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", 0x1000}, {&(0x7f0000001840)="9345def7da0c74394971fcc4c378dc8228e00f06c1ddfb1c8a6d1712e4100351091ddba2f786044610beca7870ce985ed696c97b769188d9712912824ffa8ab1b9ccb121bce19ff968c952d72b037926ddfba01a7affa6db174e0d214005d4b7b214818f0e380f657bb29630754b903e7f67287d97f11c9b3f1659243228699ab09040f07d4a5eb7fcb4", 0x8a}, {&(0x7f0000001900)="28d2c60b3bef615a6ad4b110db93e558c66b69a6c4bafba2473eb151293e2685d09fa9027e77d9b1e9bfad06b708f4f54379a1b45824587d3bfcd97552e5823f35323946c6a4dfc13c278be3e0bdf6fcebba13bd78b8d490406220817132c93e0068db1d750a8f4621832c0fe21f8367247bd3f73c54c419a5c963b15b9f381afdfec178191de38576ca1953a60dfc198fbbded3cf078261a73f772f186b", 0x9e}, {&(0x7f00000019c0)="2b09869cbf43df578dab733efc90b6a92d92c5f2d01b3d1df7bc1aa82c1ffbfbbab37d0f766c97d5237b0547701fffbb1fcad1aa15eebb05500d904fefdd6e7f1bec69133705cafb926c41ce30f03b8ded66e52fbcd98dee435acef00e7c12a634ee32cbd1cc565ba71c014d1fb23fad7a0de338f09d886af1eb965a65c2e7542f4da52168be4bf596469ced81eea58e0c14260b0ef6c4335f3a3ca62b6d6ff5cec7c8bdb820d3f04521b0c38b0fa07dedfbaa010eb198ea0c4576fabda2b60e54960e602e5d49d08f71b40771eb759e67e1ad2f45170c04c175", 0xda}], 0x5, &(0x7f0000001b40)=[{0x48, 0x10f, 0x8, "9779654f759d35bb4dd9c43ec58e76c39acbe9ad113cb8a2fcc46a5b8b45084b2ea916b53d0026014947f53b19e47c568e"}, {0x10, 0x111, 0x8000}, {0x108, 0x116, 0xa8d7, "5b0650780b0f6ded010c3397dc3d48aae0b1d7ccb621da7aa861d4ed72d0240a44b62e8ccf42a22a0c46a0bed3ecc3fcafaa336b15c8b484e0725d769d58edbbe3ec8eadf65510e654244ab5b8d4570984526b9c2f45083aa37ca6c7bb0ce16126b176f65b5a12f8321ef73936cd8c7b4e88a6e8e0cf9e5096ca5e95d88f7f5808ae366a31a841d5c89929377243f8369a62691b6d9b1c210ae015682177fb5bc85bd1a48781e19bf32df7bc1448695f2409f700cbb1c82de608a8410d478c90ab57636c9453dba25b1f75f180130b04696e37ffc156cd8dce33b48eb7d827d34319988c90c9972670ca6402b22312b02373c37811b21acd"}], 0x160}, 0x2}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001cc0)="c65ea26ddb94a197923626fefe67153f8cc643246313fbfd25c352ba1117b262137e0c2e51f3e5920eae187b57c1ca8795861a7ab5e1269cfd4aec66b2b5cdcae85163d2e25cb1006d593150d6fd32508363d1715a5856742405d583a5021e730e70ed3cd6582981eb26e2a876f5982c7c7288c79be028235984269cb2bb382816952b3b9d8f5e12dd04c9c7c24b29d40491124eaa8ef57ad8d7b28027312737ebd30d58327787ccc76a986e1c1cc386a7c63bcd1ece1ce1d386c8286f746d1bcd2a5f05ee6e5853779e10d40f4a48cc2a54b2b6049e2d6abff2", 0xda}, {&(0x7f0000001dc0)="0c121b06210b07cdc84a71e9c2e24ee68802a162691b027e9e975b40036993d041f63b7fc739878f2f81bbeaa41b55a46b5aea723fc4f2e378c95de56cfb64c38dddd9d957b0f0359fcc9efaea2eae45561ffe90bd94c26b521ae7db55a354943b3d21161b9105188878453e47bf24cac86286a4f17b9bd441d4eb28aadf8049310382c98f733e5f5b648a0c00431d2e86b4f63fc592c7b67fbafd6f5df607b3bbabc7b94bb42bf2a727c8e12c71e99961666b942c5ddfbf7e01bb897a5d", 0xbe}, {&(0x7f0000001e80)="38b882fae62234feb3403091ab0989ab8492d31a191592d6f32d93837779d043ce3a7d02214ec650ed131a0a5354a4bdfd1403aef9fe568439b6e9502d902c18f87e365cfcf38ccc3757a23236d7b2586f7b3773bd2828d7a860da0b3adea9aee3d446e9ebfc9d72cc8f17554cd2f2f54aed3b4b7902b575372afdf7eca7e54fc2be5706939f943e983e4e657f07682dfb15d89bae7e7e04d2802db1c25682896fb88a21872c", 0xa6}, {&(0x7f0000000480)="7fea8d78b504b8af019928cdacd3d5df76895c642b9883a229e4465f", 0x1c}], 0x4, &(0x7f0000001f80)=[{0x10, 0x100, 0x1}, {0x68, 0x6, 0xbe3, "34e1e8c7744cf3e4bb9c11c9ab87d94ec87d42414dd3c5690c19442513ce93239f662c4ebcf7ff3f3b717e6f15bbcb33b4b5f6bb1c536c417a8b73d7460514510ba81f9203c057f06ebb58de54752cee6f68704a"}, {0x1010, 0x118, 0xfffffffffffffffe, "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"}, {0x100, 0x109, 0x0, "1350488d31e61066871bfa35f2f51221d9aa7fe01aa31bbba615e76fb774736ee2a6f722414671e8bd17b92859eee48c747d4cd45676b8a1470aa2cc6afdcde9419683ad885ab9d68b6d95cec03151d58b811784b7a47ccc9242a6702523e0359da0854ef414b184ba4870d2033e0c00dcc5fe6f39194a7baa8a4fbf87c6adf5173e312abaafbec35bc874b78674c2934efaffff78ce0a6effe445a9644a4461b36adcded59e725f346b342cbf8b93d8a8d90ea2fcc8a46e18dcca9f7e7a784be1ccfde17757edad570b585a918ee23d4f282282807cd780f0269f42300683441abbc5986631227afa"}, {0x40, 0x100, 0x4, "0e898bca875a0e67523750624e3e31f50a2f099fc1e9b6c9d6855f505f425e893f051eaf9e3e946bd28ea20438f7"}], 0x11c8}, 0xff}, {{&(0x7f0000003200)=@can={0x1d, r2}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003280)="8b58c278e10eb21f8934a57fc29582bc47d62c0cd3fb5dae6013caafbe70ee6bc76ef025", 0x24}, {&(0x7f00000032c0)="ce8add011385fac766a835908321f4e4017d6a130d03", 0x16}, {&(0x7f0000003300)="d1f60a76d2345d6260c4dabdd4e6c94e6259f7ca4cb0848a9beca0ce08b46f34b9800bc3cafb5bd323633828cb7769b07a0d19aff491742fed998cbc3263c7ab84c6a4a7ee01fe3be7bd25afb9447af1193364d0c921d01c4f8f4344cdfe44b5b630001b55cfbf42d282762c436777dc5ff0859577ff74a6d047427334d33589cfd289ed73b31019fe7370d43542e6710832f2a5c03cfdabb564b950a8b1b41d796674371d7685808c9b0eab73bffe3b7f3cf408c4c5b2a5660cce813143b179009bf5729b84e8d5c6acb0de0ba6", 0xce}, {&(0x7f0000003400)="4af495d98318e52b2c68a2aa596a6bd0971eb93dba0cc4367b0d00a2b4820f4572edd1404e5cd2759fc470caf96e35484f2db2c56865ccbf94233c67f120a9424f43dfcd49edfea96b67a727d2b3b290f9dca453a76a5a1608816f8f3a0644c03a97907a6e772866650aa94eef579f4d1b9367a40942f8e9360a5fbf716fc7874ac514e0074c7ae5710ce4367ff16f0857658f8a79e093771703fbca41c0d703b130009424d92e42b7c81f918eacd98fc9cd646b1571d3da3b7b6e33c0670d31a9e12bea3c577e32da3e1052afba3152d42f", 0xd2}, {&(0x7f0000003500)="2aaa02c0bd14e13694f26ca189f6b89a4d0671b23b50db79", 0x18}], 0x5}, 0x1}, {{&(0x7f00000035c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x2, 0x2, 0x2}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003640)="ec7a21de2713552412941d55bcda508424a1f86570f1e62c00f3302e2d35b35815ac0105c824ed7f6876334fea2a3da98ffb88bc06b0a0b056ca6de1b840df7da5ceb2b06043d1913d010567788fa3155500d5dd9fb55c880bc063fd430d9adc3f41be92c098483e6aac3fc02ee1cbffce54c80022b1400f047b7f18e60cb039767a580f74fafbeff8fc917be09496fa3f27e6a979c2f5e0455f6d67f8add1fb6bebd4d650cf", 0xa6}, {&(0x7f0000003700)="3e3b578af754cca1d464b7a4f8f6ec357a3946048a1225ec4a226dbddfc578dd2089e7df7fb85256a234dad07a8ce29bb974e111e9d05aaaae333b1c1d320e7f0ab65402352a15dffda6f86d15609b23f9665545ab9fb61831133e91f49a5d6de5e6674dc05aa1e16bb715e6ebd908c978a1ebd6ee1e02", 0x77}], 0x2, &(0x7f00000037c0)=[{0xf0, 0x0, 0xffffffffffffff00, "ea2be7f6f59aa1a8056594a39bf29483a7155f92a776446bac748c467be15af4628dea40a082a1912e63b3a1cad84389124b9e4f0290641dc155cb548639aaffbb85829101718de1363c1317a76856b47fb15f4ea5a47559aa691a8401877546b67e36b4f09fee6973185e629c242e83ee998c4279111dcc38d92e9578c6b71f41c2f23699ea31d679635db0483cc076463caa2cca462f72d680ad923d41ceccd2fdf0fc536e51039fa61fd75107700d642ce66c023f3c90fdb675f5ef5045a93768dc58146707598a8cb2e5f46455e4e54632d2d6cc892d8b4625"}, {0x78, 0x10b, 0x8fd0, "de9821b7283a9de436a6b9a255e1c235691655e8fc0ffd62b054e76cd5728212e5f69fc93ca7d15e31af4c19381aed07018aa689f38f3b54dfb96acb4d30c5f7cd2e93178300e1ddafc968b4d8c5a3c380085ea429c7adb34403c0f477901eb585fa81"}, {0x38, 0x110, 0x3, "5f0d4aac6f6301d1a5ff437a3a1b54564526af75d7fb3c4167f3ec8431e71533717fa7741ec5"}, {0xb8, 0x10d, 0xf74, "d7f83c2cd88660935e838185f731336f4026a21dde2908c0449a05aa4e7b863f765200c5794af108434c56ff704d6941fc9b389ab7e69d6a4c8b128fe5c4341dd55d24dded9d224014233cb2a8e394f0d1c9c8096febb92286b9abe977cfc27662067f6bbeae7c4cce7ecbf2917cfac26b07edc678a1707b903f191177332e377c7ba94b273fb857baab96eb71059fe3f18cc83af9d4f45187ce05291c617ad43de76d57cf51"}, {0x78, 0x0, 0x6, "ab9eabde347b547225e24d94c5b0548de08f1c646cdf4cc22bc5d3f032dbcd6a4792e5556707ba97d72efc5e7c21fbcf6573df500b5596544c14a30de19199c2f29b3bbb53dc9735c981d6c5d169b6c5a0e25a16e89d1eb4db8f773e71fb464c2ffca24cc3"}], 0x2d0}, 0x200}, {{&(0x7f0000003c00)=@ll={0x11, 0x1a, r3, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003c80)="e56a8b04d9ce8ca003906cf604f39ca3a4bc63030759d69dd9ba0e532e7910463061ff5f30e67530a74199f60f98bdad8d7b4e4abe7a1e60e38099698bde3ecde8aed4a776ab1b50b4c32ceef270999b6ce8f0bf9603aa52785e2970a472bd9f4eb9da98b9a1dbf5a68f061a63a190c1f6335d532c41065295ee4c0f7c4400eca38f0f0a19f44e6705355016f832ba55db5cbf8e7528d89fb13fec5978dcf430446169365facaa965a15bc6c7469f69549258fa1f35c77acdfc988ea69694f", 0xbf}, {&(0x7f0000003d40)="17a730a02d85427b68646363748dc6e6628ed37bff6672d76ae4819cce7f53859a839f686eaa56925e161bb83f1a2b342101acbf3e0194ea84a7808c1442b4e27d2db861177a11dd5e517820d9008829437a7344afbb0eaa68653330cc2304371be7858d5008d049fb34f54b583a4ef0a69a64db34f1b7e6b7ecf6d511079e96be9ba0beeb6cca247c35a22696256a53fb60ba0691df85d1", 0x98}, {&(0x7f0000003e00)="d05d36beadfd13fc49ac8ee76930f338aee2", 0x12}], 0x3, &(0x7f0000003e80)=[{0x1010, 0x11d, 0x4, "cf603f3d4202dc1e1fd2824c585a54fc42bca15c1f1f4f232a6b82963db2cbc04459f90e32166b24619add3e94317922b2d5c92596e9373b89c80b112f53a3dacb3847bef3ccfd0a11a7d7128b6834c89de4a4dc857a643cf5518113220b85c8d042c150f2ac367f0557ccd0b9695039e9a488172bb497e21c8a6a79bc053d66270dd56e7748c40e8e51d7c38686c063d369ab787e6354f28acbcd3fb2c0b96761bef8b563b9bbb9e540f6073ea60ab1f6964fa92050fcfc0884d51c39f550723fd18d18d6624a830f2af9c6e98e48c3f8230098461d389ce75d4923a77fd73377e57c8ff658d52e46a79570f2c79d7daf7301f321b0056cd3e68649f5bc5e6c49f4120a57d07079b9d3bfec521301a5577ceeba8b8dc0573c80b502e5c1e5333b0fa55031c696fb3e7b1f46c22ba53b59e0c6e2fef2ad6fcfb4133c6805d5ecdf512482ff2ea2d9177f6f9a184ab6446b8c2e7b1c46f93e10633cc55f9ae478c98a8833ec8f93588a5d56b6633903b783251d1d1080215e57a4080cbd13e12c2e19e9ea806114438cb3e48035287aa65cbc56fbfe193c21863a31a14b70ef29b33ec9448f2694f41f0f0d49a816231cdcee85df18f18c36b84bb3cd712228a78076ead543a4f0646ab3db687a4f1108b159fcc13ad70f0ac210bfe44b900fd5d73ad7e31573d699b3616f2782f8f7f80d786da6d271cb1ade02b53fd857fbce49d277390e093592bddbb7cf442ab2aac4844303b1f2354baeaa8aa5a43e0ad7b75f1b8478272e7f42a94ada7f1b640bc9607af84c91819d8c1d01f0df4c3e7599909e73df11eef61c5d9b7c6c5b3e83ce88aa96c2937245f1c3378c8c25e586a5aaca717df865181092b0941fb39627356be7a7533bb3bec40df494692ef948107c3350337ca583f835e39d3d37369402f73e7fd3b89d9d0c98c414d3d90346dfa47b4ac8fb234ec95d4dbc0980398d0e571a4fbef4628a45a12330542ddef45e9d3e778b4e71928d841b6c37c25c114b098e1589db860ceed52c976eb7b6381587c8740affe69d5b99d4456a0cf3e33e83b356476966606481a121e73c6058b6062dd05f8d2ab05ad409f4e5e208f264987c988a0a053e1792f7f0c5949cf17b529d1a65fb754476a7717434ed0202fab8f762a2b0c315dd8bcdf259574edcf046ef715021bfc744228ef3b87dcaeee89b83c024e57ec1dda2a69138cbc78778e1920266320c2b19b0b08a9f8ecb3c02936456fe3e4fa299c695965605e7d237dbbb186eea36f13ae454b7c00e6a5328d75e3242e0eb74370b714ba2122316e627793dad7691b51c7b33dd5e8a1e6ed30e209791c13a33b20523ac57eef80317978b06df524dede89c58866958e461197cba4ff8adacc9379590d98018ef8b2a34f30e779d1e13bfd35562c0e85e13f56c83c68d47206dd88c3a20b65936a62107c7437ddc5e867071cb49370b583c473ce545c2ebc4e2fb0da27b160d8a89684f6dbf3d7a6f70f1f3fa7140d69d4d4b7813d7f174053754358cbd0443c2da3dd29c0dd6784977774cb250ea504f5c545eecc2e21c3c9ecafa61664ab34b13c160d492c959773b9d9472ebbbeb758c0cbbe443f49b7ebbd6a45654c9a965839c1e17dd7d2dbd914be4a015b1bb10b132b1d308a9ef87c30f3bd53304fe8303e3c64b3e4331d708d2d387dea7e096f19e90bd3bd020bc83785407c0024310c3189d809d8ff6da4bc6629a4360ee152e6efe3fdf42921112fadc31c1b563a1f5de4dcdeecb9d30a5fe1a32ce10b7adf18269b4c7c7153a2aab84e7293bc32e3eb770b74bc2b195eaca254944a0f0e744fe3c578638df66a42793a11f7616ffb7d986b47193337e5267177ad93e731ed592f665f79bc3865d451d8a6829f60eb2d513ed1ed7d81161d1297bf6c9f827005df029e4773cd9aef8186d9a8c4ba80562812e4c4f0ccd9773d4ee464953a5b0ac3df95f9cce988fcd9584388058ddf1dfa9d6493f69dff46348188a42ccab5f3c9480ba8d40429a1d18d6f96c009701f72223242a69b7cbe59d2e8db1ceec6c9f67866f24c1f3b4ab7965c0a96f680ed33192236edd4cd53328dea74ece8013567df37fdcdf9973115cf8f14847c04c092a17adc978834bf64e93f1cf20b7c9cd3d7f10ceb71268b17066d5e133ce9318fca7623e59cb57a6df6146b35932024dd808480cfce548f0eed1a03299f3fedc8a4337d885cc4f41801a0b785b78183493d5ac1e40fcb5e7f8f0fbf22dfe490a8605dd94b9d646309a804b518809041f58da7a66f845e9ee0b493250ff9f48082534a6c0d6c2491fc362a5a5e487f04148c6f03714eec8a4154f0554d3dc0e001afd36d90b3e8982c807c50e1da62869f381c7be44a1342aef051cce05a6e932d8a15632d7b8bae7cf69c149bb5ceb5fe4e40541660781c646037841fde1aecd74f94fc99cfc91481e6421ac1efc74cab77486bfec9922798a7da851b4511c326e5a70ac9970e457b172a9ac58f8f2fedd32c09d503b9286cb8297f053249b8f187cc341a5bfe43b394e0db577256c23d5387882fadc44abae9f638ac41d4b9fcd75983fe647acaa8a31318e47c762fd1b6985c9ea97c62b7241d06f195157660181a04a4fe6fad01ac601b29f1e81b3be4dcdf2cfe482ca18c3bb0f80c7c175d6a39d2cfbe2100f374fe92237449e8560ac6c85277aeaddc1e3d9bba49c6176f5b95a24b66656e01fee8e7872a96e05651198f9606983a70d3031bc1dd07b3c561158a0cfa5725da5e6cf15f60504d95bbc19930b85b0d2556af50cf2c1bf6c8e3034110efd7b55b48d4dcbe7ad8eebc6d3961e622bca26cd56e479890fdb1ea001b3f09fe1fd6b9115c074fd148db0b228e8b1ef348dfd2eaadea9435af01522025c2a551c2130b5583466ddc0c3021588a085355a6a5da0f9f77d1d86f99eb5f9a655cecf106d8a56ee320ad874c8934d5277d85a5808a27b79784f94d08c14c932fd4d358e15bf6411f026e31e94e61150575cb7976a36efa7358032377d5a208b26bd268b612c5f7715418214997d1fb09a1244d2fee0d8828216362028c89785f25176bc6af7cd5c3434bdd0f54ba2d89b216b4e4ed11ae1bb77bcb4f40a42a652d0a79a1e275882b9c621efd417d17751e5b9937ea7d736ceb53e0e2a0d017def5655a57435fa0fda94e20207337f684800d7a290a5bae121a8f5ada8e8fcada25debad922d9364011fb279cea068bff892d40bec70aee3c51be6466652085bc06aa91b5d66eff399062ebad4f92743c232d6e367342d9a31488b8d37fc65523c82c6a288c2c1a616799150b0123cb993eff1499aea32a7a283270ae22304f9ebe8bdb20a7a4c28d2714293aebfd5668339e0bc599857546514c1723611aa53f61740f3d0b944a51f5bed550db5d2a3860302d23a0190e93c328c22e20f165e97e1beee5d301267c94978333b914d616f8a18a22facc73c76858b24d176ebed27811b3b6915d2cd80daf86f7342d83576365372b2e1e36702808796c678b4fe7333f6c8cbce90f96e1353c36ed67a86a46a403267570eb6b476f558f8c08da31eaf57b8c17f333253cb16fa13b980f60e0be193bbc25e4f81d19befd0dff9088f9e0431b0d340c4d9cb1fbfa1226b9c67451a7c70c75bfce65bc59b48042e3951c0ad2c97f481f981dfd676530a9284b4684ced70dfa63b2f2654b0f1b1c62c5875ec5cdaafaba6a4b611d8bc0b0bb6e82075bae0b459f66b2c6157b5b01bffbba05a1071b2ccbd3225d8c388bfb12f8850819e93cab0c1c2a5548b0b065c287255136f5c90efc2f414a754b52f618d36f13ac791d9a98bb65e1a054804c44baea4182e6193beb86359a3200ae2c74349df18867259bd084eb31175c993cefff39dc2b59e1259f9a884952114e5284e10b705f4a9a3501310a4337b8b065b6cd81a26ab2935b442ea7246eaa39b9928c489fda589dc60efaa107f0b055560d2c7b5a6ffba13441815a3c16f06a2574aee483283d9880a0f7918d949cda29f5bf2bceb8fb16bd73590c85ecdcec86c763a29623ed251d6a3a1778c7e5e50b835e1a016de1a0343a85ae2a022505970bfbe2c80d9cd899370c28afd772bc567cb20923cd321d0a8f3fc9ae73650dcf3de329283c2449e4cfd06bdb20fc0ee12eeb14ff30a605570c73b54f6049e47c0f018639eae598e3792451b1f8978ba294d75f3a44442dd017cfcf8f1c9c41d6b47858f6071c6b9e723cd24ccda31b435be5a8ad2e940b6fedc633c081e2b9c375402f56ffcb62efb952c35a677312a43bf30cea66225bb0a1a5d88d86f0cd967caf6f0bd5558f1722ac8769617618f88c0aae0c566ba5caae1c9a27ff34ede8bd6091b2759e19e7b47989d3987e8bba1cb7de411fd5269827822ccdc4820472844c532ee52e7bf218bac8521568e5c6c8a2691e124bd0684296eb872a038de47c640c233d1a17952c57af5d170024962ff5dc35e31ac0e4d6d3be14a9e9a9661ce113b0eac9b7dcc8e4ec2352f3a7f16459fdfbf1bb7c698cedcdc33061a5272c756fd3c63e90790a0ed8f04e7b66573186504c0795e0435dc4956f4dc958370126debae84f99bd46ca85e4fa679e01d27e8df9fd12492771948a5e8549ae3e4be0edc2866b3f178c182b7c8142588c5a9aa1564cb8da6f0efa9d38a5ca693b77ab16b96373bce47c178778e2074d025156f0e1f1fe916aad5846c96a1fa29d3d19fc26737bf7764f994db1849871cdd7e73cbd0c56b3a9724cb2ebf4e6d1009b18283d9bba1a37c921c5647684e7bb4005fecde18889b010cfdf270c5f22784311423366a011ef52f3aeec478f699b10f7be7c2eee4e69168683b65d8135a9350488f4737bab61dc686152b18403af1538afccabf1872b35c57ac8f03f7a7f6506e021d926d8d693a46695b9257d38753676cdb57672dafeb838db2544127243245e5dd8e02f275f76646cd1fa2fd4f90a4aabfcf55a18fd1069095a0836dbf4fb96ca2e470718f7dd7fbb5a843acd2950d02e789bc24b8b31678bc675be578dd0d49c4bd5ac438350bc95d0216d0e02d6e55b0d8153d4a44b96a41523ee018aaa4cf80e5d8d13a77fa5046c85530e72d5c72aca8eebe54c7359df944e5be71df73e3c887f466d0c35972a5f078b0d03a8028e6fe77abbed91bf4c55441b546aaf11c42370afac5ca83940ad1557ae72f11d98af1c6abffbed2b9e11256816fba2aa340a38c5f2d2a05a2c34d93b42510355a8c99a13c2e3f92625e4b60697eb786794fb17e39fe5fe279031d5f64321ce15026db98f1b7d8f3b90993719f99c8169b3d7dd0b9f329e054feb49ea42781f5a4178a9d4f60b0d9b1e468b604cb61cbb2565a4d212fdd933bbfd0209ab25e2f798759aa09406b590b02d0fbb57429924a66d0904cc5a5431a6072cccffedde1cdc222c290a1828cffa5f28686e24e191cdaa973e9a9f3a30911ba335c07018a44a1a4774feb831de2a5e1ac39eef60a85d86099677fd67efeb11fccaa671bf5d7ae552ee4567996e3ce4c83302b82a5166022cdbe6d3751a9153a2466cbb5b9103b2b4db4cf49361a3504fb284c87f179104a692ba49399ea02682f33ffe385fb69abde2484f958c4f0305e9c66a8940e152e3d1ece4b95d9caadc7146adda36591d84c8046fc51533ef544e495464018bb27f98d20f1c6b731ff2c22ae15b0d889226361225b65462d110e31f56f113cdcd140ba16e6c605c925a2a857565e95716fcc007e878a233fb77716ea21604c0bf4e6144486d5b59d59"}, {0x100, 