder: undelivered TRANSACTION_ERROR: 29201
[  373.836316] binder: undelivered TRANSACTION_ERROR: 29189
[  373.837129] binder: 21898:21901 got transaction with invalid parent offset or type
[  373.837154] binder: 21898:21901 transaction failed 29201/-22, size 88-24 line 3454
[  373.837161] binder: send failed reply for transaction 3256 to 21898:21901
[  373.839663] binder: undelivered TRANSACTION_ERROR: 29190
22:42:30 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x1eb1)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:30 executing program 0:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00')
syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x18)
sendto$inet6(r1, 0x0, 0xfffffffffffffe8f, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0xffffffffffffff66)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4000)
socket$key(0xf, 0x3, 0x2)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
getrandom(&(0x7f0000000ac0)=""/145, 0xb0cf, 0x1)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x5)
getcwd(0x0, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x1c8, 0x0)
r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x735)
dup(r2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x2, @empty}, 0x10)
ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000580)=0xffffffffffffffff)
fcntl$setsig(r3, 0xa, 0x18)
sendto$inet(r3, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10)

22:42:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
socket$nl_generic(0x10, 0x3, 0x10)

[  373.839691] binder: undelivered TRANSACTION_COMPLETE
[  373.839695] binder: undelivered TRANSACTION_ERROR: 29201
[  373.880067] binder: undelivered TRANSACTION_ERROR: 29189
[  373.896359] binder: 21896:21950 transaction failed 29189/-3, size 0-0 line 3284
[  373.906090] binder: undelivered TRANSACTION_ERROR: 29189
22:42:30 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:30 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x3, 0x1, 0x4, 0x0, 0x1, 0x1, 0x5}, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
rt_sigqueueinfo(r2, 0x38, &(0x7f0000000140)={0xd, 0xbc, 0x5})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
getdents(r4, &(0x7f00000000c0)=""/31, 0xad)
write$selinux_create(r3, &(0x7f00000000c0)=@access={'system_u:object_r:cpu_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x800}, 0x55)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)

22:42:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000100008000"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
accept4$unix(r3, 0x0, &(0x7f0000000140), 0xc00)
pipe2(&(0x7f0000000080), 0x4800)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000200)=0x8, 0x4)

[  373.928188] binder: send failed reply for transaction 3259 to 21920:21954
[  373.942777] binder: undelivered TRANSACTION_ERROR: 29189
[  373.944771] binder: 21930:21965 got transaction with invalid data ptr
22:42:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x7, &(0x7f0000000180)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="5d27aa858f0ee875d4bb8c85115dc711b2bac3b1eab2b615c0c83355c3dfe82ee9f6f674b3843f3366ec3d9fc915723ff82c436b7916a782945c01c67d6a5f554516140a55d2e886625030593eee6860652bce50a0051f3ca7bb9f818eba6d6802cb0aa1a3378117491a6dca346e5c514612b3f26f40ef6de2c73d76621ab51745fb6dc42c36eca7484c29d27213fb35a12c8faaa854fee9ed5d7eda228dfc3e5fe37d94ab949bc76fd2a366579c53e162f1de8157e25792fd9a6cb713f38efc63fe5fec8a1a57802d3af2", 0xcb, 0x1002a, &(0x7f0000000080)={0xa, 0x4e23, 0x81, @loopback, 0x4}, 0x1c)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000000140)='a%\x1b\xcdU\x1f\x17\x03\x11\x18\x83{\x988C\x9d\xef\xb4')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
finit_module(r5, &(0x7f0000000040)='vboxnet1\x00', 0x3)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x9, @mcast2, 0x32f}, 0x1c)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
setsockopt(r6, 0x6, 0x5, &(0x7f0000000300)="21d128e11f18cec0c7b6667ee87fd9ecc4f4d31a47874d3fac48e856a48157db4ce1a8aaaebbd240b281086a5dfa7d408cb82525e5737f2e6bf575c95a9b67689840ead50e5785c90e3852a89a98dfbaa4cdbbdd538c38ff24f6978217b56ba62a2e81d859a8411cca9f11e47ff8701d75510ffd", 0x74)
r7 = socket$inet6(0xa, 0x800, 0x6)
pwrite64(r7, &(0x7f0000000480)="e5c07562545ebb85caa34c941125c1cbdcefaf1cfa99b4ffa881d581392a35dc91dd61a23f46ee0714e5ff1365754d28709ea394a07ff8a4139b99dd76c28cc6dfbc43c06361b2cabd9462d772790897aa476b4244", 0x55, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="82c68e102841ee50f0fe32a84a07d91bdbb7ac0b9e85597a2cd7314bfcd11196f282b81c131aed827e712510b26dc1738989c2a29f9724c495b7037bf7ba3a64d148fb0edd8895d119ee511f"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:30 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000001c0)=""/245)
syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xe4da536190720df9)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x800)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'bridge_slave_1\x00', 0x2})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
r4 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)

[  373.944797] binder: 21930:21965 transaction failed 29201/-14, size 31-0 line 3316
[  373.954459] binder_alloc: 21960: binder_alloc_buf, no vma
[  373.954479] binder: 21960:21963 transaction failed 29189/-3, size 0-0 line 3284
[  373.954795] binder: BINDER_SET_CONTEXT_MGR already set
[  373.954803] binder: 21961:21967 ioctl 40046207 0 returned -16
22:42:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/219, 0xdb)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003740)={'team0\x00', <r5=>0x0})
ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000003780)=r5)
munlock(&(0x7f0000003000/0x1000)=nil, 0x1000)
r6 = socket$unix(0x1, 0x7, 0x0)
fdatasync(r6)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000280)="c39e1dd2a3acf1258956eab29618e8c0885b0f7bdd6a9ba86e9900a497b54db87b5168a1a3")
ptrace$cont(0x1f, r2, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r7=>0x0)
ioprio_get$pid(0x2, r7)
rt_tgsigqueueinfo(r2, r7, 0x24, &(0x7f0000000080)={0x34, 0x0, 0x8})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  373.954844] binder_alloc: 21961: binder_alloc_buf, no vma
[  373.954861] binder: 21961:21969 transaction failed 29189/-3, size 0-0 line 3284
[  374.013363] binder: 21960:21978 got reply transaction with no transaction stack
[  374.013373] binder: 21960:21978 transaction failed 29201/-71, size 0-0 line 3046
[  374.023004] binder: BINDER_SET_CONTEXT_MGR already set
22:42:30 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x406000, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

[  374.023014] binder: 21976:21979 ioctl 40046207 0 returned -16
[  374.023119] binder_alloc: 21961: binder_alloc_buf, no vma
[  374.023138] binder: 21976:21979 transaction failed 29189/-3, size 17179869184-0 line 3284
[  374.033499] binder: BINDER_SET_CONTEXT_MGR already set
[  374.033509] binder: 21973:21982 ioctl 40046207 0 returned -16
[  374.033849] binder_alloc: 21930: binder_alloc_buf, no vma
[  374.033868] binder: 21973:21982 transaction failed 29189/-3, size 0-0 line 3284
[  374.176697] binder: undelivered TRANSACTION_ERROR: 29189
[  374.182757] binder: release 21961:21967 transaction 3263 in, still active
[  374.190201] binder: send failed reply for transaction 3263 to 21961:21967
[  374.197414] binder: undelivered TRANSACTION_COMPLETE
[  374.202612] binder: undelivered TRANSACTION_ERROR: 29189
[  374.208324] binder: undelivered TRANSACTION_ERROR: 29201
[  374.214007] binder: undelivered TRANSACTION_COMPLETE
[  374.219162] binder: undelivered TRANSACTION_ERROR: 29189
[  374.224737] binder: undelivered TRANSACTION_ERROR: 29201
[  374.232503] binder: undelivered TRANSACTION_ERROR: 29189
[  374.737990] binder: undelivered TRANSACTION_ERROR: 29201
[  374.744043] binder_alloc: 21960: binder_alloc_buf, no vma
[  374.749801] binder: 21960:21978 transaction failed 29189/-3, size 0-0 line 3284
[  374.757796] binder: undelivered TRANSACTION_ERROR: 29189
[  374.763469] binder: 21960:21963 got reply transaction with no transaction stack
[  374.771226] binder: 21960:21963 transaction failed 29201/-71, size 0-0 line 3046
[  374.779032] binder: undelivered TRANSACTION_ERROR: 29201
22:42:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="006340404b4a08988dcebc6100006c6b88ff833ed4eeb765878e060000000000000000000000ddf4440b00000000000000003f00000000000000000000000000000000010000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x4, 0xffff}]}, 0xc, 0x2)
mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x200000000)
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x78)

22:42:31 executing program 0:
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x9)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:31 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="0f7624cbc5cdccd771defc346a512992543f51155d5f2ed73de7c145b66cdefdfd896dc69f14dd997951531fea838184cc302e6649105021aa09bf160166e0c2d30ff858102bee14a3b1ba5ff0212a55902b186f4fa4ba4ca2d53a4b28e3907c74197e8cfd9f", 0x66}, {&(0x7f0000000380)="949a1f6de0d65e7a4dcd8e60b4d948ea19e107921b05d9fa0952ae17fd937fab99593bed97b0c94043ad53d728876fc99da4783ea317681009f72d60be40f3b7ea1c008814b8a8e087b98b47341b9ea889fe90f988cea4064bd4dd2527aeae3d82563f5ea98e41bb393c0addddd8902cea5a50bc9ba2be9e8eddba9325cfe554e3820fa8cfa311c9107bf9ca9ad49546338b74", 0x93}], 0x2, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x85}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2, @loopback, @loopback]}, @noop, @noop, @generic={0x4e, 0x2}, @ssrr={0x89, 0x13, 0xfffffffffffff1c7, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x3f]}, @rr={0x7, 0x13, 0xed0, [@broadcast, @remote, @loopback, @local]}, @cipso={0x86, 0x5f, 0x7, [{0x57349dcf66ac47c2, 0xf, "89f6e2145bf7ca654a1c738b95"}, {0x5, 0x3, "bd"}, {0x2, 0xd, "9033044f457d3d853445cb"}, {0x2, 0xd, "e08909030cfe072091d09e"}, {0x0, 0x11, "49cee657dd367052e5fd1227fe188e"}, {0x6, 0x8, "ec283e553b22"}, {0xa, 0x3, "e1"}, {0x1, 0x11, "03c683936ffdd512d6c058d3c44b3f"}]}, @ssrr={0x89, 0x27, 0x0, [@dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x80000000, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x6, 0x5}, @noop]}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @noop, @rr={0x7, 0xf, 0x8017, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback]}, @rr={0x7, 0xb, 0x83c7, [@remote, @empty]}]}}}], 0x130}, 0x4)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = creat(&(0x7f0000001040)='./file0\x00', 0x22)
write$P9_RLCREATE(r2, &(0x7f0000001080)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x1}, 0x7ff}}, 0x18)
fsetxattr$security_evm(r1, &(0x7f00000010c0)='security.evm\x00', &(0x7f0000001100)=@sha1={0x1, "51ae705da8b623baba479adc81381bf09e2de502"}, 0x15, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r3 = dup2(r0, r1)
ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000040)="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")

22:42:31 executing program 4:
r0 = getpgid(0xffffffffffffffff)
ptrace$poke(0x4, r0, &(0x7f0000000200), 0x6)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
flock(r4, 0x1)
r5 = gettid()
ptrace$setopts(0x4206, r5, 0x0, 0x0)
tkill(r5, 0x38)
ptrace$cont(0x18, r5, 0x0, 0x0)
ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0xe93c, 0x1e, 0x1000, 0x5, 0x0, 0x8, 0x20, 0xc, 0x9, 0x8, 0x7, 0x2, 0x57332127, 0x9, 0x4, 0x3, 0x2000000000001, 0x0, 0x9, 0x8, 0x6, 0x400, 0x10000, 0x3, 0x8001, 0x9, 0x8, 0x1, 0x1ff, 0xb6db, 0x1, 0x38bb, 0x4, 0x8001, 0x1, 0x8, 0x0, 0x8c8, 0x3, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x2, 0x13b78a37, 0x7, 0x1, 0x100000001, 0xfffffffeffffffff}, r5, 0xffffffffffffffff, r4, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:31 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
getdents(r3, &(0x7f0000000200)=""/31, 0xfed2)
read(r2, &(0x7f0000000100)=""/129, 0x81)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000080))

[  374.787451] binder: undelivered TRANSACTION_ERROR: 29189
[  374.803747] binder: undelivered TRANSACTION_ERROR: 29189
[  374.816252] binder_alloc: 21976: binder_alloc_buf, no vma
[  374.825818] binder: 21976:22011 transaction failed 29189/-3, size 17179869184-0 line 3284
[  374.826013] binder: undelivered TRANSACTION_ERROR: 29189
[  374.834799] binder: 22009:22015 got transaction with invalid parent offset or type
[  374.834826] binder: 22009:22015 transaction failed 29201/-22, size 88-24 line 3454
[  374.834835] binder: send failed reply for transaction 3276 to 22009:22015
[  374.837305] binder_alloc: 22009: binder_alloc_buf, no vma
[  374.837324] binder: 22009:22015 transaction failed 29189/-3, size 0-0 line 3284
[  374.838151] binder: undelivered TRANSACTION_COMPLETE
[  374.838159] binder: undelivered TRANSACTION_ERROR: 29201
[  374.838194] binder: release 21973:21982 transaction 3283 out, still active
[  374.838198] binder: undelivered TRANSACTION_COMPLETE
[  374.841222] binder_alloc: 22014: binder_alloc_buf, no vma
[  374.841238] binder: 22014:22020 transaction failed 29189/-3, size 0-0 line 3284
[  374.841463] binder: undelivered TRANSACTION_COMPLETE
[  374.841471] binder: undelivered transaction 3280, process died.
[  374.847995] binder: 22018:22021 ioctl 4b41 20000040 returned -22
[  374.848207] binder: release 21973:22017 transaction 3283 in, still active
[  374.848213] binder: send failed reply for transaction 3283, target dead
[  374.863585] binder: undelivered TRANSACTION_ERROR: 29190
[  374.863690] binder: undelivered TRANSACTION_ERROR: 29189
22:42:31 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
fsetxattr$security_selinux(r3, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x0)