0x11f, 0xe0, "0144c3bf5cc514378808c85a1f47efd61786f8d8ec2f4a03bab08338aa9527f2abc16d2c28121607cdc27ed38be88e7ecffcf8f10e9485511b964f3b650d0544877464b9950919661a6143f3e5e41c645e99d755ee755f170226a192fc531a3d1170853af613fc882bca9a7de28a34e255a8f99e21ff09bdf2da31932fe826a01372c64d825d12aee7dd6bfeb569e02fd6e6d07a0d8dd9fbf8ea3f5b2d0c620dbf5cf9e59c9cd2124ac9905b2593702c13a720ca0a82d3f84cf2aaa8ca88809cddd8b9f07c1682908c27fe2894c0c633422aca9ed67d0d6ff9a8492450298f205fded0ae46f0a8cb5f61008d419f1ba9"}, {0x20, 0x18e, 0xfffffffffffffff9, "f83d4c1f77d3eb7187f169189d30aa"}], 0x1130}, 0xffffffffffffff80}, {{&(0x7f0000004fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x3, @remote, 0xffffffffffffffff}}}, 0x80, &(0x7f0000007200)=[{&(0x7f0000005040)="dd0421694227dc5799bbe8a761e8e66b6bfeb377b6b2fe625e080ba530b34d2faf223e9bb526df6d63e70b49ad3f5e8fc423d8602ed2febb66899471d8e2b3fc928ebb084975a2b04168287ec03a4a389a0cb17cfc319cda4b47324993549552732ec3796d3410ea50a25c81e4c56020bcbcb30520311573ad778ce6ddac11f9bb807f63d4229b5b3a068ae4ecef58f25d2cdcd639dfcc149cdcba8f8214d1183ef9fd024461869370efc7b1b43f838683b0f072e52caf2131078eb3ef71de7532a652fcf700f64fd3a94dcf5fca42b83f3b318334c4ac8ab42b5baf6682d2647da3119578abbeff3acf016b712bfb7fe01afbb22845e96ce75fdd48dc6bda470aa6de3dd0e82bc0df1993295320524722de48e5289fecf08f21c3b101812fd6418285ac4fa3e1496519b98fdedb4875225be3abc7dd38f57431aa891c3827ed0e9420d0513c67830c811fe3ac3df0b8401a0320c1de7ebc175cc96b72a61f679df8a689d1eba6fbf24e6dd4dc8fa8b08f849f48b363480d727c6cf6fec65095021165ada342301e31a051bd790d953899cef246b0577fad0a22e3f5e2a15939213412ac50466da60f94c6faeab0213426fd56f7e8e0fe58a5bbb9570dd9d2f3b29757113df0ae821a7dfa395bbaf95f120f7f0bec741779e05fd04bf7f38b08ec8166fb220b42b9faadd3a4d4b7ac6185dd82e143bf9b67ca9a3002f9b3ca172913e66d3950e9cf0ad3971c26257bd28456c65511bc5ab3b14932315afd2e990995d630bf7299016578837c5ec3567a917965befc81de32c34667a5d3e6a5774f74371da04db0544ce858780ac0c0c5efb5f6672f12dc48ce03dfd0935a6fcdbd628446479e36187800032b5458128a65516f5d3bd04e0404fdf49e872abf58d2ce1f546f93d1acf47dc519355d5615b8db71937fa2fd96a7c5112aa02d0927c655d63cbb5308c11633a0a4302ddaf345d3b00fdeed20b8ed42dd5a4f80039463e976c32cf8cb4efa013d9d1c6df98eb0669d784252635cfaa764d7e66cb3b5df9272542e88cf517f6a44bd3b4fe5e834c8589fdbee1fde96b53d56b8a5cfea5b82dfc643ca520c57924be4417c394ec81a86cc9ae9711bd69986868e059aad79d752bd55080c2d5cfe1891fc9db66dd53a190af56bfc4d2cc128eaff3128d41ea30ede69bb811801c5b2d9d1ce6686914a265f6389ba97b3293034e3e408ca6ccdf3c6505bd2bb61612c33f0e6a291ac0547ade5348fc6393bb204ac832e540debfdbe011d19b31ebe8dd279cf9fe2b3b579e732a78946dd9f07e2515d4a64a9d9abc3d0e7250a17c6a9be6790e64a42c975981b3910201ddf9f124a4f9477ebec5c81fa84e912075b16baeaf831931802322a2674053eca66f83b646d02fca0161441bb727195fc4c65dde57ba44d83d2d823abad36d9746360275e9489071c4775a9e548942f725daf2806dadaf6e8b17ac7a74122f8c810e959be1470ece6202cc3bc496b8b99d0d2e2408764adbcf9e33f316d81ec8d2d4a0f8487a5a3ef3b353b163825f7fb0065fca1ab93adb1a085529d05234bb331c7ab8c9ce6909a78b860af4d58c46b4a4657595eb68c2132220583aa0e8404939387311f7fab268235071f7e35f43fbdb810c803febfcd73aafa40df4fdcfa856460b81f47ee56ebd31a34e3fbd52e361711a311233a1a9f41dbd5ac2ff30df7963c19d65da3adc70fbd3652528820210bf36b5ddafac95a4998514889ee10fbf99ee4a95004613857a1bef721fabb907f2e99ba82bbd712aa94e3b909185b0d76050beea36ba25a0e9377b36f4c0c150890553887cedacd5653960501817150b7ffa80a6e3de05f74a6c072901dfa05ae06c6b7a3215283996e1620a56632fda8b94ff43c443f2e4d11c700be0057d2ea855f6970da6b47da10293516bcac38571ea17196ef309166c81cf0117adeff160928c6ebaeaa2045524920682f5df1d1d45cf40b306473f0780d8fd86a821c258f24e78d54e63f8d2b721ccc62b567a7b742f1d81c63dc5113b5c1f851a2ac5f352f1ea6d9397d4a37a3ee7aaffe5e6afbf5abdc8f070d669136a86891553a2a8722bc680aa8f474f5f1c5188bc4d326b77699b1e8e6c7194bb56bfca7ac9ecd736e848c04badb1f8949473dff99c372d18be41e2b9583d57b7b08c321df04ccde96f138e63517f329cd88d38d2cab2853e0e9b073bb374f51d8801808dc880ba1f7da9d8740128a9b1bc6b05a83f2401274c9b4443767c454e187b5a1b297db8d34f441c0161751f8bffdda3364b7f94919e8718d21e1f0c059be6489195c605ef87c677fa0aa590d0a3fe9d98bc758d41d99b2d1ced7e3019bb4ac01ff30d4125cc1a1c82948b321e58e7c6698cc2ca917ca8a7c901b7ba3639813c7631b634963d59e8abce82fef18d80dab836a58ecd215af4051f1ddf984fbb3e5fa44b5c459ac38fdc22a13e93b442d6c25e8c25ba7a2688f8cdefc937426ba58497ce4eeba75597e5b90c1592a0547f72c10ff8692b572e3ef8df5546d451c6b35b1d415e3af1e39cad65eab28abfcd1197641e5b5f494e5ad45d42a7b1f10f4ae379f93b0bbe479cd04d0a19a616e2803d627f04b47defec098b448933cc16ceb0320dacdf6858b57e1fba70eeba011af299de67cd75fe31b24abc9ab2f4ae7486c484f81a1b74c5a783587c55a40d5dad15b096867ba47de15501a809a5ce3de3ace1e8cc1ba05546745fa21411bdffea7e923069805e0f676597a22a48fd43883528b1387a4f6c36a2ca4d97a54bfffba3a05bafac4ce1b23b14be02a53ebaa997380b2bdc45a609644261aed2a10d7cb1912b865dc9c71b2a3207913afaf894a78e64334f74ece1a096faf408970bff03426df9291bd5aada3761b2256e9a48c462ea5388eac6039c59843e7f41bca9faccac0c03f264631679454903c520c43fe64a21dfe3dda213ac5f094abd5c7d4ee162d61a3ca41e750850c97081ac6d0499574d74b98d9df22fd8fd03b5b2f5dd5acbeec221a0f2c5c77b0d20c80167c0734d7b4be95fb0f4e79517ebc769270bf293932147283a9ca0d07de621c5ee67352e305eefb5a68b16be031f5e0d61f4c42e84005f26c18bc2782d7e3cd77d9351d1847591bf8486e1978fdd8f38c32cc6b738414c6d8b42b85633d046e1b60183281227965797530bc8bc904deb3036e911a658e92314498e0dbc7ee2a41acdd75d3592e06e424d488aff679487cb5f48fb0cdb1876949be6c07c208ec8b233a97fc7e1c4ea5899dbc4f28ced953fc7818445479e09d3e334994f6cdef5f80640677f8be01505a1ba3d981fd623bce9fa5070aac8b1bd6b4aeecabecf551abc3a98b87e0ff5a02407a8b538e352bc556dc4ae7bb3b26ce348f43ac3c700c0473b95cdd25edf06dd88522ada325f65862bc286c9a6bdad039c99962736bad310470e41dace277534b646e750665f385d6be9ac203ae930eb044a8a19ee0e4f6fa1a396dcc5cd368c0ca1222e993f614c0b1f5782b7440a4111a48c2e42060d4814d0d2bd16f3f0d3bf0dfa313de3f766a80993b6a577bc98fb156e7ace2188121fb52d46ae2fa763eb921f6a6edd22ad0e40dd93a257c3e9ff62d3ecab2cbce41071755c475f296ee97e75c8207a7c528f491c14c387156d57de7a2137973c77d2ad609aed977e1644d37bf07a5ba78921c6b54952fb4f37a94b6893186acb3b4e3dafe587ba6244664ef761bace685d2a33b1d443aadfe795b9de13d33c171f4fb15d9931b74eb66787737c70710b8cf34799b036c1e58022d155effaf69f5bd04da27a9758c14962a5d45373a409b4731d188e8edcac7d957fb7790cd363c1a4b96e65adc8eb50c4014e3fdcd3ebaa3b8065b87db8930df719c1fa3ff0ffe499866b30d27838e1e63990439769120feba80229d5419091b42ce41c072c4b3c94d858836c4c02c3570e24cc8830265c4093c58c6d7fbb69dc09105c41dc70748e82c67f5336eeb5818f4053256e4973ab58c2b1c9c291d1b51d5ebcb9d68c0f8aa170a26c6ada2126046eb81c77ce258978f649bdf1d0fc2401426e9495298ee66769a5a7a54887c2a8b30d1ad3ca04365b18b85c2c564914e27f763a7cf201dce21586be9c44abbc8846cbb9130398a39508eba3159a735fb6f4427278775be462d389d54c639fbdbae12c03a7d099bc40e86b2c54c41c383d54a3a89e60345d3b8b18843ef0a4164ab8aacbb938d196532512181abc3454fec515409d2b173ff962c48784962b6011e40459a5771ba7104011ee7f7bd58b7c50c70e6a89590e3d82c0514a8646d8ab7d5a7b3f79b7164108937cad37070de12802dac7afc80fe7708b59a40bc81b0e37a98ba3287b83e6058db35d88005a0dad825932b66e547e05d9b5baa640dfbf5e8ca0b14d24092e68162a18f3d536948f3ce9a499eddab6cfa4796565cc9e337bb13bb73227dfb3fb1bfd6b9f47fa96956e39c7b7da85abb75007758b4fc79aaa9ff0a6df714af8f6e91dc409ac7a26b98e52f58ae646142fe673113bef56cba77eae1a019912a9ac267514841ceb264e0996dee32ec75c2670258ea92a5b3f9f1f6200fb8a780f0fdec35416866df46e9bd6e2d88892e3fc66d966c123bbc87b45865c1a1e5ed9b999867d04b8fcb601ef0ae8f14769499ae76abfc8ee7b5fdfc47b082f0c6626bc019cfdb82bc690147a3ddf012e6074a6b65c580dfb185c20f4e6b661db58659fee43ecb202d1ecf877aa7b87c1f1ff16e7f5fc4f6e39ea5134fb7b32a20656a7db2b464c5a7dc3db55a8fbede20c61b1d4622cdc5ad36b61076d0000da8190433d2434df41d5be8fbd9dbc3bc0ba96334e42dc1110c73af9badc733b5323485d7122a947406d164764767ca66a22cbab6343f7f53fb0e8dec5f6111b145f3c5dedd8541d5ff0992a3c03c7a8e7f08c4f53dbcd9c46b5ae2368dd50e31989e014729c7bd7ce0ccaa5c98c5402c87c8d95be7b17ffc31eb4b017aeda7b8c1d9bdf9f7c63da10daa01aedbdfda7fe7132538ee5ea0cb263ede21596db82ad9841b4b74c2ecbf11bcff38852db3c7c47f14f30309da1de767f3ae03376a097819596cec1088c52f9ed61718201dda1d4bb2a2772da081224c5e1421d21973ed24201055771c1caea8aa15faf74c440df9916f925b19d2505eb2e468522a2f43304f52e71a933ea3bfb7e3bdf0cc800c1f22b9cd12ffcea400d681b60b627cfa6c013e6abdadc7b1e64bd52fd82d18fd12912133bd8fa26ffbb92e815b3a0bf988ad1c58c47cd2bd44015b87a8ffee5db2ee0d7434e10bb936c4a65f335ff88abeb983cbf6b0596ed4b0c5d20852b68b531301bf827bb9f58b76aa6706bd55db17376b38274c469f9c833031d39b0b1904d7242a0a85320dc721eb907cf86ca982d58d89369f6f7e8b1e778e48a0a5a09bec1da45e5592730aaef65895e65b48b47c0028457141fd2d50b01c30bff338b7dfc6025823c481b6522f7cd9c203c7b9e54b094778304c826a4ec3b0e7900886d396bc510504d2aba5f1c57ce813a678b9aa3f6eddd53b52a656c1586511378e9cb51867f945c365ce054f230e8207651e06f899322ded748850296f87829bebda819e2eb3916557fa9a8ce2024e7e679043d59883367facb014be3f3a5ad114a5f43f26892a097355782c87b6a80762e5c051c228ff66a1329d8122ef6aa1edf39eb18d07bccc1e705d8d06be85ea112b262c53f6818a5901bd12316c5f8195cd6baab77b47542d89e2924285e1ffdfe2b5aa6c", 0x1000}, {&(0x7f0000006040)="a06be1280b0a78746d77124963fb0bc961c1ab4c9c793843a1e315e561da355f1d6746bb99c16d23221064b2a842a32c482fcb9ec4e981cdf5b0d78d", 0x3c}, {&(0x7f0000006080)="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", 0x1000}, {&(0x7f0000007080)="7313da692d72abc9bb80648ce5623008a3e5c3f86b86fb30165586e20b50f08ee1f80d1f29b527bede04ed0da2faaf55935595dfa9f51da9003677d2a8cd233048687d6bf7c514472e7fb9d20b3c0be70738322cbbf60099eba9", 0x5a}, {&(0x7f0000007100)="25b009f521bfe67552f1ca251e842b487290d050e986bc5fd377170ec230ae12daf9082573915479e7a4d03ebdbe05b781a83eaedcc892323700cc16530d09bc1ed65b9bb49e2db30055c3c998733507544b1f1c7600f618aa2e121300b346d26ae712b378bcc56185386d6819bc6009023a9e834aacafe762051ad485cd47c8913a2a1776943c2cbc30c0143288ad5937fdb77eb7b90a10884a6a59e9baef74857424ea9c85ffe892ee87ea1e627784df4169d14bcbabb5a432868161afd9c6c9eea4cd3559ac49f44b47d83d3ffd752d28b841afc3", 0xd6}], 0x5, &(0x7f0000007280)=[{0x70, 0x111, 0x1f, "c5e42c0f7e84315ec5ddf67283a658497bfeac9d01ef0e9e10e2e275c9cd7a5c16658720236ac1df1f372f93d53078d76e365ca6aaa02512a7009d6797280ee773ac75e157f235fc24b867b196399e8072dc0a437e86c4c98b8fe605f3eb"}, {0x20, 0x13f, 0x7, "90babfe8449929ce681a735e9750c342"}, {0xa0, 0x50b2d45a70b50adf, 0x268, "956596bcc440c090de8a500447e21162dd0c8b1ed8777ba7856b296e52a3b5d9d907e86e83a504c2269d47632333259300a7a6c83b28808ce95a2f6854baeadb31f0dffa3213ac0ec87f095757405f7992a42c45c7a411356b907f1c27ae27dd66c42cb5f40bfbc00d7d55a53383934bd2b4d18f6a0a74a5c53b15c439443e38e37cb743830319cbc7188f"}], 0x130}, 0x9}], 0x7, 0x8094) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000007580)='./file0\x00', 0x100, 0x4) ioctl$EVIOCGLED(r5, 0x80404519, &(0x7f00000075c0)=""/229) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000076c0)={0x0, @broadcast, @multicast1}, &(0x7f0000007700)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000007800)={0x1f, 0x4, &(0x7f0000007740)=@raw=[@exit, @jmp={0x5, 0x0, 0x3, 0xb, 0x4, 0x16, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x1, 0xa, 0x7, 0x50}, @alu={0x7, 0x7, 0x1, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000007780)='syzkaller\x00', 0x454, 0x2c, &(0x7f00000077c0)=""/44, 0x40f00, 0x1, [], 0x0, 0xd}, 0x48) 18:49:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000180)={'syzkaller1\x00'}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x1ff, 0x5) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getpeername(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$TIPC_NL_MEDIA_SET(r3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000700)={@broadcast, @broadcast, r4}, 0xc) shutdown(r2, 0x1) 18:49:32 executing program 0: clone(0x4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)=0x0) syz_open_procfs(r0, &(0x7f0000000180)='net/nfsfs\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffbffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setuid(r1) 18:49:32 executing program 2: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3, 0xfffffffffffffff7, 0x100000000}) r1 = creat(0x0, 0x29) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$fou(0x0) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x7ff, 0x10000, 0xfffffffffffffff9, 0xcca, 0x0, 0x4, 0x400, 0x8, 0xc, 0x8, 0x7fffffff, 0x10001, 0xfffffffffffffffc, 0x5, 0x8, 0x40, 0x3903, 0x7, 0x1, 0x100000000, 0x4, 0x4, 0x2, 0x80, 0x0, 0x4, 0x7, 0x8000, 0x7fff, 0x3, 0x4b, 0x5, 0x101, 0x100, 0x1800000000000, 0x6, 0x0, 0x6, 0x2, @perf_config_ext={0x2, 0x7}, 0x24040, 0x50a, 0x51, 0x0, 0xf1, 0xbd, 0x6}, r1, 0x3, 0xffffffffffffff9c, 0x1) 18:49:32 executing program 0: r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000000)={0xb53}, 0x8) r1 = open(&(0x7f0000000480)='./file0\x00', 0x220000, 0xf) write$selinux_context(r1, &(0x7f00000004c0)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="d009a40ac266f91f1de46820ba4614b30c7277fd23b516a7bd5e471fff44833cb38a3ecbf622a68bcb0a7894a9925b635959aad1cf9df63b509ff6811a2f3e710af87b2b18c2920cfaf5194ce218488edaf942d17a538ec968f3ccc2604c2e88e339556cf771d73aa426", 0x6a}, {&(0x7f00000000c0)="9452c938a14b82dd3e0be4107b01b0752883296f776a1eec0e30c228dda0f309da1cd89d308835abbb69fbf6668e2ee35aecc1c0cb42d0a4920db6da6d5f1fad7aa2dfc549d6e8a369e905f0418a085090ce4b196b4ced28d8104baa8699f0840006e7c2ea4ca8a225c99d1e10787ebece5bc5843229d0cab01652b69cbebcb128bf3109212475ea9346b59c73d460727fef08b5ff871335a73e856a798e7f1232758989415043d0e17cea8a58fdad6d462a6fa84edb001137", 0xb9}, {&(0x7f0000000180)="6c0bae9e010fe3dedc50443792e6cd8fdaf1d24704e6a553cee587611c984c6e", 0x20}, {&(0x7f00000001c0)="576bdfdc00e9717945563ad53168d4ca9973b8c676acb0164977c00df06ad8dc74ab90ffe9e51435c6f917f9a23d2eeb46275733bed04786076b9ab1c4d0efc3aca7092ed111e1c6fcb95bbad31ae72e01ce0ce9b9e5612dc8cb1708ebf0c9d5476dbe1912c40a7fd6e9ac721a25791246c55c27aa4b95b168846141eb7093ca2fb167442ea86926821f783e397cd25c2eee7818db305b9394f541b7986a2695438cbb20226477c7aa17e916fa5d62f6cf8a31f1522bcbea9c284ccbcbbe9e1a8099e5675e51fa9ae69d9515b51b8fb5d4cfd1df24658ae7a5d459077c87", 0xde}, {&(0x7f00000002c0)="88f57b0bb6aaa8eb85a08c161d13adb5231308fa10bca08d40c3cc57233aa205acf708ab8456f2bba0c925131cfeb876", 0x30}, {&(0x7f0000000300)="e5a4f334e03e7658b99a898f11ad26c439eea9d4cb5f1f7d6c3889d721f7e7448928b10b576c84e3041bd1d77ea18ab18c69a11724fda6ea50bb5209f2eb1914264d3df9888ec556b0ec67ca47495de6e2fbb6db8056957ffcb7b3292176f6a252683002f1ad245098aa2633a7988f95c9f6ce72f0736971bcec2009f2b3dad6bc99c65535b3e2a01bda70dc364bc715496366064efef1381e279909ef2f4e7cec65341c59b8cdc3845a7d10717269f7", 0xb0}, {&(0x7f00000003c0)="6f54862d3d0c55c7efaa4fe4ffd2ab3e2273f7e8", 0x14}], 0x7, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x20, 0x0, 0x0) 18:49:32 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x11f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/checkreqprot\x00', 0x501000, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x7, 0x70, 0x7, 0x13ed, 0x8, 0x10000, 0x0, 0x7, 0x1808, 0x5, 0xfffffffffffffffa, 0x5, 0xc5, 0x6, 0x188e, 0x100000001, 0x6, 0x8, 0x2, 0xff, 0x3, 0x5, 0x5, 0x925c62c, 0x7fffffff, 0x0, 0x10001, 0xffff, 0x7, 0x5, 0x6, 0xff7e, 0x800, 0x7, 0x7, 0x10001, 0x101, 0xc3c, 0x0, 0x7, 0x3, @perf_config_ext={0x3, 0x6}, 0x20000, 0x7fff, 0x8, 0x4, 0x5, 0x6, 0xd1}, r2, 0xc, r0, 0xf) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2e) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000140)={{0xce2, 0x9, 0x1d8, 0xa1}, 'syz0\x00', 0x42}) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8001, 0x3, 0x3ff, 0x1, 0x7}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0x100000073) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000480)={@dev={0xac, 0x14, 0x14, 0x13}, @multicast2}, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r5, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r7, 0x8}, 0xc) ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000340)=0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000500)={0x802000000000, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 18:49:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/169, 0xa9}}], 0x1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r1, r3) write$UHID_CREATE(r4, &(0x7f0000000480)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/124, 0x7c, 0xffffffff, 0x100000000, 0x0, 0x8, 0xfffffffffffffffa}, 0x120) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair(0x0, 0x0, 0xb, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/relabel\x00', 0x2, 0x0) write$binfmt_elf64(r2, 0x0, 0xffffffffffffff01) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fcntl$getown(r0, 0x9) sched_setattr(r7, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9915, 0xffff}, 0x0) mlockall(0x41000002) fcntl$getownex(r6, 0x10, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000240)) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x20000003) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001940)=ANY=[], 0x0) fallocate(r5, 0x20, 0xfffffffffffffffc, 0x4003ff) write$cgroup_type(r8, &(0x7f0000000240)='threaded\x00', 0xf96d) fallocate(r8, 0x3, 0x40000005e89, 0xfff9) unshare(0x40000000) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f00000000c0)=0xffffffffffffff38) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r9, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0) 18:49:32 executing program 1: mknod(&(0x7f00000000c0)='./file0\x00', 0x8031, 0x1f) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x79d74d361886f3be, 0x0) clone(0x80048000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:49:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) r1 = socket(0x18, 0x8000000001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) r3 = socket$packet(0x11, 0x0, 0x300) truncate(&(0x7f0000000280)='./file0\x00', 0xffff) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000080)={@remote, 0x48, r4}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmsg(r3, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) 18:49:32 executing program 2: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:32 executing program 1: r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) fallocate(r1, 0x0, 0x3, 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) getpeername(r2, &(0x7f0000000180)=@un=@abs, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r4, &(0x7f0000000140), 0x391, 0x51) sync() setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000100)) 18:49:32 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a040007000000ebbd0fdf103f260005001a000504005a0005400001403c84000000e340900ea3efaac46e6086c89074b8354f00000000e56e4b2c825236e0902e0189"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x2f9, 0x0) 18:49:32 executing program 2: mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:32 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000940)="3ce95c98b66a9cdea42aca63276ef1eca3f038047504ba09072b9792bbe041c012d015e0f9cdf7aa7a4d18766deff9a2735edc11437a10c0e9f265c48e7033f01161d5ca1babf5738b4c3df116d964712d2c577d1181a2a242ab4ada0b6cd45c1f36c27a7453575b33cdd7300a74dd585eab465795dccddd26", 0x79, 0x400c000, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x7ffd, 0x0, 0xfffffffffffffdc1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) 18:49:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xffff) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r4 = dup2(r0, r1) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) keyctl$set_timeout(0xf, r3, 0x7f) keyctl$setperm(0x5, r3, 0x200003) keyctl$revoke(0x3, r3) 18:49:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x8, 0x1f, 0x3, 0x0, 0x0, [{r0, 0x0, 0x100000000}, {r0, 0x0, 0x800}, {r0, 0x0, 0xf4a}]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x5, 0x1, 0x9, 0x3, 0x3, 0x3, 0x1f}, 0x93) r2 = fcntl$getown(r0, 0x9) ptrace$setregs(0xf, r2, 0x1, &(0x7f0000000040)) 18:49:32 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000000)='smaps\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000000800)="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", 0x600) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) sendfile(r1, r2, 0x0, 0x10000) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8000090010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:49:32 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x100, 0x0) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000004c0), 0x237) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x401) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 18:49:32 executing program 1: socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000440)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000300)) dup3(r0, r1, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 269.842644] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) ftruncate(r0, 0x13) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter\x00') accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x9c, 0x29, 0x301, 0x70bd27, 0x25dfdbfc, {0x0, r4, {0xfff7, 0x13}, {0xffff, 0xfff5}, {0x0, 0x3}}, [@TCA_RATE={0x8, 0x5, {0x8, 0x2e1}}, @TCA_RATE={0x8, 0x5, {0x8, 0x100}}, @TCA_RATE={0x8, 0x5, {0x9, 0x7}}, @TCA_RATE={0x8, 0x5, {0x40, 0x3}}, @TCA_RATE={0x8, 0x5, {0x840, 0x5}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x44, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0xffff, 0xd2c, 0x200}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1f, 0x40, 0x11}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x994, 0x1f}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x9}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000040)=""/163, 0xa3}], 0x2, 0x0) 18:49:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:33 executing program 5: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex(&(0x7f000000cffc)=0x8, 0x80000000000b, 0x4, &(0x7f0000edfff0)={r0, r1+10000000}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 18:49:33 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000d12000)={0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/170, 0xaa) connect$unix(r0, &(0x7f00000000c0)=@abs, 0xffffffffffffff6e) 18:49:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x40000200000600a, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BLKBSZGET(r1, 0x127e, &(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000080)) 18:49:33 executing program 1: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setlease(r0, 0x400, 0x0) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f00000002c0)={0x9, 0x0, 0x0}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) chroot(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000014c0)={{{@in6=@remote, @in6=@mcast2}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) socketpair(0x4, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) write$P9_RVERSION(r2, 0x0, 0xfffffffffffffe77) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x14) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000480)={0x8, "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", 0x1000}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00'}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 18:49:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendmsg(r0, 0x0, 0x100000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 18:49:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x100000001, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nr0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x00', 0x4}, 0x18) ioctl(r1, 0x8915, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0x9d48, 0x7f, 0x81, 0x3c}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, 0x5, [@multicast1, @remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, 0x24) ioctl(r0, 0x20, &(0x7f0000000100)="6a9f107689ac5ff8f16e3c292fa426209fd69314a1cc3f43ce740bd18ca3b78f498978eb9b0f3c201c43540867a2a0f34c3e5e2167b50c43f81eb24d5308490652d1196234f259a6260a65021bffe27f67bb032a2c1d5e0a2986281f375dd40d1282919ba0f1c75e5cc42d3b73d37be9311a5e1e3840ad3eb560b3927dc04ff909d787b4036e4fd45d895339dba676a6d36f6460987febc8dd2b414ca4edb4b53e9ebfe65e2776efd7ff1e4556ce6215de8195a8661b3fc439b74bfd05488c518684f7c63761f63d56bfeb9f") r2 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x8, 0x4}}, 0x14) [ 270.514160] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:33 executing program 4: r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./bus/file0\x00', 0x0, 0x10}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./bus\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xf91, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 18:49:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000180)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14}]}, 0x104}}, 0x0) 18:49:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendmsg(r0, 0x0, 0x100000) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000080)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) 18:49:33 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_0\x00', &(0x7f0000000140)=@ethtool_channels={0x0, 0xffffffffffffffff, 0x800, 0x69f, 0xf058, 0x7fff, 0x1, 0xc7, 0x7}}) fstatfs(r0, &(0x7f0000000040)=""/220) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40001ab, 0x0) 18:49:33 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = dup(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) add_key(0x0, &(0x7f0000001a40)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@empty, @multicast1, 0x1, 0x1, [@remote]}, 0x14) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') dup(r0) r3 = getpgid(0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08003a00cd205be6020d0400f13f93388e12e7fbafb129118dae4a5620c38c3bf2bc5eee193bd9bdaaabce1a50b0bdd619762a854db21aab4dd52cabd17061b85355e4", @ANYRES32=r4, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)) [ 270.700849] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @initdev}}, 0x1c) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x401, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffffffffffff}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x109}]}, 0x80}, 0x1, 0x0, 0x0, 0xa729f306a57e5bc1}, 0x800) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) 18:49:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000000)={'team0\x00', @ifru_data=0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x6) wait4(0x0, 0x0, 0x0, 0x0) setpriority(0x1, r1, 0x268) 18:49:33 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000080)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000001c0)=""/195}, 0x21a) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f00000000c0)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 18:49:33 executing program 0: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000300)=""/194) r2 = dup(0xffffffffffffffff) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000047c0)="b36b5aff34dad87feaa0dd2ca85f4afb82017fcb0cac97f84796810fdcbc591900ee9053af082bc3027b703a248e477f1f28a8f615c1a9f9377a5b802d4a00abbad1459707bfc993928f87ccbda5ba1c9125e384633f244700241a0591a100bf185fbc9c26d06f55a6759b49eec58e6711d95053754b1d6012c1250ed799be9e8bd7e9bf2a10053e6e1837e4e4011400696d7185f3c4623ca45c78d34617138b9fd16efd7d318fcd024c9dc0edc048d1899391280538116454565d0d07742b7d2d0f84457f521c1d84fd7e32ec154982f4de79f1f58527f1f3f95f2e7d95a5c221e29175ee0dff137d92adae518db6eaa0a0bc484a95ad27f5ec03e3410427b40cceefcc62322708bfc6aaa8cc75642fb98d25f16ac62ae527bc181d4e759ba528e1c4ac989fe1fa10a3599171e15a6a2e4585edb8c66609cd8a5e57775b80d7dfecf8689b5505cd3a84414e3d96b582f8e940c9c174d4e3b4764c77af743966c2aedcf4266f7fd6b06be63ec26d934ac3f2370cfa7397b29cad199ee101d7e99530833002edb8dcc71b7d3da18cae17212ff942b373b44eab29c06ed18fbbadf5e76d708e0723e47facf6c3dee07d44ea711eedbbb107f4105f9a501902ac9f347ba094faa271cf1d961f4aa5f8aa597c64599a2a83b9db8702f7e9c47d7d58ca3ec38b6512b790fbecea4a9fde0c74bac135b28f28a4f5fe5edae8fc0e74e8710fe6abbefc2379cf6f6128ff1359e1055937a8ec852b781b9463b5840c9d1544b2bf015c32aa472d5e924b3bc0fb80e2c0a4691ae2579b531cb1f467fa42b3a54423a6e9cf74c5c91df04d5350dc210149ee297afd631d12e6ea3684aafc68ee53e874a499f4be8392a3f4d7fa70bb67417ae8a1bd67c66d317ac3fa1b8794385345e7142637992d0ce73e2d2980f6113e2699f1ace6ef56239bab88a13868e967c601027c0646de32f57e148cab4dd3d96cd1afb24f240999b28765dea096a4a60e45be2b07ad69aca98916a869be7884ce15e01803849143a5f7e363963530662384ab2fc228f3bee7dbead97de6c63bc3b750c84f5cec74c03161b36aab4629beb2e41ef6a6429c1fc7a844e0fd7c0338ece3d06178cf2c7d689d2a9086f1899eb7fa09a2af7599c64fcbcd8e92f3bea4b58684249e408d8c0fe1e1821c627336927719f6d42d00cb03811ee5e353628d6d3b96f66ab2cd0032517b04e8eff115505ca10522e4bc8fb7abe9d9b6f61345523ace7e1c7a9caff269729f989c2cee138882b87869c6c3eba45585b5d9be40fdad7b2f05248c645f99ae0060e30aa7c2eff77921749772d9423d24315129308876d65fbbbc2aaaa5f34ef26efcafce93402f88008fefd874f5f8286388dbb209b955dda45a834b8b8bee91ffeefcb4d10398f4cb9f0e814683917bb8642aa8d7f75f7d6d51b42db96aa68773ce34ab52be74acce08e3379f12dff8551d65177964eb120706ddec39ca55e414791c97328f54a07e0eef76226147830deb4b23c83bb4e42ab26c838bcd482659d0b74a09c83e141f8b2bd72ceeee563dde9826c6bb1b0ff53308e9c711f50756f33a0d4b6a5e10c5da13f5ff45aa5d0941279902d5871920b6477213c349fe1e69b614a285e516ac7a0de8ebb265f38259419508f6df1d0b951bba2ae6e7082bfafd642acc2240f92214d9b7af76cf02a9d13422bf52158b085ecef6833fa61285399dd4216a94e34d601e819f63095aaf77986f51a8f6f63109b2d28f7c8c61b6cdc2c72ff0ef0bb042c178b40be4a23e1496a67de9884bee3bba09e7bcfa64202b2baa53fea55b9f4732424516f45a4d3a055b040e98b568ba6a9d7db2759cfb2baad5a56b997cb3b06603e133135d984832784a92d931c2b3e65a86f77db4730ecfcef8fddcd8e999476d654a2fec95946e9ad1179b01944b5c39df599a9c669c4b0ae5b1c2519153cf920cf1f383592b27f11ccbd7e0f1587c9329d6314e93e0de940b78378fba7d973de152dbf2dc0d6c9b26a9835739061dcacc348256f590d30d21ecb44b0c601f3c48cccb5c8d886b9fc1c28cf3c622472b32b35ebef3bf2290c4c475f94897157adf5cf59d26ca8bd8a3a0870f7ffd5288f43ffba6869e8a20f1092060bcf4f556271532661ff7cb70425ff5139714a15b27b56cc7ade5d6859ef70bfde36014fc470ced4b8d51b3a180b3b9628649ec26903884f10a1bcd458b8d0e27a5402f6096a615fd78ae35632b8310f400ff3bf1f17332015a4d1a36103f5d784043fa6aec01b0e2df1ce6c72e756a2e8c1652b213ecbefd2041e62c0e7ee5a3e4ccea6e18d8aeb7017e16aff6f7b8c82e7d8d99e7f1056da0f15eb646bc4ae5cf687bdddaade31c99b7a81948f0a3e9fb3d08648507abaca9261634da3bc90e8210330bb8227260ef1b568f2831e1e853f52831315022be979bd3d5fed1886706bc228cd68fbda0e68cc1f818dde52b40baaad8c3de7a5e543b6c10bdb94c011c67e804eee7c155e81ca680000f14b57b761fdc3d30402d64832197928358172771cc50d1f6b81699e10796d8b383135bb257983cee1e72842b25d50c159606c2a4ca8c899a923468a38a1eed818340315713bedc2308cccb3b7564531a8ec136c278f0fdd5157016f0f49820998a4cb4fb4de227e666d10d0ac639c5d3d10a75bf5998c908470c38269ceb3ba6344d5e4f6968208e74aae2ac53bb1b90746c7895816ecdfb4e9eb6d269a8491fee0c99b6c201d55762572b6986a11725c88c8343ab6dafb5f4404017c0e84b753d5d5ade49136452bfd9fd3a263b40ea82723b2387352225d37ceabe8cf0a1d6b17abf834f4c6207de5081c520cd714f6d9fa8d8f88b2b9ed1566bc0d693ba401186083931b439703eb7e5bc29c86db45b20169bb268a8088dceb5cf23e25a1e761f3a6f9cff0330b5abd5bb72cb5a4dadcbaa702c37f4318c453d1003c97593251503142dbfcc854119d3f3c37c280ee1403527ae3ad40f8a27c396abb8c3492d26d5d71d9fa66a9dc356ed76938f2b976dadc9f894ee1531f422c1ac47ec7f36575462e5e9d04ef95127066b27794aced98e8daf000f368ced58170f7f3f2b84756bb48772e200fda8ecd0097ae7a7982e509321ae03853941731130b417815355a3d6f5bf5a6db215812744cf6730192129454d62eb1309c05713ea1d33f9b3b1f0c8bd6f262892736e4975d2acecbb81e23a602af9462377082ade69bd143968ddb13c7e92d74a7a7d82f4b1cf844f93963b45ead7abd12dd33c4b52f94e9dae163ecce4b8cbc7246989a522b4e3867ddb5cfb738fc1d19c3897