22:42:31 executing program 5:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x2)

22:42:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200))

22:42:31 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x98130102}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004885}, 0x24000080)
r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000480)=[@dead_binder_done, @request_death={0x400c630e, 0x3}, @free_buffer, @dead_binder_done, @acquire_done, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x6, 0x1, 0x2f}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}], 0x12, 0x0, &(0x7f0000000200)="7cd7b758b2e3d5a02b5d60706c5228e6002b"})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
flistxattr(r3, &(0x7f00000005c0)=""/64, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r3)
r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r4)
r6 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r5)
r7 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r6)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r7)
request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', r7)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e8c10000"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  374.874185] binder: 22018:22024 ioctl 4b41 20000040 returned -22
[  374.879849] binder: undelivered TRANSACTION_COMPLETE
[  374.880872] binder: undelivered TRANSACTION_ERROR: 29189
[  375.029315] binder: undelivered TRANSACTION_ERROR: 29189
22:42:31 executing program 5:
r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
dup2(r0, r1)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x12836fa7afd1ed8)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)

22:42:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
fcntl$addseals(r1, 0x409, 0xa)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080))
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  375.063651] binder: 22037:22042 got transaction with invalid offsets ptr
[  375.080965] binder_alloc: 22040: binder_alloc_buf, no vma
[  375.080985] binder: 22040:22046 transaction failed 29189/-3, size 0-0 line 3284
[  375.095371] binder: 22037:22042 transaction failed 29201/-14, size 0-64 line 3330
22:42:31 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000002789c39900"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  375.102564] binder: undelivered TRANSACTION_COMPLETE
[  375.102677] binder: undelivered TRANSACTION_COMPLETE
[  375.102686] binder: undelivered transaction 3290, process died.
[  375.124110] binder: 22037:22056 got reply transaction with no transaction stack
[  375.124119] binder: 22037:22056 transaction failed 29201/-71, size 88-24 line 3046
22:42:31 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={<r5=>0x0}, &(0x7f0000000180)=0xc)
tgkill(r3, r5, 0x0)
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x38)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r6, 0x0, 0x0)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000100)=r6)

22:42:31 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mount(&(0x7f0000000080)=@sg0='/dev/sg0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x1140020, &(0x7f00000001c0)='attr\x00')
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040))

[  375.136514] audit: type=1400 audit(1568760151.576:38): avc:  denied  { relabelto } for  pid=22040 comm="syz-executor.1" name="UDP-Lite" dev="sockfs" ino=75481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=rawip_socket permissive=1
[  375.151068] binder: release 22038:22045 transaction 3294 in, still active
[  375.151081] binder: send failed reply for transaction 3294 to 22038:22045
[  375.151188] binder: undelivered TRANSACTION_COMPLETE
[  375.151194] binder: undelivered TRANSACTION_ERROR: 29189
[  375.180122] binder: 22062:22063 got reply transaction with no transaction stack
[  375.180131] binder: 22062:22063 transaction failed 29201/-71, size 0-0 line 3046
[  375.182454] binder: undelivered TRANSACTION_ERROR: 29201
[  375.182581] binder: undelivered TRANSACTION_COMPLETE
[  375.193902] binder: undelivered TRANSACTION_COMPLETE
[  375.246508] binder: undelivered TRANSACTION_COMPLETE
[  375.246628] binder: undelivered TRANSACTION_COMPLETE
[  375.246636] binder: undelivered transaction 3303, process died.
[  375.309347] binder: BINDER_SET_CONTEXT_MGR already set
[  375.314871] binder: 22037:22056 ioctl 40046207 0 returned -16
[  375.314911] binder_alloc: 22037: binder_alloc_buf, no vma
[  375.314932] binder: 22037:22075 transaction failed 29189/-3, size 0-64 line 3284
[  375.315252] binder: undelivered TRANSACTION_ERROR: 29201
[  375.315719] binder: 22037:22075 got reply transaction with no transaction stack
[  375.315727] binder: 22037:22075 transaction failed 29201/-71, size 88-24 line 3046
[  375.355700] binder: undelivered TRANSACTION_ERROR: 29201
[  375.363544] binder: undelivered TRANSACTION_ERROR: 29201
[  375.373322] binder: undelivered TRANSACTION_ERROR: 29189
22:42:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x320, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCGRS485(r4, 0x542e, &(0x7f0000000240))
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x440, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)

[  375.675391] binder: BINDER_SET_CONTEXT_MGR already set
[  375.680873] binder: 22027:22029 ioctl 40046207 0 returned -16
[  375.697810] binder: 22077:22079 got transaction with invalid offsets ptr
[  375.704892] binder: 22077:22079 transaction failed 29201/-14, size 0-625 line 3330
22:42:32 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000080))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x187, 0x0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000380)="f6f0714484ca86fdc837aea83420cf9a6dc1632d9de56cbcf4ea94675f2a36ad4e5054ecff1ec8edbc010000009a805468323d1cc77622fb3efffa253c6907fcff168cecb8407bbf7520cd353f4d19edb42313c563b7856c7a394e6282114054c6cb8097da610002790ae3f79a2656a4fa7d"})

22:42:32 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x11400)
getdents64(r2, &(0x7f0000000380)=""/149, 0x95)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x3}}, 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
getsockname(r0, &(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000400)=0x80)
r4 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r4, 0x8000000000000)
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000c40)=r2, 0x4)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2400, 0x0)
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000400))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r7 = mmap$binder(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x3ff)
mmap$binder(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
mmap$binder(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r8)
r9 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r10 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r9)
r11 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r10)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r11)
r12 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r13 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r12)
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r13)
r14 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r15 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r14)
r16 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r15)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r16)
r17 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r18 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r17)
r19 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r18)
r20 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r19)
r21 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r20)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r21)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0xa6, 0x0, &(0x7f0000000600)="d25aaf31891fb94f4d5c356e32e66fd2fd301b31b78e2d539c63f5455e5ed20af59886e0c11ccbd0f948967a981320c563df8176a12e68ac44bcc131e3430470a56d43da6676723099df8e80d5184b456459b2bdddb6bfc9811f901bc1b28d5bac9423278e8a2e1fbfbe90a6189e91b1f4f86689f89f40519d23c537cac9aa8d8b3f53ef9757dfdfd3ba5b9dd985ed1d59df3b6988b802d1dd1bc237b3f9767afdab702ca428"})
r22 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r22, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0xffffffffffffff11, 0x0, &(0x7f0000000b00)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/236, 0x0, 0x1, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/104, 0x0, 0x1, 0xa}}, &(0x7f0000000180)}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/249, 0x0, 0x0, 0x25}, @flat=@handle={0x73682a85, 0x100b, 0x3}}, &(0x7f0000000680)}}, @free_buffer={0x40086303, r7}, @register_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/138, 0x0, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/5, 0x0, 0x1, 0xf}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/237, 0x0, 0x1, 0x7}}, &(0x7f0000000980)}}, @decrefs={0x40046307, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={@ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/76, 0x0, 0x1, 0x19}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r22}}, &(0x7f0000000ac0)}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0800000007054eba0405c4c839f3e1305d"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KIOCSOUND(r2, 0x4b2f, 0x2)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
sysinfo(&(0x7f0000000200)=""/104)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r3 = gettid()
ptrace$setopts(0x4206, r3, 0x0, 0x0)
tkill(r3, 0x38)
ioctl$RTC_UIE_ON(r2, 0x7003)
ptrace$cont(0x18, r3, 0x0, 0x0)
ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
prctl$PR_SET_ENDIAN(0x14, 0x1)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=<r5=>0x0)
ptrace$cont(0x9, r5, 0x2, 0x7)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000380)={[], 0x7fffffff, 0x1, 0xff, 0x2, 0x8001, r3})
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))

[  375.858889] binder: undelivered TRANSACTION_ERROR: 29189
[  375.864596] binder: 22040:22060 transaction failed 29189/-22, size 0-0 line 3138
[  375.876258] binder: undelivered TRANSACTION_ERROR: 29189
22:42:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$UHID_INPUT2(r2, &(0x7f0000000240)={0xc, 0x3a, "ca763075d6cf30b8744e5f901156868ae24f75a50e554c1e9589323f809d34ecc25d0345ec3eae0944cb329348d686ce46f44c8851bfe165d7c6"}, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000480)={@dev={0xfe, 0x80, [], 0x1c}, @mcast1, @dev={0xfe, 0x80, [], 0x2a}, 0x800, 0x3, 0xce88, 0x400, 0x3998, 0x80080000, r5})

[  375.903889] binder: undelivered TRANSACTION_COMPLETE
[  375.909858] binder: undelivered TRANSACTION_COMPLETE
[  375.920379] binder: 22084:22091 got transaction with invalid parent offset or type
22:42:32 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x8, 0x9, 0x3, 0x7ff, 0x9, 0xf69f})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000"], 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x21}, 0xb1a951a286ffa8c7)
r4 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x40)
r5 = getpgid(0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f0000000480)=""/149)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000140)=r5)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
iopl(0x7e)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:32 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x98ca2551cd1d1991, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ip_vti0\x00', @dev={[], 0x10}})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[  375.920409] binder: 22084:22091 transaction failed 29201/-22, size 88-24 line 3454
[  375.920417] binder: send failed reply for transaction 3314 to 22084:22091
[  375.923493] binder_alloc: 22086: binder_alloc_buf size 4153344 failed, no address space
22:42:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
write$evdev(r3, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x4, 0x10000, 0x7fffffff}], 0x18)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  375.923501] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  375.923522] binder: 22086:22093 transaction failed 29201/-28, size 4153344-0 line 3284
[  375.923724] binder: 22086:22093 unknown command 0
[  375.923733] binder: 22086:22093 ioctl c0306201 200001c0 returned -22
22:42:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000090e200"/38], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  375.935558] binder_alloc: 22086: binder_alloc_buf size 4153344 failed, no address space
[  375.935565] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  375.935582] binder: 22086:22094 transaction failed 29201/-28, size 4153344-0 line 3284
[  375.945784] binder: BINDER_SET_CONTEXT_MGR already set
[  375.945792] binder: 22096:22101 ioctl 40046207 0 returned -16
[  375.945902] binder_alloc: 22084: binder_alloc_buf, no vma
[  375.945919] binder: 22096:22101 transaction failed 29189/-3, size 0-0 line 3284
[  376.013899] binder: BINDER_SET_CONTEXT_MGR already set
[  376.013908] binder: 22104:22106 ioctl 40046207 0 returned -16
[  376.014091] binder_alloc: 22083: binder_alloc_buf, no vma
[  376.014112] binder: 22104:22106 transaction failed 29189/-3, size 0-0 line 3284
[  376.042897] binder: 22096:22114 got reply transaction with no transaction stack
[  376.042905] binder: 22096:22114 transaction failed 29201/-71, size 88-24 line 3046
[  376.075734] binder: 22104:22118 got reply transaction with no transaction stack
[  376.075743] binder: 22104:22118 transaction failed 29201/-71, size 0-0 line 3046
[  376.184953] binder: undelivered transaction 3312, process died.
[  376.191969] binder: undelivered TRANSACTION_ERROR: 29201
[  376.198058] binder: undelivered TRANSACTION_ERROR: 29201
[  376.203692] binder: undelivered TRANSACTION_COMPLETE
[  376.209267] binder: undelivered transaction 3317, process died.
[  376.215549] binder: undelivered TRANSACTION_COMPLETE
[  376.222508] binder: undelivered TRANSACTION_COMPLETE
[  376.228019] binder: undelivered TRANSACTION_ERROR: 29201
[  376.233635] binder: undelivered TRANSACTION_ERROR: 29190
22:42:32 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040))
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000e1d353a1adb48a00685b000000940828ef77b2d52e00000000000000000000000000000000000008000000000000000000000000000000002200"/83], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ce2ca4b1716a1dc35eb2eb5f1777c1001a00000000000000"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x38)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r4, 0x0, 0x0)
r5 = syz_open_procfs(r4, &(0x7f0000000180)='net/xfrm_stat\x00')
write$P9_RUNLINKAT(r5, &(0x7f0000000200)={0x7, 0x4d, 0x2}, 0x7)

22:42:32 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r0, &(0x7f00000000c0)=""/31, 0x10000067f)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2410}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6544}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x2080}, 0x4000000)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)

22:42:33 executing program 4:
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x2001})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80400, 0x0)
ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000100))
r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r5 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  376.498307] binder: undelivered TRANSACTION_ERROR: 29201
[  376.505166] binder: BINDER_SET_CONTEXT_MGR already set
[  376.505174] binder: 22077:22080 ioctl 40046207 0 returned -16
[  376.505501] binder_alloc: 22077: binder_alloc_buf, no vma
22:42:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  376.505520] binder: 22077:22080 transaction failed 29189/-3, size 0-625 line 3284
[  376.555280] binder: undelivered TRANSACTION_ERROR: 29189
[  376.567299] binder: 22125:22129 unknown command -1314640690
[  376.584842] binder: 22125:22129 ioctl c0306201 200001c0 returned -22
22:42:33 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