b38aa93f79ee865549ef156f90e080a921c183c294427dec191ba78eda29357973c38b3cc45db75503ec6b153ceeabe52e3d3b1c605598a227ef955e8136a45e834e46123ef220046134830c87b61f4896b95d8385f8fc1fef6e84638261f4b22559a9fd8a0031a14c8c2317025728ce7c6399cdecba37e4a48448f7711498e168291472f34c299d7548956957474c394af688e88cc814fc6ebec7a179eb3b1e137f769b7e787093ad6ef05fbdec6cabcf06ada8662c4771378b6b74c74846d8f1bff19af85537a53b35815c9d4ee08ecbf58e86a1bcab881feb3387188b923e6b3f260ce1a972e04eaa3d9684ce68f9788c3d7cc1d8d29e73ef098c47b2e3f57947f8655d45002ba85e7a6d125261596425da16df21c67fe0758de6c5fba0563ddb0294489d7cafa0528ce545c0e55f42e178e75ddaf869bdabf5f8e3f1becec7895cb23b9bc435a12b1f4b0a56f2162ade9cf4dee9634c3b56660f51c5c723110c4c8299890c2adebbf3c57c5654b82f4d678a3dc027e0dc219bad3ec5eed48740acc6f4c29254834befe5bac7010f74f754abe0a0152131645dc75d7909f9813775be40e02bfae63e0cc0f2a1f1a6468dca44750c052093bda47c4d15047c2a0e32311dd2e0cee3198b681cb4184f53d96689c948e959543fbbbb9d105f1143e277e1db4492a1477959e69c9ab3d60dd26f402d0beebf4339bd4657dbe25316ab85f02db1a1900d99179c00b6fb59c72533b4e640806055a1a49de51a7c40c22239137fbcd302fd734cd861437e94070c5f5127dfd8c19978fe5d1319fd31b13c2f15967419c44e7676bc1d4c7a63f17b6de22f16f7c0a831ecf0e742eea6a1d41e15e2643ead3b51c5f6efd16ee8e495cee1c516752645854aceefb2cfc87cbb8a2ce7f4152acc4736d79ceaaa1d11c25c0d1c8c65b94319a9701c5f26855dbb0a939e00a57756b571e57d7cc1a0b2debbfbb63dff1a696aa18f22e7541600ef8a5545a7ae52acb7d4a6d475e481dfc3dc1eec54b685532b11fc7cb5958178684c5ad6f3e55fa2e9a81203ea4aaa07cbcb03aaf041005f0f1ad3d1d7b8c656836eeeb89e9f9c2d33997a33c487b159c454eb1c7422d91b780edfe5468fed18b9c02b091ee6bb96d7fe42ecc6a8473551a8dacf2a45f2ed31fa6463f381e9d32e1841fb99c0276cd60f822c7c1375bdeeb8f0ee68128db35802be6f0042f3aae9e1ca282f429f1e229efe42489c53cb7bebfd37a8e31f22c9388bf28f28acc4e629167e41c61678d26b908fd41112aaf4a2e707df5ed3d6c1401ac95ab872a76e7498a8e0c207e56364b4c70e765064faafe87c014ce1cdbcc4c2ab45a0d2acfe615484c367ddd65d301ee577a083646879c8156c878a734764136cc3496bc18c8ad0e17ea939d04211ccc47ec40979cd142cfbec1517c300b0068b0ce3cbe27c8a0ce4d5eb273f6ccf0d74c37dff5420c8e3fbbdbe3259d1b0e6903840b1c08bf571befd4306f3a6e12b93fe96e3c77f438974f3783afb51929b524cd7ec29ad32841f62cb8d6b471796fe17ca8ebb436e464de9590361291d675e0ecf292043dfe6a290f81f26cbf402756a590a19de9dc80ba8909741c3c08318be885f75058f6ab90aabe1926fa299ce702330b8243851f557035f8f76307ea98c06c34ed90a385b20a4ad494d7e5d6744bdaaee1451a4af9fa06a38d1534cf6b5b51825820f914dbaaf883392b2b4941a2d84687adf266afaeaad62202b1fd0b5401c3eee9461bd2b9754d2aa1f00fe16e05b2e1e99a65d4638ed527ab22e2cea0422c48360b32da1636bcd34e62e824cad95a99d774149e3ef5492e1fcf2f5c8d97eefde750d8ba9106bea2e78855c75b920749caae1c67482963205a25de0287f0f4c13d91a7c5a521a24a36496859cf6dfb7f4b1dd7460622b9c861ae96eb7dd2012293126e4ec868637faa4512be5c028ee742ffb5bc569139835abda49055872c3da0aa7e7f164266e3f05ad49c106beb01ee05e95fffd98128dd3068d4f5af75fd06633ebb57e6f369ef95cfabc01c3b107caf8a06eae58054c0bee5ea9376893cfdf79d3f13fbf8dd6cf969593088094107f473931d9d1516b1da544bdc6f26b91915e6830106280ceb1bbf4e2c8ea11e0d69c411cfe6e1613c5e85bb68987c9a3b642861f4d1d50b72e7a3da23b681c736cdcb47982302792f79173231f59930bf1fc04b1c1c6b1c2ffe269954b3de669a78b7a123484b24f42e448a6e17badfe6d8b606fad53d944d267dca532f8dd6040d4069172151bd5a9f0a36968d95b410095b25f88a2986b938eacecb63140da0d2de4a31fe058e7e134896c9680b3e3e6edf89fcb5dba7a603ed8e0e81ff107637e9a5f2c5f7800db58f921ad306ce3a2ffc0618c69e02924d21d57dd153acd17b31d44b9df995405576bcae6220691ee6c88998ed523fa4e8159b8", 0x1000, r0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000036c0)={0x1, {{0x2, 0x4e22, @empty}}}, 0x88) add_key(0x0, &(0x7f0000001a40)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$void(r3, 0x5451) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) prctl$PR_CAPBSET_READ(0x17, 0x5) ioctl$BLKROTATIONAL(r5, 0x127e, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r6 = dup(r2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000003640)=@v1={0x1000000, [{0x2, 0xfff}]}, 0xc, 0x0) write$binfmt_misc(r6, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], 0x1004) recvmmsg(0xffffffffffffffff, &(0x7f00000034c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1, &(0x7f0000000200)=""/104, 0x68}}, {{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/59, 0x3b}, {&(0x7f0000001580)=""/193, 0xc1}], 0x7, &(0x7f0000001700)=""/110, 0x6e}, 0xffffffffffffff7f}, {{&(0x7f0000001780)=@alg, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/129, 0x81}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/27, 0x1b}, {&(0x7f0000001ac0)=""/166, 0xa6}, {&(0x7f0000001b80)=""/234, 0xea}], 0x6, &(0x7f0000001d00)=""/105, 0x69}, 0x8}, {{&(0x7f0000001d80)=@alg, 0x80, &(0x7f0000003380)=[{&(0x7f0000001e00)=""/93, 0x5d}, {&(0x7f0000001e80)=""/125, 0x7d}, {0x0}, {&(0x7f0000001fc0)=""/254, 0xfe}, {&(0x7f00000020c0)=""/68, 0x44}, {&(0x7f0000002140)=""/4096, 0x1000}, {0x0}, {&(0x7f00000032c0)=""/178, 0xb2}], 0x8, &(0x7f0000003440)=""/103, 0x67}}], 0x4, 0x2, &(0x7f00000035c0)={0x0, 0x1c9c380}) socket$key(0xf, 0x3, 0x2) 18:49:33 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x3fffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x7, 0x5, 0x81, 0xd00, 0x0, 0x6, 0x937f909203cdf733, 0x5, 0xff, 0x6, 0x0, 0x401, 0xffffffffffffffe1, 0x9, 0x9, 0x0, 0x6, 0x100000000, 0x0, 0x0, 0x8000, 0x4, 0x4, 0x7609, 0x1ff, 0x7f, 0xaab6, 0xe00, 0x7fffffff, 0x5, 0x1c, 0x1, 0x1851, 0x6, 0xde9, 0x0, 0x0, 0xa656, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0xd9, 0x0, 0x2, 0x2c4, 0x0, 0x77b}, 0x0, 0x2, r1, 0x1) setsockopt$inet_buf(r1, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x7) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x200) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0xfff) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x46) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x105001, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = open(&(0x7f0000000280)='./bus\x00', 0x4000141042, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) fallocate(r2, 0x1, 0x0, 0x10000101) iopl(0x1f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'teaE\xf8\xe8\xaa\xbe\xc9T0\x00\x00\x15\x00', 0x21}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:49:33 executing program 3: mkdir(&(0x7f0000000a00)='./file0\x00', 0x1ab) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000009c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x0, 0x0}, 0x10) open(0x0, 0x20000, 0x8) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x20) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) stat(0x0, &(0x7f00000001c0)) [ 270.974800] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="89b4136d660b000000000000009c4dc2a4476d4f2880c5337e985a4bdf55b92241cfe0030000000000000045b5ebd2c7448abe440be362be978db258b6b7c0ad4766a8a86654eb144238b3ff3b60b902c711c5d500000000"], 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x200, @mcast1}, 0x1c) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x1000000003c) fcntl$setstatus(r1, 0x4, 0x42803) 18:49:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:34 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x182) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x0) 18:49:34 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000220069d73a00d9063f05d4010400000000000000000000000031aad85470475a39a9b8a6a0ae1be9033ad507edd0a5e53ab90b33608afaa1098641163a7abfddfdabbf6f0d8c248e0ae1789f256b18d692c6d6e0e7f7c2d1eff1c9f6882a73d081b801933e64372ad2457b00000000000000"], 0x1}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000640)=""/25) socket$netlink(0x10, 0x3, 0x7) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x5, &(0x7f00000003c0)) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x0) 18:49:34 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x80100, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x65, 0x1, 0x9, 0x9, 0x8}, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:netlabel_mgmt_exec_t:s0-\xdf\x7f\xd5S\x80T\x8ah]\xa3\xa5\x9f\x9a\xba\x85\xa9\xfbK\xdf\xdc\x12<\x893\xf8\xf2\x89\xa7\xe9\xa3\xf1\xa6f\xd0\xd5\x05\xa5Tw\x13Z\xb0x\x87\x89\f\x83\x8b\xfa\xfc)\x06\xc8\xf4 i\xb2\xb3\x97\x03\x82\x9c\x9a\xd3?\xa5e5\x93 \xf2\xfc[\xfdt\xfc\x84\xd2\xad\xf5\x9d\xe9\xbc\xc0\x97\xf5r\xb5\xcf\x91\x03^\x99y\f}\x8a6\xd8P\x84?\xe0\x9f\xdf\xf3\xdfE\xbb\xe6\xee01#x\xce\xba\"\xf7\x13\xdcG\v\xab7\xb4\x0e\xf6\xa0\xcd\xa7\x99\x90pY\t\v\xb3\x86>\x97Z\xd70mW\xf6l', 0xbe, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000440)) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000100)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') getdents(r3, &(0x7f00000003c0)=""/72, 0x41d) 18:49:34 executing program 5: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000530000000c00000009", 0x15, 0x1400}], 0x0, 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000800)=0xe8) setxattr$security_smack_transmute(&(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000940)='TRUE', 0x4, 0x2) r3 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000980)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000009c0)=0x1c, 0x80000) r4 = getpid() setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a00)={r4, r0, r1}, 0xc) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffeff, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000100)="8171ee43cc0b6aace9dc2d0764a6c5763b494df7ad2e76a44d09f84f8d2134eb0de130307db48aa679ec10ff97c00ce9ac27c2a3ab16887e3913cab69c0e46a13c21a71720b9cfccf873a97f8180f21a348cfa52ea8e33f225b4fa258f98041c686df838f275c6393d4b5904c040e6bc31b9f85f9d02a15da5cac77f59dc3395bde80eea26d69cf8062a377e5bedd7e49761e6154da0e1032955147ca630c5c38d9aadcc6cd97f0b5ac17f634be0ac2ca87004abd6a310edf1238ae4160215c7f1c9f7161485d751e03f260598907ecac5bb0823aa", 0xd5, 0x9}, {&(0x7f0000000280)="3021d70e539b72261bdcc4e2f0fe71dae4735ad2027e021b94ed783344c580dec4d508a5236f5b57ef9836fdf52cc04711f54dfb2349c44b4aed586f17fca3e089b0270e1f9e1d3d270de7bf0fb6eed47e9e1f3a9589b6f097e279b10c4e50018bcec9d1d91d3eb932d6c8969e88fd430b8c02597db1853457ccee0861e9eb94e17b69e6fd2d3a355d1ae5dbb59f7a9a537cc7117b4125f67f169017262b0727b0419c19f3081a", 0xa7, 0x4}, {&(0x7f0000000380)="4d4fea7a4a9b51b96f3980fb4630df32994328080b0d961417415ae5fe6697c077f1516d04f843443293d1a02e0282d836874e6608b74781d6c58bd39b68bcc11ae3f589ec4513608fbcb77623d4a112d4509e4009467ac29a659ba5006702fce299fa03d663271e1cd93413961de68607a2f79ec7d13f3da9528a8ce8ab", 0x7e, 0x4}, {&(0x7f0000000400)="aa1ffd4576568548889f2b58017eb8a584d6374d2d6c8a52e3ad668b23d78e00c222901880087ff9802d10a8b1ca19d2026c5e4d575c8c49dca0b7c887627725e067d7aaa931d9687ce63d5d4ccfd26283cb6bf4523fc178d8e48ff0503ba7f1a5304a24e764d4bf32e4aeef08bb8767d5f2ac72a2aa0abc0a03372b9fe8bd", 0x7f, 0x1}, {&(0x7f0000000480)="9ba8b8b4aa35e95e311c86bcf9d090f350c83ea488b21ac31b23409a906702cf8dd8231b92e6068956896d653b7c250897da6b4edbdcf6c73523397140e174c72c304033834173bf281fa92e214ab593546f29ffd890303e7525a0a860d8e8067ca929bc177988c9c0c764fdd4eb89b3b31ff1de66e95283a4cb6f4243e87ff59a79dacfd96c0441ddcb717416145afb2dd729c8", 0x94, 0x1}, {&(0x7f0000000540)="3fde5af8043bbeea21a80ebc44ae9d535e94b7345dcd62ea7e9fea8c2524ecd5816f7ae244d4c08da221968d5c6b1c494fc22e994168d65da8a6846e411cce86cc8fb63f3f983190d4886f790063b611434e874bf54c93cee8d3826ea7dbc2fc5ea99d098524bcc85954", 0x6a, 0x1}], 0x200080, &(0x7f0000000840)={[{@discard='discard'}, {@noinline_dentry='noinline_dentry'}, {@nobarrier='nobarrier'}], [{@euid_eq={'euid', 0x3d, r0}}, {@fowner_gt={'fowner>', r2}}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'sysadm_u'}}]}) [ 271.208079] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 271.356775] audit: type=1400 audit(1556822974.283:38): avc: denied { validate_trans } for pid=6512 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 18:49:34 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000280)=""/190, 0xbe}], 0x100000000000021c}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 18:49:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') sendto$unix(r0, &(0x7f0000000040)="180973539103369ce9bd618d2e22ded103d3ccd01f02793b9d17cf329b43fd2dda44f59d04a2c0e7044208c01b12c4727a6eeb48f4ea49708642e22becf62b122bc1046e2d800f158f605e91dc163b479538841f89f0768801a70326e7a1a5bd1abd22c9917bdef760ab47080125d8a25cce90cbeecdc1df90854c8779dd2e5bac00f996ce005d8021db9b2d9392f6da1128a1b804d917859efebd13d8e355052c946dead5ba3db918df573b87d2316b92bc2b98dce74d3bb39ee8c1eb265bb1202ddd07f7a4b339c2f5ec4a62ad90cdee51538e48ff82baf469315d0a908069342e4e1a791729d60eb2dfd45b8b1d4c1c", 0xf1, 0x8000, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@loopback, @in6=@rand_addr="b9dd5c7d8aacd850001bb96621404901", 0x4e23, 0x200, 0x4e20, 0x9, 0xa, 0x80, 0x20, 0xbf, r1, r2}, {0x3, 0xc6c7, 0x5, 0x1000, 0x2, 0x100, 0x8, 0x2}, {0x7fff, 0x4b, 0x8000, 0x100000000}, 0x7, 0x6e6bbd, 0x2, 0x1, 0x3, 0x3}, {{@in6=@rand_addr="975c8b3173a33fb8f3a2480cd67cf9f1", 0x4d2, 0x6f}, 0xa, @in=@local, 0x3501, 0x4, 0x3, 0xf80, 0x7, 0x3, 0x85ff}}, 0xe8) r3 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_FIOSETOWN(r3, 0x8901, 0xfffffffffffffffd) 18:49:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}) open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x8) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x81, 0xc, 0x9, 0x8, 0x9, 0x6a1, 0x2, 0x1, 0x401}) r4 = socket(0xf, 0xa, 0x5) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) dup3(r4, r1, 0x80000) ioctl$TCXONC(r3, 0x540a, 0x1) flock(r1, 0x3) 18:49:34 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe(0x0) setuid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r0, &(0x7f0000000000), 0xb35) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a31b6e062fd15040fb28023f2cf03433ca21e0d9ed3d50fe1176d3824a79a2b41b84955d8957856aa610b6aa438d0b1d5dc5ac617b35"], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) fallocate(r2, 0x0, 0x40000, 0xfff) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) 18:49:34 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="da703a56e5783022e48d0538867cdadeae", 0x11}], 0x1}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x1, 0x7, 0x4, 0x1000, 0x0, 0x5, 0x40, 0x6, 0x401, 0x0, 0x4, 0x401, 0x4, 0x1ff, 0x101, 0x101, 0x7fffffff, 0x5, 0x2, 0xfffffffffffffb0a, 0xfffffffffffffffc, 0x20, 0x6, 0x2, 0x80000000, 0x100000001, 0x4, 0x8001, 0x0, 0x80000000, 0x2, 0x8001, 0x5, 0x100000000, 0x1, 0x2, 0x0, 0x885, 0x4, @perf_bp={&(0x7f0000000040), 0x6}, 0x0, 0x10001, 0x9, 0xf, 0xef, 0x1, 0x5}) [ 271.829301] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 271.905606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30949 sclass=netlink_route_socket pig=6569 comm=syz-executor5 [ 271.920686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30949 sclass=netlink_route_socket pig=6571 comm=syz-executor5 18:49:37 executing program 3: r0 = socket(0x80000000000000a, 0x10000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x402) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0x800}) 18:49:37 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1a5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x19, 0x4) sendto$inet(r1, &(0x7f0000000300)="83dcb433573738c94a861401a755a1b71ade570408dcc778b0489d1e3d30b267ab4ffd993a6a1d6a4e7ec5255504022581825610e13a20bc9e7f610d62bf6a10c5bd0b5db84c8a9b3e42b8b9a7b228cefc45afa2917245b2ba2e2c29d5f4ada7e51e5552c4e3511915d84199514c760792ef090000", 0x9, 0x20000000, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0xfffffffffffffe40) socket$packet(0x11, 0x3, 0x300) sendto(r1, &(0x7f00000000c0)="073e2d83bc2be0f983ae79e83dc7ba989bd82b124371a8edb4a5e2236d26e4f8d5eb96c65b19aa9673b7d0ad79fb73288f1fa9c3f502d8b38481370719d74126082f270d7bf930df405f7b3b8da1318b332567492230b885f6a598ec0f64912a917c1107f5e4f82be735b5f8e3e01dacb8a3130dcc6c60c1e3d1e25a3c623198db8f696598cf9ba417565a9b9e560ec36408b76024a667c8e790cdf00c094148433b5b1ce951e53c20650c5672dd0318b4c4ee907effc2", 0xb7, 0x1, &(0x7f0000000200)=@ethernet={0x7, @random="87ded7628899"}, 0x80) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000001c0), 0xffffffffffffff30) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1ff) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) 