22:42:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080))
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  376.598063] binder: send failed reply for transaction 3328 to 22125:22129
[  376.608351] binder: undelivered TRANSACTION_COMPLETE
[  376.613487] binder: undelivered TRANSACTION_ERROR: 29189
[  376.648341] binder: release 22140:22142 transaction 3330 out, still active
[  376.657362] binder: undelivered TRANSACTION_COMPLETE
[  376.683356] binder: release 22140:22142 transaction 3331 out, still active
[  376.698113] binder: undelivered TRANSACTION_COMPLETE
[  376.703295] binder: release 22140:22142 transaction 3330 in, still active
[  376.727048] binder: send failed reply for transaction 3330, target dead
[  376.733894] binder: send failed reply for transaction 3331, target dead
[  376.741980] binder: undelivered TRANSACTION_ERROR: 29201
[  376.748948] binder: 22096:22114 got transaction with invalid parent offset or type
[  376.756720] binder: 22096:22114 transaction failed 29201/-22, size 88-24 line 3454
[  376.764886] binder: undelivered TRANSACTION_ERROR: 29189
[  376.770971] binder: send failed reply for transaction 3333 to 22096:22114
[  376.781648] binder: undelivered TRANSACTION_ERROR: 29190
[  376.787412] binder: undelivered TRANSACTION_COMPLETE
[  376.792521] binder: undelivered TRANSACTION_ERROR: 29201
22:42:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  376.803366] binder: undelivered TRANSACTION_ERROR: 29201
[  376.805453] binder: 22104:22118 got reply transaction with no transaction stack
[  376.805461] binder: 22104:22118 transaction failed 29201/-71, size 0-0 line 3046
[  376.836234] binder: undelivered TRANSACTION_ERROR: 29201
[  376.842405] binder: release 22104:22149 transaction 3336 in, still active
22:42:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
pipe2$9p(&(0x7f0000000140), 0x0)
syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
lseek(r3, 0x0, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:33 executing program 5:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x200000, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r3 = syz_genetlink_get_family_id$SEG6(0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x377, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="010627bd7000fbdbdf250100000008000300000000001400010000000000000000000000ffffe00000010800060001000000080002000600000089a3efe95caa9baa17cd1663477ceb5c6fa7056116fdd1e18612a3aa55f03fae68727e29e5017476aa818b36b266396137ad084cfe62017fcb323498060c30ad2b5adb0c97f181e4c846d79c1086898b3a0f409123af8f6aa7d158e64c0d473eb117885cec0539e4165cf28819cf5c717f6ef1bfbc68373f3663730116d83b7a2f3279c3d6db424dcf24043bc822b3e1165a170eb239446e0d2ae651cec0"], 0x3}}, 0x4)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4a1100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0xa18, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x664}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x100000001]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080)

22:42:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  376.849895] binder: send failed reply for transaction 3336 to 22104:22106
[  376.860259] binder: release 22151:22153 transaction 3339 out, still active
[  376.870894] binder: BINDER_SET_CONTEXT_MGR already set
[  376.874080] binder: undelivered TRANSACTION_COMPLETE
[  376.874386] binder: BINDER_SET_CONTEXT_MGR already set
22:42:33 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r3, 0x0)
stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000100)='./file0\x00', r3, r4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:33 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
r0 = getpid()
tkill(r0, 0x10)
tkill(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x400})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
socket(0x840000000002, 0x3, 0x6)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
sendmsg(0xffffffffffffffff, 0x0, 0x0)