18:49:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(r0, 0xa, 0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x7) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x6447662a47fa4654) clone(0x10020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='dax\x00', 0x0, 0x0) io_setup(0x0, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000"], 0x1, 0x0) 18:49:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x14}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x8000, 0xd, 0x8, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x3, 0xfd4e, 0xf3, 0x8, 0x3}, @alu={0x4, 0x9, 0xd, 0x7, 0x8, 0x52}], &(0x7f0000000000)='GPL\x00'}, 0x48) 18:49:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4847, 0xfffffffffffff001}) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000080)) mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) stat(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000027c0)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000028c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x200, 0x9, &(0x7f0000002600)=[{&(0x7f0000000180)="daeb2d8b43e0542792df464c1eb538de32e45b0ea3488d7ea1008e07e672f1a55664c52dead936799b12423dc7f4e6f4a51ecec75e1f466ac7ebfe151b4a6f4b08642eee86fb9e9ad005235f2e1537ce44c60fcd2d07a5f16a323b173cb4c636f0e1b2200be685bf9e7c2c0b7048ce7980d305471752f9a91d9b37a1f27469581d4d9596547d455b3fd7f3fd3dc1bd182a5b64009d6073539338824d3e28e18c6c5b", 0xa2, 0x3}, {&(0x7f0000000240)="7f7723d8c1f78f15c1b80bd54b8da19a1c3fa16bf37942ba1be2c3a4ce2c84a77dee2c83888bf3635b66b5e28ad8cdff636519c88f10cdae9c04825a5d8fea1de8c88169598635b907ead9c0403f0181c59226480acd0f6fb8aa337560ea57a370abaf11616b3718e8694ba469d0bf45327992800a69babd6bd07a1f", 0x7c, 0x7}, {&(0x7f00000002c0)="8fbdbd0e57456b13c0ee0072b72a3d5881fbe716bb09abe9edfb56bd40a2d5cfd4f6644ca30b084b964c97f0a8906f7c1d748356f7daf3123f55e18df211cdce77d7bf9b4905c7afaf27ced1fd916cba3e0843faa18f9128ed23ae59673f352f22627e89d92b3de165380f58b17faa223312fd983c7b98356ce38c719851d354bd6732c78fdb3d84fda90d79dbc46384ff96e3db7accd0f4ec08c7250c935f7400ea7a824c4e06f799447aac5ebc145e6d6691611b93781d5cdcca", 0xbb, 0x66}, {&(0x7f0000000380)="17785b012b7e0bf5119103b45f8244c2a012c18a188caeb06fb2cfcd4c35e0bb9252a41b8105ba037c606a450df1ce03792ad9b49038da2178d6a0bbce2823237a32f350389b2df76b77a4d3eb24cc4629776fd36863b405b9fbd61150c7180982cdc69be074842377212de76e8f983f38d0974b2cea742acfeedc8d325652b63a52e8975acdd4828e8118b340697c15000e33b288e5a16ae33fce34ae24fde9187056ef48348d75446654517991ad86ed071ac4dc04", 0xb6, 0x3}, {&(0x7f0000000440)="6ae1425e4b49c63d12d4f6a3d4691009839e22a941fb486b8369acf507cfd4ccce1063ae7f13e746e5b2e5c0433451e86a4297d0e2e45a75", 0x38, 0x6}, {&(0x7f0000000480)="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", 0x1000, 0x4}, {&(0x7f0000001480)="3439b9e491b3757e05d9a303d280c33f2b2ff1b50a23c0cc64f9d7b42e2263b7e57f6fa2b4524a0dc215119d1790208d7c1388bf57b1bde3f9896624d02418df0de0c771d551bab22300e7ba84b2db4940db017269656e80d871015346fe77d4ecd37a8fb9cc2b5c546d82bd24f4d765d9852d7ad7803e6662861a0fbe6db8b02826916e4db6db05", 0x88, 0x3e49}, {&(0x7f0000001540)="e70bee18d69038a59b2a574cd2b2b3067d5ce9a9fdd0223193774c08f54e868feb5c2316f85d4b035213c7ae9e576e0dd5129121bb09e0fb4668a1ff2e0907d9db6a82a43a484b435a40299e3a0b5365a24b0ac3b56fe05ae76b75460f0f9b172957f4d2322a9cdccd9e1871c1b0948b3cff6e4b799c38d8a11ec160519cbb803607057dee3dc4c9e9a494036fd73b6d", 0x90, 0x9}, {&(0x7f0000001600)="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", 0x1000, 0x7fffffff}], 0x40000, &(0x7f0000002900)={[{@fat=@usefree='usefree'}, {@fat=@uid={'uid', 0x3d, r1}}, {@nodots='nodots'}, {@fat=@sys_immutable='sys_immutable'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}], [{@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r2}}, {@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, 'md5sum'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'trusted-securitycpusetvmnet1ppp0}'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'systemsystem++&'}}, {@subj_user={'subj_user'}}]}) 18:49:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f00000000c0)=""/47, 0x2f) socket(0x0, 0xf, 0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ffffd, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000003740)=[{0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000003540)=""/141, 0x8d}, {&(0x7f0000003600)=""/35, 0x23}, {&(0x7f0000003640)=""/220, 0xdc}], 0x7, 0x0) epoll_pwait(r0, &(0x7f0000004e00)=[{}, {}, {}, {}, {}, {}, {}], 0x302, 0x3, &(0x7f0000003840)={0x7}, 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstatfs(r2, &(0x7f0000000600)=""/210) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) exit_group(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x305}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip0\x00', 0x2}, 0x18) unshare(0x40000000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x40080000}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:49:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e61740000bb000087a9d845bd5c89b7dc8d849a59f6de00000000f3ffffff0084931b2e00000000000000000000000000edff0000d803cfd664fb4a056a717d77ca000000000018030000cc000000ac0100000000"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(0x0, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 18:49:37 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x7ff, {{0x2, 0x4e21, @loopback}}}, 0x88) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f00000004c0)=0x2, 0x8c, 0x2, 0x0, &(0x7f0000001680), 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x26, 0x7, @thr={&(0x7f0000000180)="8eb8cbf6c919ab7dfd1d0c6756e037288ccba58bc96631c5558a8fc69f8c51e722cdb2ef55e334bf50362599d7536bcbe10a121c0353561695156b8f5b6ed03d104bb725ed68faa773b17798a714b07ebff314af449669179dedc12c02c3641f535ee55a61c25264d5fdfd145cd3d1baab0cbf66000403e35450c7eed270b637f1de6b16aa8d5b1269f85fc2768575826d6264e55c8bea5251667ff6e723b67372f9ff9bf94bb7b245b447b49d64fdd169698df31d4319c316d115264a01f02cd3a072788a580b90d0ff61883ee3522b679b251c9c7e1923e027233f68624b4fe2e5", &(0x7f0000000280)="e2057c88ed0aaf9210bac841a1316aabb04381236f1b62debe6d179dd586212e9cc5861b2743709f9b6b42b4496f5976011a2e59c2cd639e91"}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000140)={0x2, 0x1, 0x5, 0x7e94, r1}) 18:49:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:37 executing program 4: unshare(0x400) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x949, 0x4) fcntl$setstatus(r0, 0x4, 0x42004) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x4, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, [""]}, 0x68}}, 0x14) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') 18:49:37 executing program 1: r0 = socket$inet6(0xa, 0x80000000003, 0x80000000000000c) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'bridge0\x00\x00\x00\x00\x80\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="09000000000000000003"]}) 18:49:37 executing program 3: [ 274.518110] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:37 executing program 3: 18:49:37 executing program 1: 18:49:37 executing program 4: 18:49:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 274.785392] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:38 executing program 4: 18:49:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) 18:49:38 executing program 3: 18:49:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:38 executing program 5: 18:49:38 executing program 0: 18:49:38 executing program 4: 18:49:38 executing program 3: 18:49:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 18:49:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000340)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x200, 0x104) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x1, 0x7}) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 275.376197] binder: 6674:6678 transaction failed 29189/-22, size 0-0 line 3012 [ 275.386421] binder: 6674:6678 transaction failed 29189/-22, size 0-0 line 3012 [ 275.386618] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.401416] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.411128] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:38 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x60) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) [ 275.489321] binder: 6683:6690 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 275.507388] binder: 6683:6690 got reply transaction with bad transaction stack, transaction 14 has target 6683:6690 18:49:38 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) sendmsg$netlink(r0, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) 18:49:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x40001) [ 275.542054] binder: 6683:6690 transaction failed 29201/-71, size 56-40 line 2935 [ 275.553581] binder_alloc: binder_alloc_mmap_handler: 6683 20003000-20005000 already mapped failed -16 [ 275.599106] binder: BINDER_SET_CONTEXT_MGR already set [ 275.609205] binder: 6683:6690 ioctl 40046207 0 returned -16 [ 275.621883] binder_alloc: 6683: binder_alloc_buf, no vma [ 275.637298] binder: 6683:6705 transaction failed 29189/-3, size 0-0 line 3135 18:49:38 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000001340)="fac56600747665569690614ba240fd8b2494c3ea56aea3279d3740fc2728aa431ef797dbcc57987116a08d54db17d9880196fadf6f90dbd049ded068e078fbc6b505e5da2743a8b6adb7418036721e1232ceca8e173d30195bf1ed8826a45bffde462a7655c98e708ee94eb706368f9babd54d23d26a01c8896167cd1eb22023bca8002fc637e2a2c4226fa4a209533c2ed4e725a98f0a7b20e81e9b7310eb94c468675ad3ecea69722d66a44dcbca65b6786ea4cba518ad477aedb28c1579f7a938d2597f5896b456fa000000", 0xcd}, {&(0x7f0000001440)="3c3b73a4dee424676f8fc0ee5e4eeefa8e2db2c5978f40c8cd27ca5f614fd72091d2347f90d86a1308f1270d6240484a655d71e3ec0d710c06737cbcc622efae22b0e1826383c9d3b0d974ed6ad6eef67f09de0aa83b25fac0609b73ba9df23d3d1e31f385cbc2c22ba5ed547346f590b28d7756389af78e00b6d97013bd39a04a8fef22f30e9b", 0xfffffe75}, {&(0x7f0000001500)="157121fb3d70116f328ed96dca20664cbc5047fba26d9de7aefa81fccdea49dd4c9b5b7eabf4b08c36b8df75c676796b47d245d39f84836775dbef4d249b0623937eb2253cd99c256e265157955e6a6a6c17989c584cabfa58a020cba77a398045ea8a9f03c8d70fab7535e8fe35c6f1a5590b1e3700e35f9cb02cc84d6e7de2de4ca4ad66c3053c1d03f4906f4d6c24c06b867af867955d8d33526de520d717f0b4d6fd00fa5a5d2dfb5d86000797b9164de205a0f3aad48ec6b07b1f9fed142bb641324b8118938ac3f2e075af42d4ad210f05c9f5548c4023b359", 0xdc}], 0x3, 0x60) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x0) readv(r0, &(0x7f0000002640)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/193, 0xc1}], 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) readv(r0, &(0x7f0000002840)=[{&(0x7f00000000c0)=""/237, 0xed}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002680)=""/210, 0xd2}, {&(0x7f0000002780)=""/137, 0x89}], 0x5) 18:49:38 executing program 4: r0 = socket(0x10, 0x100000003, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000480)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001a000102000000000000000000000000d2989b1c2c07c0ea0a72979789399c9b4d9da75ed081941587392653d91919d38d6302262e6abd8f6234c0e00f11650d7912663fe2869edad60de531c728f710cb4b076844c46d694e1a7dcc67d1a8831230c093820aad2d02c1e4f7164a7970cd3aaa96e6a30c24eb76fe9a73b2dafaf1cd4b6e12faa4d8748d7fd679c2dcadbd26161317ae491acdda56c76b1049a0ff8bd818dd4fd59c677e8c3137139f39f9d9ccebb15a0e6e8bd4479b659c579f4e65b48939a9fbfb3c8a340cedad0d1a28dc783cbd326cc55ce0e26a7f"], 0x14}}, 0x0) [ 275.645661] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, [ 275.664191] binder: 6683:6696 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 275.677974] binder: 6683:6696 got reply transaction with no transaction stack 18:49:38 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x388) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0xc840) fstat(0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x800) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x10, 0x4, 0x4}, 0x1989}}, 0x18) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="38d1d6c323c10bf45a4b538cf814825fd06a0b2e7dde91704fc6f8dd0d6ffe522f23b9e3d72a35a88e14407e5dbc4c90e1dac0b49fef502e83560719cc391b3686f41c16b41c2eca2cddd8cc3717a7605f05e701efdb3a4b19bcc1ca0707fd998f344e708aa75ba703de39640254a4bef6ad55060179fcee20d64bcb97071dd0c60ef073e78bf5680c693138292cb40a3862fdc7274f9a5e0e365fb3634ab5089f6fdb5dbd6d8fc013f881f3081c90907ab933653f", 0xb5}], 0x1}, 0x8}, {{&(0x7f0000000440)=@rc={0x1f, {0xc324, 0x9, 0x6, 0x7, 0x2, 0xf86}, 0x7}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="1f5ece1e922083adc7b7ee78575e24a5a5b1b8257a3c2f1b526df61b9875e9e793e24adf07204ec73e335df652264b36db3538154fa65774cc0fcb9da5a5a9ebadadf88ccfc75cb0b77cb736a1f39eaa18c57a23de16626b8a0d", 0x5a}], 0x1}, 0x100000000}], 0x2, 0x0) 18:49:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 275.712400] binder: release 6683:6690 transaction 14 in, still active [ 275.736818] binder: send failed reply for transaction 14 to 6683:6690 [ 275.744359] binder: 6683:6696 transaction failed 29201/-71, size 56-40 line 2920 18:49:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 275.766882] binder: undelivered TRANSACTION_ERROR: 29189 [ 275.804417] binder: undelivered TRANSACTION_ERROR: 29189 18:49:38 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x404000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000040)='selinuxfs\x00', 0x0, 0x0) socketpair(0x1b, 0xa, 0x3c, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x41) accept(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80) [ 275.856997] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:38 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0xff, 0x7, 0x1, 0x100}, 0x14) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000000c0)={0x0, 0x1bf5, 0x2000024000000401}, 0xc) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x282, 0x0) 18:49:38 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ec2000/0x3000)=nil, &(0x7f0000e9a000/0x2000)=nil, &(0x7f0000e07000/0x4000)=nil, &(0x7f0000c29000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000040)="d319a95e6e7a3f77697dca3c7c88e4c6dd6ef30e8a13d1d42fccf042d9a85de72edcb8efc65bb13254cfca66b173", 0x2e, r0}, 0x68) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x234c40, 0x0) getpeername$netlink(r2, &(0x7f0000000280), &(0x7f0000000200)=0xfffffffffffffeb5) 18:49:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 275.901794] binder: 6741:6742 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 275.920462] binder: BINDER_SET_CONTEXT_MGR already set [ 275.951607] binder: 6739:6743 ioctl 40046207 0 returned -16 [ 275.953433] binder: 6741:6742 got reply transaction with bad transaction stack, transaction 19 has target 6741:6742 [ 275.984347] binder: 6739:6750 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:39 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) r6 = geteuid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r1, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="0eafdaf41737585c04b9c68fa0d4e823140bc726e5ee21a334633838c4b184b2680daa9cd8021c42be3860bbc00822a498b12c2b79d905720ad5350c2314b6d23a7d7b6c6231b324f433c18b7254bb40239622c0f4f69c7d9a8b787bf10f4d77bb44d929daf6c3733cb5c4f9cd00f178b1635195cf0dd91a3aacd1c8a462cfd3d9b679f6dca06c1946b5fcbc13bc7c88f42818acf6512e40fb198481858195e7c2841f9e2507ee1f474cf988af276512bd1aa33878670d5d3805da84cbccc1c56c", @ANYRES32=r7, @ANYBLOB="02000700", @ANYRES32=r8, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="040002000000000008000200f0c74397908c5c246aeaf6835ae69ba264d65d13fffa95f4403e3869384c01d6c0eecff30c590f8bcda3bd", @ANYRES32=r10, @ANYBLOB="10000400000000002000030000000000"], 0x74, 0x3) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) [ 275.998079] binder: 6739:6750 got reply transaction with bad transaction stack, transaction 21 has target 6741:0 [ 276.020210] binder: 6739:6750 transaction failed 29201/-71, size 56-40 line 2935 [ 276.029645] binder: 6741:6742 transaction failed 29201/-71, size 56-40 line 2935 18:49:39 executing program 0: io_setup(0x3, &(0x7f0000000040)=0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x7ff, 0x400000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd4, r4, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe7c2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5d}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x5) r5 = eventfd2(0x20, 0x0) r6 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x102) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) r8 = accept4(0xffffffffffffff9c, &(0x7f0000000500)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000580)=0x80, 0x800) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000700)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000a80)="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") io_submit(r0, 0x5, &(0x7f0000000780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000100)="12fd6bc4e80dfb9d522e4061cae348db8789b6c826df65b67edfa26864b7a68fb7aab7f972eca3c523fdde764727cc96f238f0abb6fcec88051ea62b8f3ff2dfd1587758df8233d3f14cfe3c118a20e7c458fc4ce7fbb56b5374a6a451bc2135a25cee34116fa2b22ce9af5eff18cd3e1af7e47e064ec4c6", 0x78, 0x5f, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xd5, r3, &(0x7f0000000240)="0aa9e115916f8b4d972bd9098ac96f3f2f29702c152b044abbf10de045e9e63d6fb2e570ceaec793f545fa1c732bdfc9047e2a84001efbb3c579ab740468a304e69f70a9615959e9de8efcd5e4c6bcb0664556c667ffeda85861b170126208c5060f62cf97dfe5efb1c27667a404d202fa75572e8f00554a2f9e7bce8db101e119ff5e413d08d562f05f5b50ea934d5360f4fddc14a122d88a42ba0706518540288ccb28bee0e6e5fe9c870a288faf95e7f33cd43e2e1c9203945af74c464d43c77c160c8d398c03638b55da", 0xcc, 0x2, 0x0, 0x2, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x770169c8a6b3c99d, 0x2, r6, &(0x7f00000003c0)="4d538a358eb34ea80bdb40dc7426c897a064d5a4df93fab42572c80e2c955d8f2aa42966345b8ca700b16c677e91e2ce32b92c830839f6f6b116917b476f1fe4aafadfa73265e954eda44694cf2d3de88a2d920e5435397885c7e2f564ef8195abc9c733ad2263d619b8ceaf2d25812be0212fb13e1bd212a0e8028e1b03bdac23f2143b50ab8a801dfb402be068f6b53d4bf43d5ecd7f71e9733d49", 0x9c, 0x6, 0x0, 0x1, r7}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r8, &(0x7f00000005c0)="7f8f", 0x2, 0x9, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x8, r9, &(0x7f0000000680)="424ad18b02d885f80b16954fa059c0fbcf62ed7074f3ca90daba675fe65d751a25b5d6edac33a1b5bd3517e331db9a495e772eb582197785b9d606319213a46956d79fb1bd8a94765d69be20", 0x4c, 0x9, 0x0, 0x2, r10}]) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000a00), &(0x7f0000000a40)=0x10) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) getsockopt$sock_timeval(r11, 0x1, 0x15, 0x0, &(0x7f0000000080)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x82000, 0x0) 18:49:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'hws\x00', 0x60000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r2, &(0x7f0000000200)='environ\x00') r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r1, r0) 18:49:39 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x1, 0x0) write$selinux_load(r0, &(0x7f0000001140)={0xf97cff8c, 0x8, 'SE Linux', "4268f31e2563"}, 0x16) 18:49:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 276.092311] binder: release 6739:6750 transaction 21 out, still active [ 276.111093] binder: release 6741:6742 transaction 19 out, still active 18:49:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 276.153870] binder: release 6741:6742 transaction 19 in, still active [ 276.176510] binder: send failed reply for transaction 19, target dead [ 276.192465] binder: send failed reply for transaction 21, target dead [ 276.201244] keychord: unsupported version 65420 [ 276.223891] keychord: unsupported version 65420 [ 276.231175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 18:49:39 executing program 3: r0 = socket(0x200000000001011, 0x80000, 0x81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="1baf4d3cf510f8536d953a6079126a773fec", 0x12}], 0x1}, 0xfff}], 0x1, 0x0) [ 276.261304] binder: 6783:6788 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 276.282591] binder: 6783:6788 got reply transaction with bad transaction stack, transaction 24 has target 6783:6788 [ 276.298680] binder: 6783:6788 transaction failed 29201/-71, size 56-40 line 2935 18:49:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 276.309938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 276.327831] binder: release 6783:6788 transaction 24 out, still active 18:49:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x48, 0x0, &(0x7f0000000480)="f27aec438116cefc2a394072b6ad8809e53ac6553db7f225a4e47722a00ba8846454ad779316094e4bee8cab76761555d3676404fb3c728f045f7d9ecc9b2662539500d7df7d1802"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:39 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000003, 0x80003, 0x80000000002) setsockopt$inet_int(r1, 0x0, 0x4, 0x0, 0x0) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) timerfd_create(0x5, 0x80000) 18:49:39 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 18:49:39 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) [ 276.378652] binder: release 6783:6788 transaction 24 in, still active [ 276.389670] binder: send failed reply for transaction 24, target dead [ 276.473963] binder: 6810:6817 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 276.491612] binder: 6810:6817 got reply transaction with bad transaction stack, transaction 27 has target 6810:6817 [ 276.522918] binder: 6810:6817 transaction failed 29201/-71, size 56-40 line 2935 [ 276.548295] binder: release 6810:6817 transaction 27 out, still active [ 276.567343] binder: release 6810:6817 transaction 27 in, still active [ 276.574360] binder: send failed reply for transaction 27, target dead 18:49:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2001000004239ca4d0014000000880bb400002478ac141d0de0000001d06c6e68d49e11095bfef2776c0001000004010778504ffa50f6f434755965e5529968755d6c21016b1a5606000000000000002ab078de864cc2c3ee55c6ea5e1f9285d3963cb9"], 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x1, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x8, 0x2, 0x5]}, 0x5c) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000300)={'team0\x00', 0x43}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000480)=0x1, 0x4) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4) clone(0x70024100, &(0x7f00000001c0), 0x0, 0x0, 0x0) clock_nanosleep(0x0, 0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x806, 0x0) ioctl(r3, 0xc1, &(0x7f00000004c0)="da7d4b86c2818b75c47f9771d213aedc1cf42145619d6d4f3d64117bf61b5127ad7af6959693156c7711fe75eabf00799280241f1e5aad27d1f3ba517f4aadabeadf5f1953") io_setup(0x4, &(0x7f0000000080)=0x0) io_getevents(r4, 0x8, 0x34e, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x1c9c380}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c004) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000001c0), &(0x7f0000000340)=0x8) 18:49:39 executing program 4: r0 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/unix\x00') readv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/135, 0x87}], 0x1) socket$unix(0x1, 0x2, 0x0) 18:49:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:39 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 18:49:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:39 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='user.syz\x00') 18:49:39 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x6) 18:49:39 executing program 4: socketpair$unix(0x1, 0x803, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) 18:49:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 276.994663] binder: 6836:6844 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 277.004163] binder: 6836:6844 got reply transaction with bad transaction stack, transaction 30 has target 6836:0 [ 277.016306] binder: 6836:6844 transaction failed 29201/-71, size 56-40 line 2935 18:49:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 277.053532] binder: release 6836:6844 transaction 30 out, still active [ 277.074434] binder: send failed reply for transaction 30, target dead 18:49:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x5, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x400000, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xbdd) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000440)) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) write$UHID_INPUT2(r2, &(0x7f00000001c0)={0xc, 0xc0, "5096e20c92d6f795a8e39e5a27f822ec968568bc498078a369c4ffdd45e26f9903aacb42c242277a53502c14be1d4322db7135498d68371997c59d0caf729575150953aa8fe677775a14ee0fd3c038c0c4d98f2cf91764b309ff6d4986686596b6b03aa4459814f948d8bfc2812c27b7c7780c5536746b33a8924437bbdc4ed4c609b81491954abd5916c9f57ad2a184416e0927d45d126eeab95fbb9759956a93ac06925c2822b7e2eacff38468fc5ed808e4ce1456deef3b1e6b2247be3bc0"}, 0xc6) r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001800)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000001900)=0xe8) r5 = getegid() sendmsg$netlink(r0, &(0x7f0000001980)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc, &(0x7f00000017c0)=[{&(0x7f0000000500)={0x1050, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="d2f7d93dccf8ec77db1d7656881b8c78a9237fcc4e92bb7644d0521e8c0d805fc43c226a355a5e0f7ad7b13d1b425171adc5d0b998b1b871e584b8", @typed={0x1004, 0x73, @binary="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"}]}, 0x1050}, {&(0x7f0000001580)={0x224, 0x2a, 0x100, 0x70bd27, 0x25dfdbff, "", [@nested={0x1ac, 0x82, [@typed={0x4, 0x26, @binary}, @generic="d2a8a65e3936d8b10623150096c23ae722f0", @typed={0x8, 0x79, @u32=0xbac}, @generic="7ca97b2c4d96c775cba0503aa247d6dbd78595abb8a123a84b89a959167ce93c3f92e1227768201cde793f31f4d5d10f7d523ec7ee3afb192a38ffe8e051c7e7f55319b9156ae4735ef083788ae9ae069fe30ab66fd110904cc177ca6f3eb9", @typed={0xc, 0x55, @u64=0x200}, @typed={0x8, 0x35, @u32=0x200}, @typed={0xc, 0xd, @u64=0x6}, @generic="733049aa4753da5f92103ba8bca9de9eed438ae3dc79f863c98c8f91a40f2b45d00fa2a54f684a11150b06d9bf4afaab50b6b2443de57d90b4884f023fbe7bb662b2e03de0913b4720350b715f5ef8c6b1003f289b5eed8367b5539e3d467c1bb1c1faf2e0017649bf087eb560c582d37fa6f878716912f0caf13ef8b3af3e9d29f0b14fdf654b6cc6412f71982b0d6641fc", @generic="4cfc5984ec1893a1598a7095c23d63e2b4bc3f642733a7d3cfd1110c35725172b56cc7f748a34be23c8a1cfcc5594008e012619e2dec9574aec1cfe6688da2b058d451b20587cf5475529bf23f387edbf8e1c1242578df599003d0f69dbf8edc79ee82710a065af147d01cc6dd81d545193207e56f84"]}, @generic="0b8b01b4bdef8e7b5517ad701f8dd5f45b8c7ab877a3575b52440bd5ba2b2110a44d0394ac7a2fb2c32e1e63619519f37bcdceda13f2a01ebee2e1bc1cb1677848fe3fffb8333aa2f2f1e87a61330ec8bfd7f85e2df027d40b4b81e18a8b01fa24adac67debd"]}, 0x224}], 0x2, &(0x7f0000001940)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x4000}, 0x10) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f00000002c0)=""/239, &(0x7f0000000100)=0xef) ioctl$TIOCCBRK(r1, 0x5428) socket$inet6(0xa, 0x3, 0xad) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x228200, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r2, 0x0, 0xa, &(0x7f0000000180)='/dev/full\x00'}, 0x30) getpgid(r7) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000480)) 18:49:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 277.142794] binder: 6860:6864 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 277.155156] binder: 6860:6864 got reply transaction with no transaction stack [ 277.175282] binder: 6860:6864 transaction failed 29201/-71, size 56-40 line 2920 18:49:40 executing program 3: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) 18:49:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xa, 0x86, 0xec3, 0x2, 0x2}, 0x2c) r1 = dup3(r0, r0, 0x80000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x1) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000080)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0x4) ioctl$RTC_PIE_ON(r1, 0x7005) socket(0x4000000000000010, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)) getegid() r5 = socket$inet6(0xa, 0x6, 0x9df5) prctl$PR_SET_PTRACER(0x59616d61, r2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffd}}, 0xe8) socket$inet6(0xa, 0x805, 0x556) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000200)={0x44d01b55, 0xa, 0xa5, 0x8, 0xffff, 0x1ff}) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) 18:49:40 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 18:49:40 executing program 4: r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000040)) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:49:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x9, 0x2}) fcntl$setlease(r1, 0x400, 0x1) fcntl$getown(r0, 0x9) fcntl$setown(r1, 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x3, 0x4) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) epoll_create1(0x80000) perf_event_open(0x0, 0x0, 0x0, r3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ifb0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000001c0)=r3) unshare(0x40000000) tee(r3, r3, 0x7, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x141000, 0x0) poll(&(0x7f00000003c0)=[{}], 0x1, 0x0) 18:49:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 277.956242] binder: 6891:6898 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 277.978823] binder: 6891:6898 got reply transaction with no transaction stack [ 277.990937] binder: 6891:6898 transaction failed 29201/-71, size 56-40 line 2920 18:49:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/59, 0x3b}], 0x1}}], 0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600706a5ce1a2ee467d3bca22f507643a066104010000000000000200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000800f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800002792588d91ab865e8a42a4490000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b"], 0xc9) readv(r0, &(0x7f0000000040)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1) 18:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) dup2(0xffffffffffffffff, r0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) readlink(0x0, &(0x7f0000000300)=""/119, 0x77) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) munlockall() arch_prctl$ARCH_SET_GS(0x1001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) sendfile(r1, r2, 0x0, 0x80000001) 18:49:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x101, 0x5, 0x4, 0x3, 0x3, 0x3, 0x7, 0x1a5, 0x40, 0x23f, 0x8, 0x9, 0x38, 0x1, 0x9, 0x8001, 0x4}, [{0x0, 0x0, 0x8001, 0x7fffffff, 0x1, 0x7, 0x9, 0x9}, {0x4, 0x0, 0x0, 0x7, 0x74d7, 0x3, 0x8, 0x8e11}], "3e6fe2ce8aa94fbd2f052bd184affe39ed636b9b56c889c2c08ed2202182d5143676732cdf53956245d3"}, 0xda) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x4, 0x9, 0x923, 0x0, 0x9848, 0x100000001, 0x5, 0x800}, &(0x7f0000000400)={0x7, 0x81, 0x4, 0x1, 0x9, 0x5, 0x81, 0xfffffffffffffffe}, &(0x7f0000000440)={0x800, 0x8, 0x8, 0x6, 0x6, 0x9, 0x8001, 0x2}, &(0x7f00000004c0)={r1, r2+10000000}, &(0x7f0000000540)={&(0x7f0000000500)={0x1}, 0x8}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000003c0)=0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') getpeername$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) preadv(r4, &(0x7f00000017c0), 0x10000000000001f7, 0x0) [ 278.148212] binder: 6920:6924 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 278.188543] binder: 6920:6924 got reply transaction with no transaction stack 18:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 278.240853] binder: 6920:6924 transaction failed 29201/-71, size 56-40 line 2920 18:49:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 278.344512] binder: 6939:6942 transaction failed 29189/-22, size 0-0 line 3012 18:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 278.473839] binder: 6945:6949 transaction failed 29189/-22, size 0-0 line 3012 [ 278.498096] EXT4-fs (sda1): re-mounted. Opts: commit=0x0000000000000000, 18:49:41 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) 18:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:41 executing program 3: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xc0a, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20040, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000400)={@empty, 