22:42:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010000000000000000000000000000000000000000800"/68], 0x0, 0x0, 0x0})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0xc000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000500)=""/244)
r4 = accept$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14)
ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000400))
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x0, &(0x7f00000000c0)='-'})
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x520d80cd)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000})
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
write$FUSE_INIT(r6, &(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x1f, 0x400, 0x0, 0x2, 0x7fffffff, 0xf03, 0x3}}, 0x50)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r5}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  376.874394] binder: 22154:22156 ioctl 40046207 0 returned -16
[  376.874667] binder_alloc: 22154: binder_alloc_buf, no vma
[  376.874683] binder: 22154:22161 transaction failed 29189/-3, size 0-0 line 3284
[  376.963209] binder: release 22151:22153 transaction 3339 in, still active
[  376.963224] binder: 22151:22155 transaction failed 29189/-22, size 0-0 line 3138
[  376.964949] binder: BINDER_SET_CONTEXT_MGR already set
[  376.964956] binder: 22172:22174 ioctl 40046207 0 returned -16
[  376.965051] binder_alloc: 22154: binder_alloc_buf, no vma
[  376.965067] binder: 22172:22174 transaction failed 29189/-3, size 0-0 line 3284
[  376.974805] binder: 22175:22177 got transaction with invalid offsets ptr
[  376.974831] binder: 22175:22177 transaction failed 29201/-14, size 0-8 line 3330
[  376.976381] binder: 22175:22177 unknown command 0
[  376.976388] binder: 22175:22177 ioctl c0306201 200001c0 returned -22
[  376.979156] binder: 22175:22177 got reply transaction with no transaction stack
[  376.979163] binder: 22175:22177 transaction failed 29201/-71, size 88-24 line 3046
[  376.984190] binder: BINDER_SET_CONTEXT_MGR already set
[  376.984198] binder: 22175:22177 ioctl 40046207 0 returned -16
[  376.984247] binder_alloc: 22175: binder_alloc_buf, no vma
[  376.984264] binder: 22175:22178 transaction failed 29189/-3, size 0-8 line 3284
[  376.984833] binder: 22175:22178 unknown command 0
[  376.984839] binder: 22175:22178 ioctl c0306201 200001c0 returned -22
[  376.985588] binder: 22175:22178 got reply transaction with no transaction stack
[  376.985595] binder: 22175:22178 transaction failed 29201/-71, size 88-24 line 3046
[  377.016299] binder: 22172:22180 got reply transaction with no transaction stack
[  377.016307] binder: 22172:22180 transaction failed 29201/-71, size 0-0 line 3046
22:42:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
signalfd(r2, &(0x7f0000004540)={0x80000001}, 0x8)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
sendmmsg(r4, &(0x7f0000004480)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x2, 0x0, 0x0, {0xa, 0x4e21, 0x575a, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc70}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000380)="4e558e50227205811d154880bab8b15210dbde1e5d57a51351113d8abc8fd1de8778b0c0940ea7169723da59780780d6ceacf9be586158900cda75c553407b6b89e94cdce2db65ef9526e0c7dda43083e60940122cb7a044e09d3f33c56edb09a4d8a912dd8e94afc4ebbfa4e2cb3f6433aaea912df76cdf4adb42ad7b9e6ed9e77eac3c21cdf41a1504e0edb94cd82fc4d3a4e15d", 0x95}, {&(0x7f0000000700)="af11cf7e99934d53e013467677dee4031bf89ac701e3eb9b5257dc9f7c455f09facfb61ad85a2cf065d42cd8793382676ad14161cb470010f9eeb1eaef4e3a60c082307db717e166e187180cbaf82724818bffaf257eb3249e5962cade3e0c58768f85724630fb4b9e900847463b897f8aff0805b1e31ba4971fec8c9594721c82d8e298d35f318f044256e140e76869f369c1e41c07adf9c2ce296360e2a162c3a8ccf5d251d80603e46cbbe70e5292ab72e90dc2b16b3a76fcb187003c1f73b95f32f2bd1dcb22adc8cb704503fd6a43bbf37942320df1424efecbdec40f79b605b71d19cbf2986be37dc5b86f8f43dfb191218974b1", 0xf7}, {&(0x7f0000000800)="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", 0xfe}], 0x3, &(0x7f0000000480)=[{0x78, 0x11, 0x1, "05df3bb6dadb85fcce61aa0058988a88328247f04ed36dec3f9669ad698ea69719f39c942a217d17da5e35041eed00b9ca5b995edc9ede0108ad0d0a7205a3313f7ac2e5c8058f682150e713fd65e7eb13d980cc782e8d4f8872b7a563535e1f45c2"}], 0x78}}, {{&(0x7f0000000900)=@pppoe={0x18, 0x0, {0x4, @random="26774afd4ed8", 'syzkaller1\x00'}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="fcd52b66f3f69ab715e72ddf6f934921151afea7b5417611f45b72f476d0d8ed9c5bafc0404fe0a0a463c1a22b6f29102bd81b71ffa2cc07b05a21c37a92012dd154eadc59eb8d779355a2929e6abe95f8db57e7ecdfd87c91e3686c2240166b9ab24cdbfe741e546d261030550ab83d6462b7b60dd26393566e757be99e4f69863281fda1a4a6b01f89e578a3ac", 0x8e}], 0x1, &(0x7f0000000a80)=[{0x20, 0x14, 0x7, "334a56a854542f10bb"}, {0xe0, 0x107, 0x2, "d8a50a36eb92f500422653143bbb3c06cbac63c67cdba1574d914c8dbf9b948e17e30c09c089e96e017dfcc7b8c1e266e64cfae7400dadcdded7989d12878c9149170142e0c91e2055e87e701eec21cae004461785fa07eaa6590ae84df921cd7505cd10be0852421dffee8c0b77c050c4b9a08a8ea6b2f3d67a880ba59d7994ca9fd690b30f3926717b77c4e610ccd26340631f5127582c081cc55374fefe0b577ba2e428fb70f15dcb0a7d1f0d4c9e80a06f4ce844a14bf978c2df5fba03788dbb34870cc81de82efece66866bdb22"}, {0x1010, 0x104, 0xfffffffffffffffe, "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"}, {0x1010, 0x11, 0x5, "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"}, {0x18, 0x105, 0x4, "46edb2"}, {0xd8, 0x102, 0x4, "8d3f46f174efbe169dbd6f8417dd8663c672f5b844decd33ba39bf84b29b680b898b57596cb3a702d9b06770c52eb17a4fefa1c619f7703acc946b2777511c43135c2ebf830716d434b9f797bdf0f88ba1a1877c6e7a03603ff32d2675d17ed9400b3d39ef7160c2d898263f264806ccf2c9ccf31fe5a671b1463b3e94e94b31d18960e8c2a9a31d87da90313d0e0ba627e50bac8d1d74d83a0ed700bb026c7609014856165c4b9da2b58f4787eaf6529801bf6d9458cf4ad0d34e7be605efa9ccab53f4bc"}, {0x1010, 0x10a, 0x6, "7d7d0a371c7dade8636bc1009eef6d5b00663268dc8eddc28b99136ab8d1cc091cb0a498158e151f97ba607f5499c0efc69e61983105c93efe5729fcb9a9c99eac26076482f7689c66bdc957989a4dc503bba05a17e810e87f46ccab20ccbe34bfb79ee0600417717c6b195ee67fd9d7452c16f7a33f248a4ffccb87d99c3e5503c46c60dd7fb60f17debf8496f39221528bb2a5b4e7786386f9d0020dced55550ae17cdafbb2a6850efcd22fea8876252f47093a1c3c8d4f717e67c571e7bcbd8ad2484b187ec4c6acc21050e7124a2a337c09240b3c446268435f02d44ef60b961f14e8fe9ea72ef71e865bdf70f05c9b8013495f13845d6348e191fda1fe198016f8e5498ddd8b84d2eed5f3ea940d2beec5bc55a5b8381c70604785b14db861fe2a1960489e23a5fb45ba8dd4b29ce234dca221f85a7df23f2d48404c6a290a16c0e28b7dcb56de257e886f0bb75e0ae06bb5ce119f1f18d3078960a57d2a2fea45d2ad744eef03cda72a1272246da31251ffc801f7beb1b6ad7622d6d8c646861f4b0a2f4fbd180c259c6208eb245c1db0a1e4c03ceed9d4186f68cacd7ff1fbf6cde746c2bfeee04598d65284209f8b0f17e172cf09701691c119f6fa05ac32e3d280ceb3f25145bfad985defed2ef82593ea81faa3c6358c2a796ee921da69800866ed93a17a55d75fb6a7ddfd11924c9e7b52910bbf53dda2e89ea2eeb6f2ab37bd02fcc2e21665fa37fc2e18b3c1ff768e5c91be6c4f456d36bea375e4697276a9d5a1686ee3d0f06c1b22b37d2bd8457254b10cd31b14c5c684be0829e6d1d9e709b6badcfcdbe7fd7f88398777b2038e5d1a5da89a0fbfb341a39f2eae5223809ca7c5cb38ecf6804655739d56681eb0799d08703a792446d303ef67eca3aad11a0b6354c9bbe71221c342ac60093f97ae0f352fb7c7b0390bf3bd94c265d0186e86a8bb7f5d9204452af929f7ad654ef5deb72cb9a24254b99e7faa7d810f59688a95bb060509ceb77b4cd70bad17c4c963b3cf09c349717dbe1c33f4f5fd8f4b83688fce7efb63ab7411ecf4c4de7ffd16033e8a76b43d1c0ce8ee9e7d485121e79ff88173c82b5eb3d225b03cb7643a527e4159ebd7e1e4b9b8fb0c0d07e553234e708ca03c7f80d8e6f1fd9d8da2fe4819abbdf6a53f6216b8d28214c6e41983a81b5966f436c6d149983d2030ed7b571a03be9ec989fb991840806d0b816bd89f30977ff39a574ecf7df46ab7d948d4c4463b7072a7cdfec771b76fd8575ead4303c5f4f708f96ff624349ec5a32b97fd927201fc238c5add596d4294bd62f4dd6aae4036bbe059fe9df08823f1a77daf8bc308ce47717f4ad37fca4ae99dd4e284c3e3b4c489174191fc7d491151173c5c588c27d0977dc1c2f646b73714868bbfe4a625426c920a39e496dabdcc2a5d4ca82de7b6211b661dd3b2ac2532ad04f374234d06c14c9c63fda66ebb202b57a69a529dbf155450051992cd86183ca3c3f0f77435c1d1d8a1109fe789eff6f9740ca7299b68b2b35071f6046b469fc26f830dbd5d1d5f385b1f2080297515430bf90c4f82e9a5883c3374ed43ea4e493069b8d6c5b8145cda3ff6fb68231a44ee85f4b6a23dcd3338f07b048d7ab143b8172bdc8dda817bf349fcd22d186b805e188bcb8bb70189dcf60e75cf59e674fa6e6a0f7babb5d2550b70d0e1c7c09d776a6e03785f7f789cf02418c0997d48d868b989049ce50c914b8e8ab476a6551cfdf82a87d8788f2e35975e631cb46c06083fae59a3da2a21cc25ee554659a64377a4df21361a36cc9fb4bf494474e5dc9a4a222cd12a356dbb4901a1f3f9d9ce95c68806a530e719f50d0fc745c5e66dbb9411553a623b6bb2216796f9dbfbbd873a78e1e3ee05dda70e2f331d4886b7e2f81ac50f7aafb8154065f17149ce4cd6374ac959f64dc6d86781b211050dc48fb137ae46cbcb4878fad91796588f931c419acb7f710f58e747ec4e8b719ac18eb274378b24cf20d67e1e02c5946cf1aecc6b3e948353fe0810d0ebb0c076e9c50cc2825cf099c70d36fbf12673ea339937f40b14b3f652b217023cca66f124f75df85ac72efd7cf7a7fd51a55db37458db5157036456b40113e5d961c9aa1b01e4f123f7ce9cb3bcfb4a8a0b1a56ee0804632aa48123976450e3514a23b45493be60cf8b24b83754c3b656b6e3f0a8d55881939c2bfda537f632af76e67e9da25a9b012de6c2d3874e1e50de72124ee9d374a8c30c2521a269688c1d758be063bc7cd583fe27ea6481cbeb6d7a852ed5caae4bd07598837ac165a8ae864d4260234e0c05f66a3b7d3712b1dd68bb98171d704d02a6c0e4eb4680f1543a2c709a90876c9d58122ff8dec1cc4574e59778a85ddcea3e753116ead9549287f3e00f5c29789ddcee632e984a5600f3cc7fe6049fbc27e53cdd3bea7ae63f6fa453ec6ffdbc1f619e3659ad7f25570f457719ae003627fa57ede80c257802e905da9035693bd87f57a0a0e340fe34f217c2a6cd70a82581ab92c232ca94707014c54817800ed086e63f084542bb11e7ab1eb29726b04f03c1a85b6d944fd3ffcc69525e6d2e8898cd4933b2baa945dbf36c95ccd26379ad14f87ae5a13b154a882a8e983d2882fd2df14790bebed5c3c9039532edb2ffbabac7af13cb006043472f6907f78f6615d343dc7c6369a27844e318e829e34ced005f387cfe5877c3c6673c3862babf3e02831642dd7add5ff7b3bb13827b4a9325c92e2801ef14dc2cd88f937d5d5799f69a718cdc5aae60d4da274a25837eeb93b6dab04a5b5b0ec84c311da2e677f33da5c81502014ebf02c0a5872b7d2d2eca757e35fbfaa6e1d0d4399de58b5ae71b3e6c060efb0c6feab4a70b63fdbf2c7d5fc181df01bebbdbdcdf795fcda8bf58a8c9ce23e1186aa3ae0d4c1294c2d6e998560a720d12130c927caae1fdef3c70b94058bf39ad97741544b3b56082ef4cce6d198c1c72ffe7055186e0da320650d1f3b57fac556c38802ee1c2e1a9b68492523ae208e29a185cb1f5f268d7a7e21f8b557a81f450fc1c87fa9b83ab63cb0b3a0f2bea401115e73da3f947da0fc0979d56cddcda9a02b04ab0e135b6d45fb4ec8edefaf059305b6037e90669728d9a5afa137f59a9fb02a33ddf5dd2e01d615be7358ad0eba3450d65562b79d91700eded6227c416a6df69b16aa58d48d818ec5916564b6b3f9d513ce3b8c53f4ec3544002317f8c89498c876acfc9c0283219355aa183005fea00c07401daad9fabf81bd7dff57b3bb1e17f2577b2d58c949334a46350ccbe901e0af82206511d3345c53fc91c678a26407ce119e8472a68c575d0c222b362144aadef8defea9fedb1be07c10e8ab29dd2c23f165bdd991304be59e02c7a317097bef093689ff58cd7a4e5f3e08db8daf3e8b6316c99504d7d2fa55e81b0ba5e7ae519141c68bcfecde4b871b6438dabb4100772f4ef084b8d4e91d32752b4915877e96432e4d5a745ab3da4beb95cc59e5deae8c1243a3cae15fa73c2a0c9640a9acd4563a633e9edbf40d80315debc3d375893188a385f8dec45e9fb9a7de307dc6c19d39fcbee6bc9c3e3b6431efab0d3a83e5bfb087cfb662f170d9c6518ecf9e4c259b05a99cef580090257da77342643e2ed7e546a6c326732eecdc76cdf9455ad7af08b54a9a535e312638d641739781550d0d69b7941cfd6baed3bc3b425f83c010375967ec470ed321d68191fbeabaeaa5d4a517f80bfb68cea679207329fe7c5a48662e138af724ad0283ebcba43b37a52284b9759a20816fd202585e5d6957ded52a0a63c6942e5f5d60f122055abf369371a084a012b61ad58df32a4ea398945b0fbf0fcfae74f5fe2e3831b69832ab77737d237a4203ed7161ecb80c6c290b333b59228a7eed4becd516e962e68a93eb16de9099990f9190d0c60268f32a2e911d5a64bc920740e4ac8a3f91212fe3354b86d3ab4b44ce69e8f2299ea11a0e98553670ed588b108af1846bc57b7b27711b681047060f4b59cd7ec8a51cdcc048f4257ce6a2b4995ad211e4a39e2f6531977adcffb815e51f0ee90faf24d44af942adb7b734f633426c84b2ef5b1fc29458ecbc965f3ed81f778d993c0765c4a09326d4760b531b8ac49012caa52bd42391997859bf03f09603649a4ec5a1497857e10d722be6f9113609266ffbedca8561816770e8c06581a20ad01be35968356e8d8101b1fa6243b3ba171bb46172268c5aa5aed176180d08a9273bec21310445edcb82b94bdf7b209f771c2236be100b0d5377739af9f1d383677ba4ad1662d7f52917b5fd476c4c12c67997421ab24af14382ee073389f93408d5d4507d3daaa53aaef737da9bc3ced1d82bb35db263379617298298a7ca9a30401bb6de650ff65d1ec8376c371ca0f452d6a4804540d2e9db855c5c788b50d7a541d82b231853161b3b1c47d4cb1b249295e485d1c8f810a9280ebd85d13b22fe15f7256c314845bd2784bc8093b9f2d86bde4a0a46574d48a5f7309157bdd56da25433896e2becd78be53bc6d777fb1ba3d2aeb230ebfe0adddab9b64d7869aa2f0c2523ec4ec975430996e6129ef48b06892d0e4c67987d697fa0db6326e315970fa9d854a0e59cd27f789bf8d34e63729144b6beba88eb03281de1d37efce074010ce81a6ed3e8a6d3f859e2f689c23bda4088035c963bcecfd3d46076616a112b9e297259c1f2f7e30661c12beaa10880c7f0bacd207cb2e4a83b887cda3d0136e7990b85c11504756e6dbdb4fc17cbaea2f443a090f62d59c83dfd1f08e77c05369d9fa58e7be2c5400802cae1f9d5240d77aaebff625f0a862fc6f5bac5aca47cda0839e568343998ae093c009d7a3c6840d441904bcc72de89fe5b5e0eb42b263e2fc33df0fc3f5103a33b61749c0786ca044a2ba5ec700549b0e72720f0edccf05fe8a33201111d263aff67c5caf2a07e10a9e528b41c290d74abdbfcf0ca29c03521dea4d08409656b76f189416c323b71ccf9a59fc2157b0093221304bc0a9c98cb2cb4d2fd3954ebfaeef8ce3f876e6a82debca80c549b63b3116d1ba40faf15845e47363012868f779215cb83522a84170793680ff10e0ae966d7c33a840dde8650d9c8915fc9daff98fc74bf47f2a65efd35affe6642f1252fa0c4e11179ea6db746f474c6144fc4989f2996b7808fe3277d83154f3a3d0b9fb5495262b71ce59af69939a549fd97cde5790a56df119e510febcde062483a7d1c5358a178373160588338aafb2af3ae35b335706611199ec34c58b7dc537be1a34cc82b9e1e1a6667c13344d165d57abc0475bf95e97091cc40be96ee615cfe7cbcef5ed1c656660cad709cbcc7678346da3bd570188269839c0116612341e393dd74f6a1675ea3848bdb89edf3fbafc5e5b26e3b8896d60a8e8cb387cd54a41e04f36373bc33f822c63ff3673a583e17f649b25c16ae01c7c7d70c76ad728c2a24745ca6ca69b4da12e1abeae2584cd96908f043c766725301e5723348d7e00dfe80a861617a47a308a85749387ae76b7b056914d680a98615c749268bb12faacbc7c029da50d61e618977116527aca83511421c843d624cda42742ec5d7d5ce1b60a36165d3b45684593b9e16455248cbf64de518c8288db14c75a71a33da2a3aead2100b9f9581898d61baa63475b6c75a3fd58a1d7cc57147630bc61f9a27618150c8cecfd9c605d86da02b62fa78b92530321356a2327f8cfa9b182576387201790533567366c3ed04b99c84b6809a643ffa"}], 0x3220}}, {{&(0x7f0000003cc0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003d40)="ce232cc9d71cabb2ee8634196e10a471731da15cac3ef04c671215552ee22009e87df552d24cd13c78ec9efbcd9657b0cd73c40e549d275dab7d046b509574a4880ef41b45513b3a5e2e36cfae4c85ee12e43f37efb05c44bbfc4ae7030f8ab47e9935c7dfb6284ed89d1dc6fa2e1df24541e1e33e2e529882faccfe6fe2ba1e21a3d4172ade3a0b4f2d5dd44a8e63534ac062086454eb9c2cc346e61729dd703753d0", 0xa3}, {&(0x7f0000003e00)='xa', 0x2}, {&(0x7f0000003e40)="d304c1f26a62f3331d1897d9c89ec546eabf082a125cba241316fe179060a293051431b76061671fdec493e63bb6dba87f4ed15a9e676473ae266b2987248fc65b296ee2688b1ed119bfbe7aca57357d270348c5025e1552fac4c339628b0f50d7211673478c3eb4f90996b399144b85b1d65e6e7637ca84ae091ddbac13ce965c3069b791216be679eed3633260bad032d9428df9172c17489a30271550a72dca510203af2d1fe4ffa9d105c207b2d254d4a1", 0xb3}, {&(0x7f0000003f00)="46dd62fe2ea3c37e133a62de4cc2e6cb2c9bfc8fb6c39ffb4b2a47eb6f8ac3bdaef6bbf520d93c7ada46a56777d2fde68716281810516e53260d6bd3ca36c5b4c50706100cab34d5a7abb1611c93f146b8fc5624e34c9eec769b5e9ecc821b44b2c9527ea20eea2dc672ee20d04b4697991c71ee587345553878612174d519c6341b75631ece8451fb2df04a441e40b62f8c016073e0d0a25769f1961340f3742ab353a34c2035718caa34", 0xab}], 0x4, &(0x7f0000004000)=[{0x28, 0x187, 0x9, "5b187afee20354c47645fe6bfc8ea0898e6db62e96"}, {0xe8, 0x8d, 0x1, "1ccee47050cc3d8288e5aa2fa73d2b5661ea6bc3cd7e03a6d2d259e8bc1b5583f3493ccc4164791323164da28aa0ee7b0ad693696945ff56aa64c07f6d4960f33b8c9947f8de431f583781bd4a591d7d84ba7f46963adb1c5b0cdba35b7a544aaf9c8af6bcb758b948a9f4fcf7b66d5066301f8fafc0ecd1128b7b80db0d4c32243b0a3d958cbbbfc75d26960880d03a90e4f9c4e1d1daef6cea6cb047502964c372b30dc2f084c71fda283c7fc94ebafb4897e2441a27b45693863ea803d8d4a63d562a6eb3887ea3e7a747cbea7c14bffbb876693c19"}, {0x18, 0x2bd, 0xa4a, "fd3d932257"}, {0x80, 0x104, 0x5, "db96919d0bb7a62f524c0c74999240e09d38a4f46b778de1713a42e5e3f14a32118752f253cfef973fceeda39fd2ef4bed9afcaca77c9b8fd96df099d3fc9078154a396d41ac9253f65ccc203b6c3d37844eca577b8032ce2ce74998993e8a4a7bf0da4d2d801651626fdecb5e66"}, {0xe0, 0x0, 0x3, "7a6b826dfb83d39c3f26780f92d0eb2d7066522905177f7c7553e28c295a0cb56b2a9f2c59a3d8d5f40195c957a197b8ea801ee08d26497be4e12f4d8c75838fa2f3494461ae19fb0f90dd628c4f76c11dd8b4c93a35a4c355b0fac66ef96642856da7963a8860077d73237e028ac7f2bf601dd1337e09c9fcbeab9dfbdd6a6fb55d5e41d8ee06502591fe9d060328c093707d2b827ea40e998ee935ea2cec18bcfc81fcd2202ecc5c3050100091bbb58d1cb27b87492d5f8e290251d55723b40e84cc589f2d7379d95a512a42bef3"}, {0x78, 0x3e, 0x9, "3866ad995ebdf422e1b4f60883d1e11d39f0b5c79b3f105da464adf6a2b074608d2eb04344718969b23111f6eaa0640763e3d4c76d522e375dbe94c16f860c78c7b75e316d246fb7fe339d3ba9a6dfc634b2c1d90776ffe4b0975d0f1da1513442"}, {0xe8, 0x116, 0x9, "e6badddbb4af31a2093132c0a5778f6beaaebe74b2cb5a6d4185f9fc01eaecb97a96a8894b3c4a4f787129f44b742eba73a7664d3aa5cd220d55fa9de3f2393e75ecb6d9b20798a279688d459ad7633a0176dba96516bede31b300218bb6e15ad4b1ffebe8d03265bd164204847eecd967929c19a2703ddb5b6c8a11d095c8061137f310532104189c1e3a23797616ee738161faf9ed5d8b7a6f642694eb8292a32df1481bae45da462b9e9e925b86a8617f10b353587cd599b9e57222e5f75700c59248b32e7bd24f1634bc7703aedeb873852f3d74537c"}, {0x80, 0x115, 0x6, "02da02d593d8999daa5bf406c98b19bbdc740bae7e4a5b1892c07ad58be58a9034f2b3a321ac9b3c8cacfe79c5dcfe3febac561f329f9e8d04cfffcbf09ffebb9aece4181e84725905767254cc78e2d4a25ef576db76a81c49ffe94c09f711153f1f37bac4adb0339f7682c52186"}], 0x468}}], 0x3, 0x20000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0xfffffffffffffffd}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