0x55, r3}) timer_create(0x2, &(0x7f0000000780)={0x0, 0x1000000000001c, 0x2, @tid=r2}, &(0x7f00000002c0)=0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80400001}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="000125bd7000ffdbdf250d0000004c0009000800020005000000080002008000000008000100000400000800010000000000080001000700000008000100ef3c0000080002000600000008000100010000000800010063000000"], 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x800) getpriority(0x2, r2) clock_gettime(0x5, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000340)={{}, {r6, r7+30000000}}, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='ipddp0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0xb, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYRES16=r5], 0x0) [ 278.780173] binder: 6956:6959 transaction failed 29189/-22, size 0-0 line 3012 18:49:41 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={[{@commit={'commit'}}]}) [ 279.000952] binder_alloc: 6978: binder_alloc_buf, no vma [ 279.006513] binder: 6978:6980 transaction failed 29189/-3, size 0-0 line 3135 18:49:42 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x404008, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x4, 0x2, 0x80000000, 0x3, 0x800, 0x100000001, 0x6, 0x5987}, &(0x7f0000000080)={0x7fffffff, 0x80, 0x63, 0x1ff, 0x1, 0x100000001, 0x5, 0x6}, &(0x7f00000000c0)={0xfffffffffffffff9, 0x3, 0x0, 0x0, 0x8001, 0x1, 0x7fff, 0x7}, &(0x7f0000000140)) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)) sendmmsg(r1, &(0x7f00000092c0), 0x170, 0x0) 18:49:42 executing program 3: r0 = eventfd2(0x22, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='memory.events\x00', 0x0, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000280)=r2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)=@ethtool_coalesce={0xf, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0x1a, 0x23d, 0x9, 0xf8e5, 0x3, 0x20, 0x0, 0x400, 0x0, 0x3201, 0x7, 0xed, 0x0, 0x8, 0x0, 0x200000000}}) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='ne\xd3;0\xc6\x0ex\x02\ator\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req={0x2, 0x9, 0x1ff}, 0x10) flistxattr(r0, &(0x7f0000000400)=""/117, 0x75) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000200) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x20b) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open$cgroup(&(0x7f0000000480)={0x5, 0x70, 0x4, 0x3, 0xfff, 0x3ff, 0x0, 0x20, 0x200, 0x2, 0x4, 0x6, 0xe0, 0x71, 0x2, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x5, 0x9, 0x1, 0x1, 0x101, 0x9, 0x2, 0x1, 0x1, 0xffffffff, 0x8, 0x0, 0x401, 0x7fffffff, 0x7fff, 0x4, 0xfff, 0x5, 0x0, 0x101, 0x6, @perf_config_ext={0x2, 0x8}, 0x10434, 0x8, 0x57aa, 0x4, 0x9, 0xafe7, 0x3}, r3, 0x5, r4, 0x8) fstat(r5, &(0x7f0000000540)) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3f797656350e5994, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000240)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') 18:49:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:42 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000800)=""/4096, 0x1000}], 0x2}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/135, 0x74f) r2 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x3, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xd, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000140)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r3, 0x107, 0xd, &(0x7f00000001c0)=""/190, &(0x7f0000000280)=0xbe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r4) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x101a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) readv(r2, &(0x7f0000000040), 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="0423cba283204bd9e534391933945ec1ebe3bfb1c597ce218fe737012e1bd311f33db2f0d96c19d22f8d1cefb434ee942135fcfac8325ec097aebfbbfae2ef890ca8940ebfc246cc23eee6518ae07a0d0680ca55c2c7541608b447c25774b58197aabbf171e46ff07128eb168da8", 0x6e, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000680)=""/91, 0x5b, 0x3fba8a0c83e51971, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f00000004c0)) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x8, 0x1}, 0x2c) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) r6 = getpid() write$cgroup_pid(r4, &(0x7f0000000340)=r6, 0x12) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000002200)={0x4, {{0xa, 0x4e20, 0x9, @loopback, 0x8}}}, 0x88) sched_setscheduler(r6, 0x5, &(0x7f0000000200)) 18:49:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)={[{@commit={'commit'}}]}) 18:49:42 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:49:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 279.369934] binder_alloc: 6995: binder_alloc_buf, no vma [ 279.377158] binder: 6995:7000 transaction failed 29189/-3, size 0-0 line 3135 18:49:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 279.516283] binder_alloc: 7014: binder_alloc_buf, no vma [ 279.537026] binder: 7014:7018 transaction failed 29189/-3, size 0-0 line 3135 [ 279.568285] binder: 7014:7023 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 279.579624] binder: 7014:7023 got reply transaction with no transaction stack [ 279.592859] binder: 7014:7023 transaction failed 29201/-71, size 56-40 line 2920 18:49:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vga_arbiter\x00', 0x1, 0x0) getgroups(0x4, &(0x7f0000000780)=[r1, r2, r3, r4]) sendto$inet(r0, 0x0, 0x0, 0x200087fc, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004d40)=[{0x0, 0x27b}, {0x0}, {0x0}, {0x0}, {&(0x7f0000004b40)=""/81, 0x51}], 0x5, 0x0, 0x10c}}], 0x6e, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180), 0x144, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000000180)=""/2, 0x2}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/88, 0x58}], 0x6, &(0x7f0000000440)=""/134, 0x86}, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x114}}], 0x789, 0x2, 0x0) 18:49:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 279.616590] EXT4-fs (sda1): re-mounted. Opts: [ 279.626353] binder: undelivered TRANSACTION_ERROR: 29189 18:49:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 279.714998] binder: 7031:7033 transaction failed 29189/-22, size 0-0 line 3012 18:49:42 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 279.812975] binder: 7036:7039 transaction failed 29189/-22, size 0-0 line 3012 [ 279.845940] EXT4-fs (sda1): re-mounted. Opts: [ 279.923361] binder: 7045:7046 transaction failed 29189/-22, size 0-0 line 3012 18:49:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:43 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 18:49:43 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000180000006c0021000000000095000000000000007506b53570e3bf03a86af082930f032e50d71865abbc7c853e2e78a88a2bcffdcb66c207cb2350175e5049a3ddbe0532048be48256b2c22e573a66217f868f133416ea01c575a5ab5298a42ce3050c9c95ac01fde822c0de22569a"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="bb4340845b058b5075ef783ffc93", 0x0}, 0x28) 18:49:43 executing program 3: r0 = socket(0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @mcast1, 0x2}, 0x1c) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x3, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000000)=[{0x5}]}) 18:49:43 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000000)=""/148, 0x94}], 0x1, 0x0) pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4800) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/user\x00', 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = eventfd(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) r3 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000480)={'syz_tun\x00', {0x2, 0x0, @local}}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000400)='trusted.overlay.opaque\x00', &(0x7f0000000440)='y\x00', 0x2, 0x2) ioctl$KDDISABIO(r4, 0x4b37) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="d7ce2e9f02011c4535f347d5b18719cfa1ce7f43498ec48e8ace3aa0113a672191653d716934b4be24f57e643b0eac48dee5e56d03396ae2a140c9ecf05ef0091b2797d007d163ad47f9a9c6d52d52baf72e4191b66025ae064d3cfd78a6a5c03c6a339b70c4497483db73732c3cc853a244e3a1f13fd1ae3299a0f7dd19edfc8a0cdb3ebd91c01f6bcd85a5340c0e69e3ca28b6276a4ae7609ef51f"], 0x9c) fallocate(r4, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@empty, 0x71, r5}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000580)={0x9, 0xffff, 0x8}, 0x36) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f00000002c0)={'dummy0\x00', 0xed4}) setsockopt(r6, 0xfffffffffffffffb, 0x0, &(0x7f0000000180)="a47caa8ad187e7b1153ced30975eb8a69a061ecc42a5eb305a0ff047a4d9007c5a2a089b789b6a3355f74128", 0x2c) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[]}}, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 18:49:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 280.494428] EXT4-fs (sda1): re-mounted. Opts: 18:49:43 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x40000, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r2) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 18:49:43 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0xa400, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='adfs\x00', 0x20000, &(0x7f00000001c0)='lo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:43 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4000) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) socketpair(0x3, 0x0, 0x7, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3, 0x0, 0xff, 0x4, 0x29, 0x6}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) write$P9_RXATTRCREATE(r1, &(0x7f0000000440)={0x7, 0x21, 0x1}, 0x7) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, 0x0) add_key(&(0x7f0000000340)='trusted\x00', 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(r1, &(0x7f0000000240)='./file1\x00', 0x800, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') utimes(0x0, &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}) openat$cgroup_int(r3, &(0x7f0000000680)='cgroup.max.descendants\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x0, 0x0) [ 280.680918] EXT4-fs (sda1): re-mounted. Opts: 18:49:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x2000ffe, 0x0) r2 = accept4(r0, 0x0, &(0x7f00000000c0), 0x800) getsockopt$inet_mreqn(r2, 0x0, 0x22, &(0x7f0000000040)={@loopback, @broadcast, 0x0}, &(0x7f0000000080)=0xfffffffffffffec8) bind(r1, &(0x7f0000000180)=@ll={0x11, 0x1c, r3, 0x1, 0x2, 0x6, @local}, 0x80) ioctl$KDENABIO(r2, 0x4b36) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:43 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:44 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:49:44 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x401) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="c5"], 0x1) fcntl$setlease(r1, 0x400, 0x1) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f00000000c0)={0x7, 0x100000001, 0x5d, 0x9, 0x3, 0x3, 0x6, 0x4, 0x0, 0xff, 0xfffffffffffffffb, 0x7}) r5 = dup2(r2, r0) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x31) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000180)) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r6, 0x200001a0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x12f}]) 18:49:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x41000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:44 executing program 5: socketpair$unix(0x1, 0x29, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000002c0)=""/213) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8060}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 18:49:44 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000000fc0)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x29, 0x4, "fd23"}], 0x18}}], 0x1, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x2020048, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xda4f}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x7fff}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@measure='measure'}, {@smackfsdef={'smackfsdef', 0x3d, 'selinuxvboxnet1'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x8, 0x1, 0x8000}, 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 18:49:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:44 executing program 3: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 281.158969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 18:49:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1fe508123f3188a070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'caif0\x00', r2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x48000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x1) sendmsg$nl_route(r1, &(0x7f000000a000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000130001000000000000000000000000007bcb0101778490898f19885bb538d6a05799dc62060f788af8cc5d62736ec748c2de2d791bf13cbb985de26c375d0b6ffee06d31316d21ac044804011878bd9f803cd4e6cfddf92927cecb59c99b9fe4198e1124c82e91a0c6f6cb095a38cd13244da4c92b136c7f93eee6705302b851086f913f3d355d173a769cb25a8cebea59e8d659e8215c8bfb7bf5351af8f6cf5b1c9d008db4338f15912243ee23b847af494cbd940d54af3ac12f1bb28faf482752a3e8a0d937dc77e949741089a61a402b461425f7f168b82dae7e98a7a5e25052e60dc6ab04ae178dd352e5", @ANYRES32=r3, @ANYBLOB="0000000000017b000400140004001600"], 0x28}}, 0x0) [ 281.207854] EXT4-fs (sda1): re-mounted. Opts: 18:49:44 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x1ff, 0x5) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RSTAT(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5b0000007d0100000054000400ff00000040010000000000040000008274000000000000070073656c696e7578012d76626f786e657431766d6e6574302c02005b277d57cb3492ce20ddf8231596178cf47bccef187ec701a01069bcd5109a1cd21da5ca27d6c90f01c8f7de8aabaca953c66bc63ebd9e948dd9441a44bd29c9831a16aaf886eb4e228a44cee7fc62f60ec4fb421b057a662061d85651212f990772cedd8562f6db6fa91e74d8d9546a81317602a1cf"], 0x5b) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) fstat(r0, &(0x7f0000000000)) getuid() shutdown(r1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) [ 281.229947] binder_alloc: 7152: binder_alloc_buf, no vma [ 281.243889] binder: 7152:7158 transaction failed 29189/-3, size 0-0 line 3135 18:49:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 281.302373] EXT4-fs (sda1): re-mounted. Opts: 18:49:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000080)=0xc477, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utime(0xfffffffffffffffe, &(0x7f0000000180)={0x1000, 0x81}) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2000fff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200000000000, 0x0, 0x0, 0x40030, 0x0) [ 281.402593] binder_alloc: 7175: binder_alloc_buf, no vma [ 281.421625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 281.435048] binder: 7175:7178 transaction failed 29189/-3, size 0-0 line 3135 [ 281.463014] binder: 7175:7183 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 281.495046] binder: 7175:7183 got reply transaction with no transaction stack [ 281.506086] binder: 7175:7183 transaction failed 29201/-71, size 56-40 line 2920 [ 281.520648] binder: undelivered TRANSACTION_ERROR: 29189 18:49:44 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000100)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4={[], [], @empty}, 0x4e22, 0x4cf2, 0x4e24, 0x8, 0xa, 0x20, 0x80, 0x3a, r1, r2}, {0x729d, 0x1, 0x100, 0x96, 0x8, 0x5, 0x2, 0x100000000}, {0xfffffffffffffff8, 0x8000, 0x73, 0x8}, 0x8, 0x6e6bb3, 0x1, 0x0, 0x3, 0x3}, {{@in=@remote, 0x4d5, 0x3f}, 0x2, @in=@loopback, 0x3503, 0x3, 0x0, 0x0, 0x6f0, 0x2, 0x5}}, 0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000500)=""/152) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x2, 0x0) dup3(r3, r3, 0x80000) ioctl$TCSETS(r0, 0x5402, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x7f, 0x8, 0x2, 0xffffffff, 0x0, 0x8, 0x5, 0xe, 0x82c18dd600000, 0x5, 0x3ff, 0x6, 0x3, 0x100000001, 0x1ff, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x15a, 0x18000, 0xfffffffffffffffe, 0x6, 0x831, 0x3c2, 0x0, 0x9, 0x8248, 0x6, 0x0, 0x5, 0x8, 0x8, 0xfb, 0x0, 0x3f, 0x2, @perf_config_ext={0xffffffff, 0x3}, 0x4231, 0x3, 