22:42:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  377.018595] binder: 22151:22153 ioctl 40046207 0 returned -16
[  377.084061] binder: BINDER_SET_CONTEXT_MGR already set
[  377.084069] binder: 22182:22183 ioctl 40046207 0 returned -16
[  377.084150] binder: 22182:22183 unknown command 1077961476
[  377.084158] binder: 22182:22183 ioctl c0306201 20000440 returned -22
[  377.144785] binder: send failed reply for transaction 3339, target dead
[  377.146116] binder: 22182:22184 got reply transaction with no transaction stack
22:42:33 executing program 5:
r0 = socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030003000500e1000c1e0309001a03a000", 0x33a)

[  377.146124] binder: 22182:22184 transaction failed 29201/-71, size 80-24 line 3046
[  377.178736] binder: undelivered TRANSACTION_ERROR: 29189
[  377.186574] binder: BINDER_SET_CONTEXT_MGR already set
[  377.186581] binder: 22186:22188 ioctl 40046207 0 returned -16
[  377.186626] binder_alloc: 22186: binder_alloc_buf, no vma
22:42:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000700), &(0x7f0000000780)=0x68)
fstatfs(r3, &(0x7f00000006c0))
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = accept4$packet(r2, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a00)=0x14, 0x400)
recvmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001d40), 0x3, &(0x7f0000001d80)=""/250, 0x99}, 0x6a}, {{&(0x7f0000001e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000021c0)}, 0x9}, {{&(0x7f0000002200)=@ipx, 0x80, &(0x7f0000002380)=[{&(0x7f0000002280)=""/56, 0x38}, {&(0x7f00000022c0)=""/175, 0xaf}], 0x2, 0x0, 0x17c}, 0x9}], 0x3, 0x40012180, 0x0)
r6 = accept4(r1, &(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x80, 0x40800)
sendmsg$nl_netfilter(r6, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x84139c11}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xec, 0xe, 0x3, 0x100, 0x70bd2a, 0x25dfdbfb, {0xc5a06d1d23dc0f4, 0x0, 0x6}, [@generic="8dac028aabb89c4bea4382889b830f0d5a7e4dda5c25a93c4016ef1049f1e346ea49b85cb5f3f1e4769f8b38530afd9f76b819fe9a9ad3f9032606276f03aa39f4ab3bb6239fa28eca9614deb880e1cff0e561921ffa546675dbf4e8085a9f7a09d5c13c3eca6cce8dfbb1e2717bef7e8e16c765c3493d7c2efcb821b1d18e57d96d6b7ae13b0b2a2b5013f4c08569eeb8a9be8d8f94a324cebe90133966c78785b0865907391f9ceee7482aca538ff967b7b341e40f9d9c9f9fdd7e1374682a15040d71f290c11499e0bd453d6e95c3", @typed={0x8, 0xd, @ipv4=@rand_addr=0x5}]}, 0xec}, 0x1, 0x0, 0x0, 0x20001810}, 0x8004)
syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x2000)
r7 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)=""/191, &(0x7f0000000080)=0xbf)
r8 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r8, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r9, &(0x7f00000000c0)=""/31, 0x10000067f)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f00000006c0)=0x800, 0x4)
readahead(r0, 0x5, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:33 executing program 5:
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

22:42:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = open(&(0x7f0000000080)='./file0\x00', 0x10000, 0x20)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/39)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c63415f0000b0f28d5076f0111164f7b0"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  377.186642] binder: 22186:22189 transaction failed 29189/-3, size 0-0 line 3284
[  377.239402] binder: undelivered TRANSACTION_ERROR: 29189
[  377.251653] binder: release 22186:22188 transaction 3354 in, still active
[  377.268379] binder: send failed reply for transaction 3354 to 22186:22188
[  377.283912] binder: undelivered TRANSACTION_COMPLETE
[  377.293961] binder: 22199:22201 unknown command 1598120844
[  377.293968] binder: 22199:22201 ioctl c0306201 200001c0 returned -22
22:42:33 executing program 5:
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80), 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x36d)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c)
syz_open_dev$binder(0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

22:42:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  377.306136] binder: BINDER_SET_CONTEXT_MGR already set
[  377.306144] binder: 22199:22201 ioctl 40046207 0 returned -16
[  377.306149] binder_alloc: 22199: binder_alloc_buf, no vma
[  377.306167] binder: 22199:22203 transaction failed 29189/-3, size 0-0 line 3284
[  377.354204] binder: undelivered TRANSACTION_ERROR: 29189
[  377.363256] binder: undelivered TRANSACTION_ERROR: 29189
22:42:33 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
accept4$unix(r2, 0x0, &(0x7f0000000040), 0x100800)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001000"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

[  377.382996] binder: send failed reply for transaction 3357 to 22199:22201
[  377.406288] binder: release 22208:22211 transaction 3360 out, still active
[  377.417507] binder: BINDER_SET_CONTEXT_MGR already set
[  377.423361] binder: 22208:22211 ioctl 40046207 0 returned -16
[  377.430092] binder_alloc: 22208: binder_alloc_buf, no vma
[  377.430111] binder: 22208:22213 transaction failed 29189/-3, size 0-0 line 3284
[  377.430670] binder: undelivered TRANSACTION_COMPLETE
[  377.430700] binder: undelivered TRANSACTION_ERROR: 29189
[  377.430723] binder: release 22208:22211 transaction 3360 in, still active
[  377.430733] binder: send failed reply for transaction 3360, target dead
[  377.430900] binder: undelivered TRANSACTION_COMPLETE
[  377.430906] binder: undelivered TRANSACTION_ERROR: 29189
[  377.430997] binder: undelivered TRANSACTION_ERROR: 29201
[  377.431039] binder: undelivered TRANSACTION_ERROR: 29201
[  377.431062] binder: undelivered TRANSACTION_ERROR: 29201
[  377.431215] binder: undelivered TRANSACTION_ERROR: 29189
[  377.431419] binder: undelivered TRANSACTION_ERROR: 29189
[  377.431483] binder: undelivered TRANSACTION_COMPLETE
[  377.431569] binder: undelivered TRANSACTION_COMPLETE
[  377.431576] binder: undelivered transaction 3342, process died.
[  377.431657] binder: undelivered TRANSACTION_COMPLETE
[  377.431662] binder: undelivered TRANSACTION_ERROR: 29189
[  377.431686] binder: undelivered TRANSACTION_ERROR: 29189
[  377.761014] binder: BINDER_SET_CONTEXT_MGR bad uid 3072 != 0
[  377.767063] binder: 22172:22180 ioctl 40046207 0 returned -1
[  377.767082] binder: undelivered TRANSACTION_ERROR: 29201
[  377.767112] binder: undelivered TRANSACTION_ERROR: 29189
[  377.804971] binder: 22172:22174 transaction failed 29189/-22, size 0-0 line 3138
[  377.805227] binder: 22172:22219 got reply transaction with no transaction stack
[  377.805234] binder: 22172:22219 transaction failed 29201/-71, size 0-0 line 3046
22:42:34 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:34 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0)
mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)='bpf\x00', 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x5010, 0x0)
mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0)

22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000480)={0x4, {{0x2, 0x4e24, @multicast1}}, 0x1, 0x8, [{{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e24, @rand_addr=0x6c5}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, {{0x2, 0x1, @local}}]}, 0x490)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r3=>0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0x38)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r4, 0x0, 0x0)
setpgid(r3, r4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c)@\x00'/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  377.859158] binder: undelivered TRANSACTION_ERROR: 29201
[  377.865162] binder: undelivered TRANSACTION_ERROR: 29189
[  377.888352] binder: undelivered TRANSACTION_ERROR: 29201
[  377.888376] binder: 22182:22222 unknown command 1077961476
[  377.888383] binder: 22182:22222 ioctl c0306201 20000440 returned -22
[  377.916684] binder: BINDER_SET_CONTEXT_MGR already set
[  377.916695] binder: 22223:22226 ioctl 40046207 0 returned -16
22:42:34 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0063404000000000000000000000004ea4b1660000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000c8826ef4947ea7a7413882d86c17b7c0496b075f21fe340382ff4abd4a23ac27af499873d5c38c8a10217551f1c6ec98376f572823af92a4d1cdbe01e220cdd74e1437c15c14f90f84573cc28193855536b7096ae4f4b97cc4a322baa36ef1e86be48c405bf380822eaa6c765a510f2e67163d6da6ff2ba04803a7cee4b7a94b561a13516ab8eb1afc69788708e7c3b32ed59b7f70ee0888efb35ae5d35858f2fe25d3ddeaebc8c09e1b99625642b88c07092841d3"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
getpeername(r1, &(0x7f0000000200)=@tipc, &(0x7f0000000040)=0x80)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="126348400000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000000a2f8818fbccd903500"/76], 0x0, 0x0, 0x0})

22:42:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x38)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)
getpgrp(r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x301e, 0x2}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000180)={0xfffffffffffffe66, 0x18, 0x30}}}], 0xb, 0x0, &(0x7f0000000080)="8bbc2cc5fe614ff0ccb02c"})

[  377.917523] binder_alloc: 22223: binder_alloc_buf, no vma
[  377.917540] binder: 22223:22228 transaction failed 29189/-3, size 0-0 line 3284
[  377.940825] binder: 22182:22222 got reply transaction with no transaction stack
[  377.940834] binder: 22182:22222 transaction failed 29201/-71, size 80-24 line 3046
[  378.026021] binder_alloc: 22223: binder_alloc_buf, no vma
22:42:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x471040, 0x46)
epoll_wait(r2, &(0x7f0000000240)=[{}], 0x1, 0x7fff)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000001000"/53], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x2d2, 0x0, &(0x7f0000000040), 0xffffffffffffff65, 0x0, &(0x7f0000000380)="881bd76ec0ee1b04d8f414168ee7dd"})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
accept$unix(r4, &(0x7f00000003c0)=@abs, &(0x7f0000000040)=0x6e)

[  378.026038] binder: 22234:22236 transaction failed 29189/-3, size 0-31885837205504 line 3284
[  378.026901] binder: BINDER_SET_CONTEXT_MGR already set
[  378.026909] binder: 22233:22235 ioctl 40046207 0 returned -16
[  378.033302] binder_alloc: 22223: binder_alloc_buf, no vma
22:42:34 executing program 5:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @empty=0x2}}}}}}, 0x0)

22:42:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = accept4(r0, 0x0, &(0x7f0000000080), 0xc0400)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000480))
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000348000000000000000001ebcc52231d826db0c0436d3bb3439ba7622c11befb983ea4c804230952827dd2d8a64f14b5795f87605000000002c370101000000000000bec808054d3a3b472e300032a3956c5fc456ed0ce834c1f59610000000000000", @ANYRES16=r6, @ANYBLOB="200029bd7000fbdbdf250300000014000200080007008200000008000900050000002400030008000800810000000800040000000000080007004e23000008000800000000000800060074c1000008000500810000000c00020008000800030000001800010014000300000000000000000000000000000000000800050088000000"], 0x88}, 0x1, 0x0, 0x0, 0x20042098}, 0x4000000)
ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000100)={'bridge0\x00', 0x5d})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e630c400401000000000000000000006b4eab01407a5876f9c754b4ff613d30b0094edf90bdf1833d0c165d60a60f6e2a5cef60f64707daed9857aff5df70fa0e2850d105a6f78e57a6dd9cf51980a0ca4418e6a0cac514efb03f4b615723fe2fb10597112c27327f667a88417eeda2dc9aca3fe435baa4b74bcd0cb268e18f49ebd094a44d3f19610754c7d5b1b1952254e5c204b15c847ffc9572f7868249205b1bc7124f082b7b7f30df7cdc303c39ea"], 0xfffffffffffffea0, 0x0, &(0x7f00000000c0)="cc"})
syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00')

22:42:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x39)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200))
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff5b, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  378.033323] binder: 22234:22238 transaction failed 29189/-3, size 0-31885837205504 line 3284
[  378.043187] binder: 22237:22239 got transaction to invalid handle
[  378.043197] binder: 22237:22239 transaction failed 29201/-22, size 72-24 line 3138
[  378.044763] binder: BINDER_SET_CONTEXT_MGR already set
[  378.044771] binder: 22237:22239 ioctl 40046207 0 returned -16
22:42:34 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000000c0)='-'})
pipe2(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
ioctl$KDADDIO(r5, 0x4b34, 0xf46c)
write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0x80000239)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
connect(r6, &(0x7f0000000480)=@nl=@kern={0x10, 0x0, 0x0, 0x4021}, 0x80)
dup2(r4, r3)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
getdents(r7, &(0x7f0000000340)=""/199, 0x188)
getsockopt$sock_buf(r7, 0x1, 0x0, &(0x7f0000000300)=""/187, &(0x7f0000000000)=0xbb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvfrom(r4, &(0x7f0000000240)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcff)
r8 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r9 = add_key$keyring(&(0x7f0000000000)='\xc2Mg\b)\x00\xfc\x00', &(0x7f00000000c0)={'\x06yz', 0x0}, 0x0, 0x0, r8)
r10 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r9)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r10)
add_key$keyring(&(0x7f0000000100)='Y\x02yring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_FPEMU(0xa, 0x0)
dup3(r2, r2, 0x140000)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000001, 0x30, r4, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x8004}, 0x4000004)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xba45b9312606c0b3}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb0, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x3, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x25}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0x74, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0x2f, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}]}, 0x29}}, 0x40)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x2})
r6 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000001f00000000000000002000000000000000008000"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00b773cd"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  378.044823] binder_alloc: 22237: binder_alloc_buf, no vma
[  378.044842] binder: 22237:22240 transaction failed 29189/-3, size 0-0 line 3284
[  378.109743] binder: BINDER_SET_CONTEXT_MGR already set
[  378.109752] binder: 22244:22245 ioctl 40046207 0 returned -16
[  378.109852] binder_alloc: 22182: binder_alloc_buf, no vma
22:42:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0xa)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000100000000000800000000000a61a8012f57500"/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xffffffffffffff94, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2193697505000000000000005aad046f97049c0ef1ae62b79ee51dab00cda1f3ef"], 0x1, 0x0, &(0x7f00000000c0)='\x00'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x0, 0x0, 0x33}, @fda={0x66646185, 0x0, 0x0, 0x20}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  378.109870] binder: 22244:22245 transaction failed 29189/-3, size 0-0 line 3284
[  378.117231] binder: 22244:22245 unknown command 0
22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000d7870400"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  378.117240] binder: 22244:22245 ioctl c0306201 200001c0 returned -22
[  378.118174] binder: 22244:22245 got reply transaction with no transaction stack
[  378.118182] binder: 22244:22245 transaction failed 29201/-71, size 88-24 line 3046
[  378.123800] binder: BINDER_SET_CONTEXT_MGR already set
[  378.123808] binder: 22244:22245 ioctl 40046207 0 returned -16
22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x10000, 0x0)
getdents(0xffffffffffffff9c, &(0x7f00000000c0)=""/31, 0x1f)
fsetxattr$security_ima(r1, &(0x7f0000000180)='security.ima\x00', &(0x7f0000000200)=@md5={0x1, "a03d88b2eab00c08ba3289f62d59b996"}, 0x11, 0x1)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1, 0xe004)
poll(&(0x7f0000000100)=[{r0, 0x5eeaa079774a9196}, {r0, 0x1}, {r4, 0x2}], 0x3, 0x5)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
fsetxattr$security_capability(r5, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v1={0x1000000, [{0x5, 0x4}]}, 0xc, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000008100000002bc9069366e356500"/56], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x32, 0x37, 0xe, 0xb, 0x3, 0x4, 0x2, 0x111, 0xffffffffffffffff})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r6, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r7 = dup(r6)
readlinkat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=""/93, 0x5d)

[  378.124662] binder_alloc: 22182: binder_alloc_buf, no vma
[  378.124679] binder: 22244:22246 transaction failed 29189/-3, size 0-0 line 3284
22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @rand_addr=0x8}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @loopback}, 0x40, 0x0, 0x0, 0x0, 0xb5, &(0x7f0000000080)='bridge_slave_0\x00', 0x5, 0x1, 0x486a})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x40000, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  378.125748] binder: 22244:22246 unknown command 110
[  378.125755] binder: 22244:22246 ioctl c0306201 200001c0 returned -22
[  378.125833] binder: 22244:22246 got reply transaction with no transaction stack
22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006300400000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000001d000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:34 executing program 5:
unshare(0x20020000)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')

[  378.125840] binder: 22244:22246 transaction failed 29201/-71, size 88-24 line 3046
[  378.205569] binder: BINDER_SET_CONTEXT_MGR already set
22:42:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r5, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
fcntl$getownex(r5, 0x10, &(0x7f0000000100))
sendmsg(r3, &(0x7f0000000380)={0x0, 0x37c, &(0x7f0000000400)=[{&(0x7f0000002e00)="b10b938636ea69df7b5a9984bb1bc72ef58d96e56e11df900a707f4946b1637e2096c584b9a1b4e017163fbdb35160a56c11dfbe74df97d36d19ad6a91c6fb4ad19581b8cf707131830f7a22b1b263c9da0e443c5e969ed6a0d3bc508bf75c3147447379f585759ceba0de5cda46291dc1b8f106a83e1cde43a862d95413ce2616b261ed9f79913ae781b3b843ea1b4429a750b8ccb1952a7b863d0bada9f61df6609fe368eaf47c0ce9e46a22b0d75b063deeaa94285d0c43353046e0a308296a76b0b0145f8af9aa0ed0e18bc50509eaef21c8e03842a97df3a462ea3f9d5f83bf1d4d2875f0d5b24e941483f863cd2ea7c769bd3e594fb173dd873c7d9a3fd20939ad1d5867881ed77a078007b4972aba36cae02004373a6a74d74cb15a52c5f8426cb6f235d38048fd91f5d6100fd58a335df10add227d804167ba191c7a035c5a2a916e7fef18a6003578820b3e0be26a22f2c149f40a0335cadcca64a5e44179e6ce4d7f7c16e8a96c5be7cdf66eef901cb8eeabc94bae30acca8c6fa02889c32311044dcbc9a2e02e0632f7f9aa96849abede543773745e4652fccc503003f10cd68ddab594969ad36cb622ed7ba22dc46a80fb63ac2c561a80ae5c10b295b9f75d9536ba1ac24b8e9ae217611ffe79cb9422158475c1a89a51547d13c03b68d75ffb5717a35f381774567871e9e4190272c97eafcfa0a07a751d0bc8eeb0c206e12b2cff1065a3d5622635fa44c0dcb0722ad4c97e6b7d5844b2e9bab9ba1d083fa2930a3ea267d7f15d817e2b2e055ccfbaf019292f6156efd3a9a13ea90ecf59fc1bf35c6626db1c6759a50ed84acefd3cdb3532da1f23a262055223e7a3a62f15eeb8060dc9cfa30e6783757ae2f0ac6ed75d3212591ccd", 0x27d}], 0x1}, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c630000"], 0xb, 0x0, &(0x7f0000000080)="ea8ad32dcd679b306e562d"})

[  378.205578] binder: 22248:22250 ioctl 40046207 0 returned -16
[  378.217845] binder_alloc: 22237: binder_alloc_buf, no vma
[  378.217863] binder: 22248:22250 transaction failed 29189/-3, size 0-0 line 3284
22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000df353fb0000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/68], 0x0, 0x0, 0x0})
r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0cf822c6"], 0x1, 0x0, &(0x7f00000000c0)="04"})

[  378.217994] binder: 22248:22250 BC_REQUEST_DEATH_NOTIFICATION invalid ref 260
[  378.224953] binder: BINDER_SET_CONTEXT_MGR already set
[  378.224962] binder: 22249:22252 ioctl 40046207 0 returned -16
[  378.225086] binder_alloc: 22182: binder_alloc_buf, no vma
[  378.225103] binder: 22249:22252 transaction failed 29189/-3, size 0-0 line 3284
[  378.227441] binder: 22249:22252 got reply transaction with no transaction stack
[  378.227449] binder: 22249:22252 transaction failed 29201/-71, size 88-24 line 3046
[  378.235851] binder: BINDER_SET_CONTEXT_MGR already set
[  378.235860] binder: 22249:22252 ioctl 40046207 0 returned -16
[  378.235863] binder_alloc: 22182: binder_alloc_buf, no vma
[  378.235888] binder: 22249:22254 transaction failed 29189/-3, size 0-0 line 3284
[  378.239161] binder_alloc: 22223: binder_alloc_buf, no vma
[  378.239177] binder: 22253:22255 transaction failed 29189/-3, size 0-0 line 3284
[  378.239867] binder: 22253:22255 unknown command 0
[  378.239874] binder: 22253:22255 ioctl c0306201 200001c0 returned -22
[  378.250687] binder: 22249:22257 got reply transaction with no transaction stack
[  378.250696] binder: 22249:22257 transaction failed 29201/-71, size 88-24 line 3046
[  378.294569] binder: BINDER_SET_CONTEXT_MGR already set
[  378.294576] binder: 22262:22268 ioctl 40046207 0 returned -16
[  378.295776] binder_alloc: 22182: binder_alloc_buf, no vma
[  378.295797] binder: 22262:22268 transaction failed 29189/-3, size 129695437822630-0 line 3284
[  378.902319] binder: undelivered TRANSACTION_ERROR: 29189
[  378.915036] binder: undelivered TRANSACTION_ERROR: 29201
[  378.928784] binder: undelivered TRANSACTION_ERROR: 29189
[  378.942259] binder: undelivered TRANSACTION_ERROR: 29201
[  378.957104] binder: undelivered TRANSACTION_ERROR: 29189
[  378.969784] binder: undelivered TRANSACTION_ERROR: 29201
[  378.983602] binder: undelivered TRANSACTION_ERROR: 29189
[  378.997390] binder: undelivered TRANSACTION_ERROR: 29201
[  379.010044] binder: undelivered TRANSACTION_ERROR: 29189
[  379.016032] binder_alloc: 22237: binder_alloc_buf, no vma
22:42:35 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x286, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x1}, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  379.016053] binder: 22248:22304 transaction failed 29189/-3, size 0-0 line 3284
[  379.042942] binder: undelivered TRANSACTION_ERROR: 29189
[  379.048600] binder: undelivered TRANSACTION_ERROR: 29189
[  379.069264] binder_alloc: 22223: binder_alloc_buf, no vma
[  379.069283] binder: 22253:22307 transaction failed 29189/-3, size 0-0 line 3284
[  379.069419] binder: 22253:22307 unknown command 0
[  379.069425] binder: 22253:22307 ioctl c0306201 200001c0 returned -22
[  379.080740] binder: BINDER_SET_CONTEXT_MGR already set
[  379.080749] binder: 22262:22274 ioctl 40046207 0 returned -16
[  379.081006] binder_alloc: 22182: binder_alloc_buf, no vma
[  379.081025] binder: 22262:22274 transaction failed 29189/-3, size 129695437822630-0 line 3284
22:42:35 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2010, r1, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

22:42:35 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfee9, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @ipv4={[], [], @loopback}}, 0x18)
pipe(&(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
dup3(r0, r1, 0x0)

[  379.089413] binder: BINDER_SET_CONTEXT_MGR already set
[  379.089422] binder: 22309:22313 ioctl 40046207 0 returned -16
[  379.089491] binder: BINDER_SET_CONTEXT_MGR already set
[  379.089498] binder: 22309:22313 ioctl 40046207 0 returned -16
22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="114254f1eec21a6c1367465afed9080a3d0e15746efd4898c6126f11911677c3635c05fccf0f68d6b2cde5425110622dbd7f85bcc8423255364deac1e7523587ce2dc6b21a7bef005ef208fcd6914cafc2d82978a1594e2dcb8da26258a4bbceaddf37c64ad8e6e731376afceef3755cbb51c6d6a51d53b7", 0x78}, {&(0x7f00000002c0)="a5b4d80b77417e4ba465b1c6d9050f96521defa1b5c5e329f2ad", 0x1a}], 0x2, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x7fffffff, 0x3f, 0x7fffffff})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000140)={0x3e, 0x3, 0x0, {0x2, 0x1d, 0x0, '/selinux/avc/cache_threshold\x00'}}, 0x3e)

22:42:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
r4 = openat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
stat(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0x38)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r6, 0x0, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r7, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r9, 0x0)
sendmsg$netlink(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000540)={0x270, 0x2f, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xf0, 0x66, [@typed={0x4, 0x40, @binary}, @typed={0xc, 0x1e, @u64=0x9}, @generic="51ef8487b1ace06ce4623ea0c5c751a7de748ea186c321c59f3902b6d6433514466882303dfb8167c0e5b6abc42baec83ce340bcee24eec1806648df64e8549b4a4a87230d692d", @typed={0x14, 0x6e, @ipv6=@rand_addr="702bd457c866f89e0b3d97b7c4ca79f1"}, @typed={0xc, 0x31, @u64=0x1000}, @typed={0x14, 0x87, @ipv6=@remote}, @typed={0x8, 0x30, @fd=r4}, @typed={0x8, 0x3e, @ipv4=@rand_addr=0x7f}, @generic="8065cdf384c48730b15ddfc9ddc54a882b3f9b9db18e701ae1dba41dfd9fce00453ed7bc8a10801c46e42e3d18a8f00152f2a64b28acecd5fb9d5ab4e198ef2ea49a96f8d904a1ae4bc589b619b6"]}, @typed={0x8, 0x34, @fd}, @generic="36dcad7cbb9fa4bc1215cb4f9bfb4bfc68c841c057ae9451ec398b40f79a32295e7ca00c990d6ae88be3f6ea0a8702680b2f4c39ef7a3c99b6d7d7c4e7edeaeefbb1c2f62f0ba296549ae2fc385873a85fe8ee0eae5bb6988483295f188c49e177dbd980e22e0b26985de7f356958a55768b8b4a066905f4a3fd2769b570372543de669b0bbf7fae2a723fcba0b4328601b53d70a0f67281fb9edf7a259abf7ce74a1e9024281315a0b176491fd180db91029ac2d3d3c955b58679c55afa68b628b8777836a4ded9bbe901b918356b96d60082eec105f729a36ddb583a8201fe5c9558dae8c805ff54118bdfcb61d46ba84e76", @typed={0xc, 0x3e, @str='.eth1-\x00'}, @typed={0x8, 0x26, @uid=r5}, @typed={0x8, 0xe, @ipv4=@multicast2}, @generic="7cbea13628b5ea62e23d74b52c45c3ac7f28fade1f91219eac412e0e50b58856085e4b329e15c203a177939b0c6dedc392ad24e6e855376cee295b801e89330b43bd4f40593a7ab31bb412941c820f84f40f0c4ec025"]}, 0x270}, {&(0x7f00000007c0)={0x1c4, 0x20, 0x2c6198fa4531fc07, 0x70bd27, 0x25dfdbfd, "", [@typed={0xa8, 0x7c, @binary="62ba6ab2d84f327bc70694c4b01c8ee24a2a60c446739869c3643f7ab36adde8691c3e11e40909086a3de010e1ed332d9f56b938bbcf26dc449b6a22a1f036e5e979c30b72cb5a30832e5aa56c88ad2edb4fa241b823ec0d1b69dfa79d8c6623ba1bcf137621ea4d6e0a5f255bfbeceee0b1eb5ea1ffeb90718e5e6d673e19953874f9ec35aedbb1dbf706c561c61cf4d67283ce17e48efc78364db9cef30e7109de1394"}, @generic="660327704f460aaa0c1fb934ec914b9fb01e32323fc880038fe1481f32e5beffadaf80091570756c9684b4e9738398f653284e1ffe050ef27bdf1993512930d5f7d5b1fdf309a1c47c4bc760e44c8dc09da4ed7696d70b79aadc109a4dfd92135ec3aa8d2d72829d2e037b47b4944f2b0c", @typed={0x8, 0x87, @pid=r6}, @typed={0xc, 0x38, @u64=0x6}, @typed={0x8, 0x71, @fd=r7}, @generic="1c77393b756ef1f14438885a337953666df0970bf20f9b7cff07255a485cc64832f1ec962167cf5f06550fd56a72af2410e221d0992f53f4afe047215cbea70beb7ac5c4db2a7a771c90d2a0ff76001edff26e259022110410101c955da067fe4ae04950eb26d933d569d6956075c2a3ed096276c9", @typed={0x8, 0x3f, @uid=r9}]}, 0x1c4}], 0x2, 0x0, 0x0, 0x40}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r11=>0x0}, &(0x7f0000cab000)=0x20ff0cdc)
setresuid(0x0, r11, 0x0)
lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x100200008}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000a40)={0x17c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="b0d7a63254aefdbfcb7f93e4b8239b8e77b8e27d8c725e1dfbbba2a55769aff9e7008cd5220f10a173d37611e5f92a188586a82e9428bf255aa313d03c93e522bc6e8882f8bda091533318210695c5e31227e94a440842b5d1f71ec3c6479e63766c2b3fb253d9328a38140780fedeecf8d71c6535d4b061cc34502f38fe54ae43e8c9db104e1946510c9e62715696d84b9e94e56877c98a42731e1b7676b965cc14234a1e6a89ad2dc903d06ef7cf4cd4c53215314eae26e0c7df4490d35248812ce37556ee95643445049b362065a0f6a8633f35d3903db5d3ef131c9d2166d9e3679c9ac064441507583df5", @nested={0x8, 0x8e, [@generic="0472f6"]}, @generic="8126fc9c6c553a9d5aa85b03fc7b856de42072396e35e82e9aaf60b2b576cdf4461684317d196bbcacb80c83eae938fd75f456fb10d55c1b4ac59b47c6210c5e83d755fa39eace9676e6f45c2ea7404f594f4da81e8304a75b1c6d04f06703d0847afb10ad4fcd19f0e5d3ae4e24da74db77ab71"]}, 0x17c}], 0x1, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {r6, r11, r12}}}], 0x20, 0x40}, 0x20000000)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r13 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r13, @ANYBLOB="00000000000000000000000085616466000000000000000000000000000000000000000000000000000000008561646600"/76], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000030000000000000000380000000000b0e1"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  379.089582] binder_alloc: 22237: binder_alloc_buf, no vma
[  379.089600] binder: 22309:22313 transaction failed 29189/-3, size 0-0 line 3284
[  379.241963] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request.  Check SNMP counters.
22:42:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @flat=@weak_handle={0x77682a85, 0x1116, 0x2}}, &(0x7f0000000180)={0x0, 0xfffffffffffffcbf, 0x38}}}], 0x0, 0x0, 0x0})

22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000ffff0000bf68d1dfa609b04986000000000000000000000000000000000000000000f30000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  379.242777] binder: BINDER_SET_CONTEXT_MGR already set
[  379.242786] binder: 22319:22321 ioctl 40046207 0 returned -16
[  379.243931] binder_alloc: 22223: binder_alloc_buf, no vma
[  379.243951] binder: 22319:22321 transaction failed 29189/-3, size 0-0 line 3284
22:42:35 executing program 4:
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
fremovexattr(r1, &(0x7f0000000140)=@random={'os2.', 'attr\x00'})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r2, &(0x7f00000000c0)=""/31, 0x10000067f)
futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x2710}, {0x0, 0x2710}})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r4 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCSCTTY(r5, 0x540e, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4240, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0c630000f83f7f9af7ca2c5ba727bfa1fe7937608e48e1fa522d2a940c50cce825d3d022a71577e27b84079b0909a89ff101d3937d3da5baca5ef58528883a00f61204c8f86e3ca59722c83ccefbe5270d7c1253a492a234081b471d9a2ea853ad5c3f123251cfe636463377b1d4c9806e6b67d8cc80712009016b8b1bf247393b477584c29626758007214f279a24cb6a647483e49b6e6289fb5db25f2c02df1990797e0e01b53cbaaa5664c3dc70bc2aa13f5a7b412490212181d7bf61c4e2b08a9b56643c0fce"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  379.281525] binder: BINDER_SET_CONTEXT_MGR already set
[  379.281533] binder: 22325:22326 ioctl 40046207 0 returned -16
[  379.281629] binder_alloc: 22182: binder_alloc_buf, no vma
[  379.281647] binder: 22325:22326 transaction failed 29189/-3, size 0-0 line 3284
[  379.298668] binder: 22319:22329 got reply transaction with no transaction stack
22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6c0e61514cec630000"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000080)={'ip6_vti0\x00', {0x2, 0x4e23, @rand_addr=0x100000000}})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00001eb4"], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  379.298677] binder: 22319:22329 transaction failed 29201/-71, size 0-0 line 3046
[  379.334255] binder: BINDER_SET_CONTEXT_MGR already set
[  379.334263] binder: 22331:22333 ioctl 40046207 0 returned -16
[  379.334368] binder_alloc: 22182: binder_alloc_buf, no vma
[  379.334386] binder: 22331:22333 transaction failed 29189/-3, size 0-0 line 3284
[  379.384880] binder: 22331:22337 got reply transaction with no transaction stack
[  379.384889] binder: 22331:22337 transaction failed 29201/-71, size 80-24 line 3046
[  379.496328] binder: undelivered TRANSACTION_ERROR: 29189
[  379.502082] binder: undelivered TRANSACTION_ERROR: 29189
[  379.508064] binder: undelivered TRANSACTION_ERROR: 29189
[  379.514359] binder: undelivered TRANSACTION_ERROR: 29189
[  379.520122] binder: undelivered TRANSACTION_ERROR: 29189
[  379.525844] binder: undelivered TRANSACTION_ERROR: 29201
[  379.531569] binder: send failed reply for transaction 3373 to 22237:22239
[  379.538996] binder: undelivered TRANSACTION_COMPLETE
[  379.544267] binder: undelivered TRANSACTION_ERROR: 29189
[  379.549969] binder: undelivered TRANSACTION_ERROR: 29189
[  379.555702] binder: undelivered TRANSACTION_ERROR: 29189
[  379.561402] binder: undelivered TRANSACTION_COMPLETE
[  379.568429] binder: undelivered transaction 3367, process died.
[  379.574662] binder: undelivered TRANSACTION_COMPLETE
[  379.580087] binder: undelivered TRANSACTION_ERROR: 29201
[  379.587391] binder: undelivered TRANSACTION_ERROR: 29189
[  379.881649] binder: undelivered TRANSACTION_ERROR: 29189
[  379.888002] binder: BINDER_SET_CONTEXT_MGR already set
[  379.893943] binder: 22309:22313 ioctl 40046207 0 returned -16
[  379.893948] binder: 22309:22350 got transaction to context manager from process owning it
22:42:36 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000080))
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x4022013, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00010000"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x10000, &(0x7f0000000080)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x30, r2, 0xfffffffffffffffe)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x4}, 0x10)
vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000200)="fce0ecc7f0d3e54edbbaca68403a3f3e37ee56b57e383d0700e3ea8b24959f996eacd75ebd0033a94f9db3d847a64514c6c008834d6268f3d3004479239ad23cc3e111b69fdff2048bc5ceeb46c632ee8cafcafa455d0bb344d08ebfa1aa8790acb3c5fd9d8bca99e8a340dd0ac266bb310daf0832a46cd53da38a1d9e2d1c78e444425d3350b2f28f035ba20c616522d31cb0cf5049e2e8bdd08a4c9dfafb7a65183b109511409723a097bc7a36108f71121a20b250e151488211c282c5", 0xbe}], 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  379.893964] binder: 22309:22350 transaction failed 29201/-22, size 0-0 line 3129
[  379.900766] binder: undelivered TRANSACTION_ERROR: 29201
[  379.998907] binder: 22354:22355 got transaction to invalid handle
[  380.013016] binder: 22354:22355 transaction failed 29201/-22, size 0-0 line 3138
[  380.024054] binder: 22354:22355 unknown command 256
[  380.029756] binder: 22354:22355 ioctl c0306201 200001c0 returned -22
[  380.030816] binder: undelivered TRANSACTION_ERROR: 29201
22:42:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x9}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  380.031228] binder_alloc: 22319: binder_alloc_buf, no vma
[  380.031246] binder: 22319:22329 transaction failed 29189/-3, size 0-0 line 3284
[  380.031592] binder: undelivered TRANSACTION_ERROR: 29189
[  380.036451] binder: undelivered TRANSACTION_ERROR: 29189
[  380.078906] binder: undelivered TRANSACTION_ERROR: 29201
[  380.089422] binder: 22354:22355 got transaction to invalid handle
[  380.096866] binder: 22354:22361 unknown command 256
[  380.104620] binder: 22354:22355 transaction failed 29201/-22, size 0-0 line 3138
[  380.128609] binder: 22354:22361 ioctl c0306201 200001c0 returned -22
[  380.135568] binder: undelivered TRANSACTION_ERROR: 29201
22:42:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

22:42:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendfile(r1, r2, 0x0, 0x40)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x10001, 0x387, 0x8, 0x3ff, 0x7, 0x3, 0x3e, 0x1, 0x36e, 0x38, 0x1d8, 0x241, 0x8, 0x20, 0x1, 0x1, 0x7, 0x1}, [{0x0, 0x8, 0x100000000, 0xe7d, 0x3f, 0x401, 0xfffffffffffffffd, 0x53f4}, {0x3, 0x7fffffff, 0x4, 0x7, 0x8001, 0x100000000, 0x8001, 0x2}], "ec02b7ea42acb8", [[], [], []]}, 0x37f)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffd5, 0xffffffffffffff30, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/119, 0x77, 0x2, 0x5}, @fda={0x66646185, 0x5, 0x0, 0x9}}, &(0x7f0000000400)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

22:42:36 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/68], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
pwrite64(r2, &(0x7f0000000480)="b7f97f8813eaf24fb3753f9d7c04fe7764e1d31037837fe0ae2028c624032e56e75debc36def0427b9e5f7af3cf23dbc9c94c0a439724a653b18a67f675e30189fc7ccd8577196c2053226929e978178345f5f9fd9a0b2c7df15a0bf4ab26db4add73dc8d67bd772cbc94f2fd2388cda1e57857838fbf0635314bccafc4da5523e88eb", 0x119, 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0xa0, 0x0, &(0x7f0000000380)=[@dead_binder_done, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x36}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @exit_looper, @clear_death={0x400c630f, 0x1}, @exit_looper, @exit_looper, @decrefs], 0x1, 0x0, &(0x7f00000000c0)='\x00'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x263, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})

22:42:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
setrlimit(0x0, &(0x7f0000000080)={0xffffffffffffff81, 0x4})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

[  380.137801] binder: undelivered TRANSACTION_ERROR: 29201
[  380.137906] binder: undelivered TRANSACTION_ERROR: 29189
[  380.138492] binder: 22331:22337 got transaction with invalid fd, 5
[  380.138515] binder: 22331:22337 transaction failed 29201/-9, size 80-24 line 3427
22:42:36 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff77)
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3011, 0x0)
ftruncate(r0, 0x0)

22:42:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000200000000000000000000000000000001af000000000040000c9771aa800000000000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:36 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
getgid()
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r3 = dup3(0xffffffffffffffff, r2, 0x80000)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r4, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f6, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[  380.138523] binder: send failed reply for transaction 3405 to 22331:22337
[  380.141672] binder: undelivered TRANSACTION_ERROR: 29190
[  380.141746] binder: undelivered TRANSACTION_COMPLETE
22:42:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8608fccc}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=@getsa={0x58, 0x12, 0x103, 0x70bd28, 0x25dfdbfc, {@in=@empty, 0x4d5, 0x2, 0xff}, [@address_filter={0x28, 0x1a, {@in=@loopback, @in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0x2, 0x3, 0x7}}, @ipv4_hthresh={0x8, 0x3, {0x1, 0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x24000010)
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12634840000000000000000000000000020000000000000000000000000000000000000058000000000000001800000000000000f061e866a22792ac6901bc4b7b154762f3cc284bbd38dc0a5f8547469078c4a78a736d2275b0a09c0e5b000b44829f829d133d3232bb87ec5cddc07a05c5ebf3ba5c428f", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r3, @ANYBLOB="00000000000000000000000085616466000000000000000000000000000000000000000000000000000000008561646600"/76], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000018000000000000003800000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[  380.141752] binder: undelivered TRANSACTION_ERROR: 29201
[  380.212542] binder: send failed reply for transaction 3408 to 22373:22376
22:42:36 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, &(0x7f00000000c0)='-'})

[  380.212660] binder: undelivered TRANSACTION_COMPLETE
[  380.212666] binder: undelivered TRANSACTION_ERROR: 29189
[  380.226001] binder: send failed reply for transaction 3410 to 22373:22380
[  380.226075] binder: undelivered TRANSACTION_COMPLETE
[  380.226082] binder: undelivered TRANSACTION_ERROR: 29189
[  380.245983] binder: 22371:22378 got transaction to invalid handle
[  380.245992] binder: 22371:22378 transaction failed 29201/-22, size -43--208 line 3138
[  380.253735] binder: release 22371:22378 transaction 3412 in, still active
[  380.253743] binder: send failed reply for transaction 3412 to 22371:22378
[  380.253754] binder: undelivered TRANSACTION_ERROR: 29201
[  380.253882] binder: undelivered TRANSACTION_COMPLETE
[  380.253888] binder: undelivered TRANSACTION_ERROR: 29189
[  380.265862] binder: 22371:22386 got transaction to invalid handle
[  380.265871] binder: 22371:22386 transaction failed 29201/-22, size -43--208 line 3138
[  380.276131] binder: release 22371:22386 transaction 3415 in, still active
[  380.276138] binder: send failed reply for transaction 3415 to 22371:22386
[  380.276148] binder: undelivered TRANSACTION_ERROR: 29201
[  380.276592] binder: undelivered TRANSACTION_COMPLETE
[  380.276599] binder: undelivered TRANSACTION_ERROR: 29189
[  380.286240] binder: 22387:22390 got reply transaction with bad transaction stack, transaction 3418 has target 22387:22390
[  380.286249] binder: 22387:22390 transaction failed 29201/-71, size 0-502 line 3061
[  380.290442] binder_alloc: 22387: binder_alloc_buf, no vma
[  380.290462] binder: 22387:22390 transaction failed 29189/-3, size 0-0 line 3284
[  380.290713] binder: release 22387:22390 transaction 3418 out, still active
[  380.290717] binder: undelivered TRANSACTION_COMPLETE
[  380.290724] binder: undelivered TRANSACTION_ERROR: 29201
[  380.292443] binder: 22387:22392 ioctl c0306201 20000100 returned -14
[  380.310574] binder: release 22387:22390 transaction 3418 in, still active
[  380.310579] binder: send failed reply for transaction 3418, target dead
[  380.311251] binder: undelivered TRANSACTION_ERROR: 29189
[  380.336191] binder_alloc: 22396: binder_alloc_buf size 782562820916563304 failed, no address space
[  380.336199] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
[  380.336215] binder: 22396:22397 transaction failed 29201/-28, size 88-24 line 3284
[  380.336224] binder: send failed reply for transaction 3422 to 22396:22397
22:42:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r1, &(0x7f00000000c0)=""/31, 0x10000067f)
write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x1, {0x87baceb5cc60dc16, 0x3, 0x1}}, 0x14)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r3 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:37 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x480c80)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000240)={0x7, 0x7, 0x6, 0x8, 0x4, 0x9})
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2ffffffffffffff000000"], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000660000482f704946fa968ce08fb856f674241e604687e8b92769a0714774e61dd9657715dc6c13d18569e842b7c87248bdc24a48298348b72cfbb0ec2584b513d12896c152d94a01"], 0x0, 0x0, 0x0})

22:42:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req={0x4, 0x80000000, 0xfd, 0x100000000}, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r3}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

22:42:37 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00*', 0x4ffd})
ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\xa0P\x00\x00\x00\x00\x00\b\x00'})

22:42:37 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000001000000000000000000000000000000000000000000003dae46172aafa44300"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7cb31931909a6e60c70a1ad609"], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000001, &(0x7f0000000180)="040100000000009676440000059f32447b419977437a8f562eb66f2660970dbef6c4ab2b93b9ffbd4065a193582525fe019b")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r3, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200))
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240))
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00')
getdents(r5, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000000140))
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r6, &(0x7f00000000c0)=""/31, 0x10000067f)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r6, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/219, 0xdb, <r7=>0xffffffffffffffff}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r7, 0x4)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f3d114f86abc79f476350d203bbf5e55232b0a0414566140e75b3f575b380a96"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00')
getdents(r8, &(0x7f00000000c0)=""/31, 0x10000067f)
ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000380)=""/73)
ioctl$KDGETMODE(r8, 0x4b3b, &(0x7f00000002c0))

[  380.342158] binder: undelivered TRANSACTION_ERROR: 29190
[  380.342278] binder: undelivered TRANSACTION_COMPLETE
[  380.342284] binder: undelivered TRANSACTION_ERROR: 29201
[  380.372818] binder: release 22396:22397 transaction 3425 in, still active
[  380.372826] binder: send failed reply for transaction 3425 to 22396:22403
[  380.372921] binder: undelivered TRANSACTION_COMPLETE
[  380.372927] binder: undelivered TRANSACTION_ERROR: 29189
22:42:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r2 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000a91390c4057200"/68], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})

22:42:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c7dbe97"], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda, @fda}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  380.726318] binder: 22411:22415 transaction failed 29189/-22, size 0-0 line 3138
[  380.740531] binder: 22410:22420 got transaction with invalid parent offset or type
22:42:37 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x1, 0x0, &(0x7f00000000c0)='-'})
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x3}, @fda={0x66646185, 0xffffffffffffffff}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})

[  380.740562] binder: 22410:22420 transaction failed 29201/-22, size 88-24 line 3454
[  380.740569] binder: send failed reply for transaction 3428 to 22410:22420
[  380.741567] binder: undelivered TRANSACTION_ERROR: 29190
[  380.741690] binder: undelivered TRANSACTION_COMPLETE
[  380.741703] binder: undelivered TRANSACTION_ERROR: 29201
[  380.745030] binder: 22412:22421 unknown command -132853261
[  380.745038] binder: 22412:22421 ioctl c0306201 200001c0 returned -22
[  380.745795] binder: release 22412:22421 transaction 3433 out, still active
[  380.745799] binder: undelivered TRANSACTION_COMPLETE
[  380.757049] binder: 22410:22422 got transaction with invalid parent offset or type
[  380.757078] binder: 22410:22422 transaction failed 29201/-22, size 88-24 line 3454
[  380.757087] binder: send failed reply for transaction 3431 to 22410:22422
[  380.760878] binder: undelivered TRANSACTION_ERROR: 29190
[  380.761230] binder: undelivered TRANSACTION_COMPLETE
[  380.761236] binder: undelivered TRANSACTION_ERROR: 29201
[  380.761731] binder: send failed reply for transaction 3433, target dead
[  380.766224] binder: 22412:22426 unknown command -132853261
[  380.766232] binder: 22412:22426 ioctl c0306201 200001c0 returned -22
[  380.766873] binder: release 22412:22423 transaction 3436 out, still active
[  380.766876] binder: undelivered TRANSACTION_COMPLETE
[  380.780256] binder: 22428:22431 unknown command -1749123828
[  380.780264] binder: 22428:22431 ioctl c0306201 200001c0 returned -22
[  380.781615] binder: 22428:22431 got reply transaction with no transaction stack
[  380.781624] binder: 22428:22431 transaction failed 29201/-71, size 88-24 line 3046
[  380.782404] binder: undelivered TRANSACTION_ERROR: 29201
[  380.782423] binder: send failed reply for transaction 3438 to 22428:22431
[  380.782528] binder: undelivered TRANSACTION_COMPLETE
[  380.782534] binder: undelivered TRANSACTION_ERROR: 29189
[  380.783069] binder: 22428:22432 unknown command -1749123828
[  380.783077] binder: 22428:22432 ioctl c0306201 200001c0 returned -22
[  380.783872] binder: 22428:22432 got reply transaction with no transaction stack
[  380.783879] binder: 22428:22432 transaction failed 29201/-71, size 88-24 line 3046
[  380.788041] binder: undelivered TRANSACTION_ERROR: 29201
[  380.788059] binder: send failed reply for transaction 3441 to 22428:22432
[  380.788126] binder: undelivered TRANSACTION_COMPLETE
[  380.788132] binder: undelivered TRANSACTION_ERROR: 29189
[  380.813602] ------------[ cut here ]------------
[  380.813608] kernel BUG at drivers/android/binder_alloc.c:1108!
[  380.813615] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  380.813620] Modules linked in:
[  380.813629] CPU: 1 PID: 22435 Comm: syz-executor.0 Not tainted 4.9.193+ #0
[  380.813634] task: 0000000051919d6f task.stack: 00000000f4934057
[  380.813651] RIP: 0010:[<ffffffff8223a73b>]  [<00000000de8de660>] binder_alloc_do_buffer_copy+0xcb/0x500
[  380.813655] RSP: 0018:ffff8801d3d5f4a8  EFLAGS: 00010216
[  380.813660] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90000b00000
[  380.813664] RDX: 000000000000039d RSI: ffffffff8223a73b RDI: ffff8801c943ddd8
[  380.813669] RBP: ffff8801d3d5f528 R08: ffff8801d3d5f5a8 R09: 0000000000000008
[  380.813677] R10: ffffed003a7abf12 R11: ffff8801d3d5f897 R12: 0000000000000068
[  380.813682] R13: 0000000000000070 R14: 0000000000000008 R15: ffff8801d3d5f5a8
[  380.813688] FS:  00007f81b1aa1700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000
[  380.813698] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.813702] CR2: 000000000075c000 CR3: 00000001cda3f000 CR4: 00000000001606b0
[  380.813709] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  380.813713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  380.813715] Stack:
[  380.813727]  ffff8801cbd8ed60 0000000041b58ab3 ffff8801d3d5f4f8 ffffffff81bcd6dc
[  380.813737]  ffff8801c84ee018 ffff8801d81c7ad8 00ff8801d3d5f870 ffff8801d81c7a80
[  380.813746]  ffffffff814fdd56 ffff8801cbd8ef00 0000000000000070 ffff8801d3d5f5a8
[  380.813748] Call Trace:
[  380.813762]  [<000000005fe5c21b>] ? check_preemption_disabled+0x3c/0x200
[  380.813771]  [<0000000085ddb5b0>] ? memcpy+0x46/0x50
[  380.813779]  [<000000004a2f4d21>] binder_alloc_copy_from_buffer+0x37/0x42
[  380.813788]  [<00000000374cf688>] binder_validate_ptr+0xc5/0x1b0
[  380.813796]  [<00000000a588779c>] ? binder_get_object+0x1b0/0x1b0
[  380.813803]  [<000000004a2f4d21>] ? binder_alloc_copy_from_buffer+0x37/0x42
[  380.813811]  [<00000000279a49e2>] ? binder_get_object+0x12f/0x1b0
[  380.813818]  [<00000000e7ffd724>] binder_transaction+0x20a4/0x5890
[  380.813828]  [<000000003360680d>] ? bpf_overflow_handler+0x310/0x310
[  380.813836]  [<0000000023c930f2>] ? binder_inc_ref_for_node+0xba0/0xba0
[  380.813845]  [<000000005a2a2365>] ? __switch_to_asm+0x41/0x70
[  380.813852]  [<000000007256f0db>] ? __switch_to_asm+0x35/0x70
[  380.813860]  [<00000000372d49fa>] ? __schedule+0x6d6/0x1f10
[  380.813869]  [<0000000079be5df5>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  380.813877]  [<0000000011c36e22>] ? __might_fault+0x114/0x1d0
[  380.813885]  [<00000000fd4bbf7d>] binder_thread_write+0x730/0x20e0
[  380.813892]  [<00000000ff272456>] ? trace_hardirqs_on+0x10/0x10
[  380.813900]  [<00000000067b59fa>] ? _raw_spin_unlock_irqrestore+0x6b/0x70
[  380.813908]  [<000000000ae163cc>] ? binder_transaction+0x5890/0x5890
[  380.813915]  [<0000000079be5df5>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  380.813923]  [<00000000ab3bf77e>] binder_ioctl+0xecd/0x1720
[  380.813931]  [<00000000add8c51b>] ? entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  380.813938]  [<00000000b92d10cf>] ? binder_poll+0x240/0x240
[  380.813946]  [<00000000c0e67bb1>] ? __lock_acquire+0x5e0/0x4390
[  380.813954]  [<00000000a43415df>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  380.813962]  [<0000000057d79154>] ? __might_sleep+0x95/0x1a0
[  380.813971]  [<000000005fe5c21b>] ? check_preemption_disabled+0x3c/0x200
[  380.813978]  [<00000000b92d10cf>] ? binder_poll+0x240/0x240
[  380.813986]  [<00000000aa621ae3>] do_vfs_ioctl+0xb87/0x11d0
[  380.813996]  [<00000000d413dba6>] ? selinux_file_ioctl+0x103/0x550
[  380.814004]  [<000000003ce64408>] ? ioctl_preallocate+0x210/0x210
[  380.814013]  [<000000003a1ade7c>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0
[  380.814021]  [<000000000c182758>] ? __fget+0x208/0x370
[  380.814029]  [<000000007194e7cd>] ? __fget+0x22f/0x370
[  380.814036]  [<00000000796a7304>] ? __fget+0x47/0x370
[  380.814045]  [<0000000088a8188b>] ? security_file_ioctl+0x8f/0xc0
[  380.814054]  [<00000000b1fdf916>] SyS_ioctl+0x8f/0xc0
[  380.814062]  [<000000000fe6b436>] ? do_vfs_ioctl+0x11d0/0x11d0
[  380.814070]  [<0000000032138f1a>] do_syscall_64+0x1ad/0x5c0
[  380.814078]  [<00000000add8c51b>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb
[  380.814197] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 6f 80 0e ff 4d 39 e6 76 07 e8 65 80 0e ff <0f> 0b e8 5e 80 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 4d 
[  380.814205] RIP  [<00000000de8de660>] binder_alloc_do_buffer_copy+0xcb/0x500
[  380.814208]  RSP <ffff8801d3d5f4a8>
[  380.815396] ---[ end trace b05f5c27e86817b4 ]---
[  380.815402] Kernel panic - not syncing: Fatal exception
[  380.816380] Kernel Offset: disabled
[  381.470293] Rebooting in 86400 seconds..