0x5, 0xf, 0x5cb037f2, 0xfff, 0x4}, 0x0, 0x2, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/softnet_stat\x00') preadv(r4, &(0x7f00000017c0), 0x2cc, 0x0) 18:49:44 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1b) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) statx(r1, &(0x7f0000000080)='./file0\x00', 0x7800, 0x400, &(0x7f00000001c0)) write(r0, 0x0, 0x0) 18:49:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="8ab41dad13a1b266ce416abfa31807ff416610974c447de3e497f80048991288f13dca29ae83935061d62e79801b0b729be361a869998862d2c4b2e0627263895390f7c1842e3772ff1540702d50611f057e13d9f5", 0x55, 0xfffffffffffffff9) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000280)=0x6) keyctl$get_keyring_id(0x0, r3, 0xffff) ptrace$cont(0x38, r2, 0x21fc, 0x40000000800000) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:44 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000738000510000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x3c, &(0x7f0000000040)={@ipv4={[], [], @multicast2}}, 0x20) 18:49:44 executing program 5: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18:49:44 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000000)='--bdev\x00'}, 0x30) getpgid(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x821, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x820}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 281.872394] binder_alloc: 7205: binder_alloc_buf, no vma [ 281.880006] binder: 7205:7209 transaction failed 29189/-3, size 0-0 line 3135 [ 281.911370] EXT4-fs (sda1): re-mounted. Opts: [ 281.930149] binder: 7205:7218 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 281.945614] binder: 7205:7218 got reply transaction with no transaction stack [ 281.957953] binder: 7205:7218 transaction failed 29201/-71, size 56-40 line 2920 18:49:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/232, &(0x7f0000000080)=0xe8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) fallocate(r2, 0x2, 0x0, 0x10000101) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x2, 0x4) getsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$RTC_WIE_ON(r2, 0x700f) 18:49:44 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) sendto(r0, &(0x7f00000001c0)="3040fb2656793332edb39661d09e3f51e0dec7525ab4ed26d1b62feb5ba70d42f69fd38a902934661a76b1353772272e8c479f02ebf64688b46e14ec4451d6e82e5f3b307edccc0b5e19ffebfdb8692bc66140c250be2a358b74d073a194e07ebe3fc0fe70562ba9e839a11ffd7c25c1747849058aeadd7453614a163e874145575f8e3037836916d4ae22922e59b12e9b2bfcfcb8cb1863739e6d7509f75bc4925ea9f1db57bb31e6ca810cd512233835589df40570d9d9af7adb1cba8a6e960dac5f42cd45157f200b4ddb28597aa3364d942cafb6102d9d064a83cb3c9df2827acad70d4fe085dd1b70e3f607890219ab7e14ad2052b642aacfc1a8ba2ec340a0576e9945038f25dc323a33e20d92bacd9b2eb1366966640d3dad86af3fb79c675298283cba8822a040141ae07a3ca4c22f079a4cf0f191731df54ea3266d96d802053d84074e097d7ac252b2b9361ef428dac3a5bcabf82616d8285e641ad8acdb49323010fc59152a5fb944000a4bcb09f239ac8ed787aa017319fbb0433a236e34e3948d8a9e12372718be35b76a3a2d75dc7869c6e02da6e8eb0fb7ff90191554a14e72eb96dade7a2b8b45270ee96d7a93d1e8b82d793d01f516d062ed688bebf6c2de1647e4c682555f8c871db5284b357262adbbcad3804caa32c6002febf0c472f79068392803bb418671d6d33d1dbd0db394fcb3e6e0c1d88f01ab880f31befb068b9d06bd6b3761bde3f0467e6ffa6326b8408c24f1a01da05b16a636441d6fbf7580cd64ed724d8a652284fe7046bcd3bc5d2b7323d69610709a593bc2200f07b39d2a520a0be6c5f36dbbfd2e7fdcb8c34f95080c64054ae9771a1b7e53f6d7aa5e8f88e67768af45f99ffe35fd2056e2b389008607c787f7aa1f559a1b6e12a94d39df38e640293c8bd9255a2b2a1d41f9b3ff7c78eea66417a66bab52a883c8e0df18a4a0543a7d61d1db6613cc84fe60674d800f0b0a0466cfe8ded1bf7bd1f1cf983b7d1bd844db366d16d6d437317892fa040a96a4e4e7abe55fce9e89365bde5d01d9fed9cef1fc2ca3bbdcd56a2ed6af32fb170619cf7fc51974793e9a5f7dc0bbf2e510c55a497c15a197d4b605792377f6a5f7ca8f4f884bb50fe247c38e684d4b1ac1d6a8aad2e5fb2e9c5d7bca502f2a103f0ddfec5c0cc02641b1d8ce0e692a5f98291b196ee8e372c6495e6decfbc539aa0594c5299773826bde9f81d03bee729704b71248ccb5bd5d3cb79b3c0f96b61f4bac4b372672b7a87982f49d1b6681032bbada26f0e60b5fa31c6b2e2edc0cadc0148dde63df327826bf7475512f3224c55840802e500f537ceef6b84003056f122a3d1a0d9723c8de138ac607c40f1655cf70c1228a6097027bf342b1362e5e12684a6b51ab635fd544afb912c2404e0f1f1421c1d838656a6302c6481091fe69e80750cdf22ec86c440c50dabd413f14033dfa58ea5d326c139c7fb6d1c247fd2de63573d77fae1c9accfb78d6822d1580b89abebe17bc9d11960eb4f87ee0c106939a9657f2be0596a3ce0c70b18116e11c0a191973bb3e65beaed041ba6043b12b4a2ce4e9fe63501bd8235c821c9a4b123423fa9a3aac6ac47370598ecdaeaaed57663c7532dd091b89af5c201b41d0aabb7ee3467406a4f51773b176f19e85f59c47ffedbffcce6e763a15a1001b7b12bb5d3f97f6c7bcc780d957791c9cdf74bfd42528b9b20b77dc2fa8b24a68b22972182eed057c681410cdce4c07c075250adc909c09e53b5a2b28f2606be9eb8da4967bc8a55988432c320168a465b68abf736a5b00454a7ba6679c4b0e5f3bc36d649a772c28d3928c60e6c746a5e3ec1ccb18652e243bacd7fdd1aa0722349bfd0c470fb126ae95d0060e7b6614c16518695c474e187c6f97e7b2d14dd2be323756722d5decdb46d6c92376ca5195a6367f93580d1abc2579a0b55280bb8d2e40ebc3b99f03dc7393cec9534dacead45eea33", 0x585, 0x0, 0x0, 0x0) 18:49:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) 18:49:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 282.011562] binder: undelivered TRANSACTION_ERROR: 29189 18:49:45 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f00000002c0)=0x3ff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x80) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x4000000000003e, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000003c0)={{0x0, 0x0, 0xfff, 0x1, 0x1}, 0x8, 0xe049}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x3, 0x1, 0x4, 0x1}, {0x7, 0x0, 0xdfbd, 0xfffffffffffffc01}, {0x6, 0xb5, 0x108043f7, 0x8}, {0x8, 0xae3, 0xb99, 0x80000001}, {0x8000000000, 0x8001, 0x1f, 0xffffffffffffffff}, {0x3f, 0x8da, 0xfff, 0x20}, {0x500000, 0x0, 0xffff, 0x7fff}]}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000a00)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000280)={'NETMAP\x00'}, &(0x7f0000000480)=0x1e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/ppp\x00', 0x220000, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000004c0)=""/246) ioctl$EVIOCGREP(r5, 0x4010744d, &(0x7f00000000c0)=""/174) fcntl$setflags(r0, 0x2, 0x1) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@local, @empty, @mcast2, 0x0, 0x78}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, r5, 0x0, 0x9, &(0x7f0000000840)='/dev/ppp\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)={0x0, 0x0}) sched_setattr(r6, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfff7}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000600)={0x535, {{0xa, 0x4e22, 0x7e, @dev={0xfe, 0x80, [], 0x1b}, 0x4}}, {{0xa, 0x4e23, 0x4, @local, 0x7}}}, 0x108) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x8e15, 0x8ae}]}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x8010242, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f00000004c0)) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_setup(0x8b, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) renameat2(r3, &(0x7f0000000780)='./file0\x00', r3, &(0x7f0000000800)='./file0\x00', 0x7) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 18:49:45 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet6_int(r2, 0x29, 0x8, 0x0, &(0x7f00000000c0)) 18:49:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 282.102849] binder_alloc: 7232: binder_alloc_buf, no vma [ 282.122570] binder: 7232:7238 transaction failed 29189/-3, size 0-0 line 3135 18:49:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80003, 0x400000001) arch_prctl$ARCH_GET_CPUID(0x1011) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 282.242761] EXT4-fs (sda1): re-mounted. Opts: [ 282.254295] binder_alloc: 7249: binder_alloc_buf, no vma [ 282.277410] binder: 7249:7255 transaction failed 29189/-3, size 0-0 line 3135 [ 282.303432] binder: 7249:7259 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 282.326057] EXT4-fs (sda1): re-mounted. Opts: [ 282.338937] binder: 7249:7259 got reply transaction with no transaction stack [ 282.367703] binder: 7249:7259 transaction failed 29201/-71, size 56-40 line 2920 [ 282.412250] binder: undelivered TRANSACTION_ERROR: 29189 18:49:45 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x2000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) socket(0x1, 0x80000, 0x3) 18:49:45 executing program 4: socketpair$unix(0x1, 0x1000000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) io_setup(0x7fff, &(0x7f0000000000)=0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x42, 0xd5) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0x8000, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000009c0)={@ipv4={[], [], @loopback}, @mcast2, @dev={0xfe, 0x80, [], 0x11}, 0x7fffffff, 0x9, 0x6, 0x100, 0x9, 0x810000, r7}) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x400000, 0x0) r9 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000700)='/dev/keychord\x00', 0x8000, 0x0) io_submit(r3, 0x8, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x1ff, r0, &(0x7f0000000040), 0x0, 0xd428, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x100000, r0, &(0x7f0000000200)="1e7adc901aca6c6c3906c3f38f160cf396d516c35c995678ccee2190b06167a16ba81f3d82e3414a3a7eef70f83c75eb8d9e719435b8aabe177edc1f00516609dc1879116ab638336b6edb32adf30b9179a50f628a5f54666eee14fdfb8f19a14d925b29", 0x64, 0x7, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000280), 0x0, 0x9, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000300), 0x0, 0x96e7, 0x0, 0x1, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1f, r0, &(0x7f00000003c0)="37d0f281b1d628d70b00e710f8feadf577b2f5d373efa53b8d95cb4c2faf15799097b88184b41ad34b0771cf0d858948607c0aa7eb22aabd2250a4ea0d5339a62bd012520ecca517b1f75e0042bb3b353b5a7a0d5669ccf4400c54faea3472c4dad49ebc9c879106f37c56b86ae8c42e19ab7d2b06", 0x75, 0x39dc, 0x0, 0x1, r6}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x81, r0, &(0x7f00000004c0)="47cd223b2f651104421221aea45c88f815b5e20ec47bfd3580591b31147272c2dd701a9c3824fa732148a00c45c92fde3a89c62999af0adfcef3cd4222ba0b1ddcaf7ac67757060ae824b2c21d050983e4cd6e92451e42472cb54c011622c3833015bfdaf352c971b1bf3294a28b7361959b46cf9cb2c01b7e0aed687e6d4d0d97567c11db6a3a15ab91e6c24635a99ded79e43a7787b46afa57674d614b73904aa60b4baf4c55e9a1e5080fdb", 0xad, 0x81, 0x0, 0x0, r8}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xf, 0x7, r1, &(0x7f0000000600)="f813ce4b9e99bbd7e4c55548e417ea640c0163d66c98da99ab6c5f31c768ce8f8f91135c701adad756989402f6f5a4e6612433ba88c8bde256d48f9f65f28b39ba0b851156a81bfdc71e6df3af4de84d7c9fadab288bea94d724d4fc2232d6898a4c21f6033beaed9ea1f247fa948023a508cab2ccd468fec8279b4aa7e99f73ccd048dddfb34d0a69f6743d05b65c58a42f5af6d1dcbd3c5cb576ef60b141b78faa3df478f3dec55822d6e7905a734e9a720f3f82dcf93753bed5b80d9df3ab69c740cbd990acedd24e70a68f33697e00a2c6bb458292453196507bb07d624cedcd5a5756a94971e3505acdd49564e643be6b0e80e8e9", 0xf7, 0x10001, 0x0, 0x0, r9}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000780)="25d2538b030d0ec924b37b57a62dd352982f4419769a35a7420aba715d95128cd3ef7d034c0eb35564400e82b3", 0x2d, 0xd5, 0x0, 0x1}]) 18:49:45 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0x200209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000010000000000000000000007110b0000000000094ffffffffffe800"], &(0x7f0000f6bffb)='GPL\x00'}, 0x48) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) rt_sigpending(&(0x7f0000000240), 0x8) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') recvfrom$inet(r2, &(0x7f0000000080)=""/78, 0x4e, 0x0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) ioprio_get$pid(0x0, r0) 18:49:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:45 executing program 5: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) [ 282.707991] binder_alloc: 7280: binder_alloc_buf, no vma [ 282.731324] EXT4-fs (sda1): re-mounted. Opts: [ 282.741420] binder: 7280:7285 transaction failed 29189/-3, size 0-0 line 3135 18:49:45 executing program 4: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 282.757686] binder: 7280:7294 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 282.787882] binder: 7280:7294 got reply transaction with no transaction stack 18:49:45 executing program 3: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0}, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0x200209e20, 0x8000000001, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000010000000000000000000007110b0000000000094ffffffffffe800"], &(0x7f0000f6bffb)='GPL\x00'}, 0x48) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) rt_sigpending(&(0x7f0000000240), 0x8) r2 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp\x00') recvfrom$inet(r2, &(0x7f0000000080)=""/78, 0x4e, 0x0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) ioprio_get$pid(0x0, r0) 18:49:45 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x4, 0xfffffffffffffff9, 0x20, 0xfff, 0x0, 0x5, 0x200, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x8, 0x5, 0x1, 0x6, 0x8001, 0x803, 0x1, 0x2, 0x6, 0xff, 0x7, 0x4, 0x1, 0x8, 0x2, 0xffffffff, 0xd5, 0x4, 0x8001, 0x8, 0xfffffffffffff045, 0x1000, 0x5, 0x0, 0x8, 0x0, @perf_config_ext={0x14, 0x1}, 0x2082, 0x796, 0x8, 0xf26b64328f1fb5ba, 0x2049, 0x2, 0xcca}, r1, 0xd, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x1, 0x0, 0x401, 0xc5, 0x0, 0x1000, 0x12000, 0xa, 0x9f23211, 0x78, 0x789c, 0x80000001, 0x100, 0x180000000000000, 0x2, 0x5, 0x7, 0xa5f9, 0x7, 0x1, 0x1000, 0x9, 0x3, 0x4, 0x7, 0x7, 0x6, 0x5, 0x84, 0xffffffffffff75c0, 0x0, 0x5d, 0x9, 0xc1, 0x10001, 0xad8, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0xffff, 0x155, 0x6, 0x101, 0x3f, 0xb3a}, r1, 0x6, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000240)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 282.816437] EXT4-fs (sda1): re-mounted. Opts: [ 282.823784] binder: 7280:7294 transaction failed 29201/-71, size 56-40 line 2920 [ 282.854040] binder: undelivered TRANSACTION_ERROR: 29189 [ 282.972145] binder: 7308:7310 transaction failed 29189/-22, size 0-0 line 3012 18:49:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:45 executing program 3: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1000000018) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 283.062529] EXT4-fs (sda1): re-mounted. Opts: 18:49:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="e8daf3b83fb23323ffb585c91d7e6f93a801222825510655f902b810814b2653a663639d2d1b2cfd7c1c86c664d64e5457fc04b0896f592238045ef0ae3f5d3f9880c907a11610224649a1d7855fe46fe12e77ac938448c7b611b8d066b46e53183c4c1452de8afd66e680f4f8489bf55fbe4fa222b73bec010f7b37a0fdeed6bd2ed3fa12f427e1401ab88605bd38e116a1a187507cb0", 0x97}, {&(0x7f0000000240)="30d81da4882a1c77d21ffeda1ace3cfb4312590be62192adc29a3125ceba3c52b68b764e7bccd302c71a5a371272d0d01b7f74cf14f0b8d70fa0bc767957f660cc021eb14020237527e741e53af875ac304323a8a2b4182e6d952e890c872300eceeaeb24b6a1d69479750a2ece42d97b03160b713fc3dc17b1e3dd0bdae144e367a6c56a8e821986f58cd50be4e65476671a409753bab96f483394fe62da07586aaffbaa80f21b6ee8f33a24df6adac597d6c5eb7daf44e19cd7e758b6f7b5310106988b05afa829611403f2cb2a5cb075b2f80cfbc52473458f93957e68fd2962875ffea7e18f6c84e", 0xea}], 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:46 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 283.128845] binder: 7321:7324 transaction failed 29189/-22, size 0-0 line 3012 18:49:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x1b6) socket$inet(0x2, 0x1, 0x9) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x3, 0x4) io_setup(0x2, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0xb4ea, r0, &(0x7f0000000100)="b604d2828ec72cbd49dcd882584c1c87ea4dfe43662795c5ca0615b9d3", 0x1d, 0x4, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)="02af094d018a83c506ceffb984c7110eab9ac60ab8d52a39b343b138544092f4403f3510a1c3dcd067189573bd4b7ff8b660a6fcdc6d7d78665cc3e0fcbf68bafaf1a09aa023fcbc5bedf7479eddeaef013044526831561f076953ce5f66f2a5", 0x60, 0x5, 0x0, 0x3, 0xffffffffffffff9c}]) 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 283.248932] binder: 7333:7337 transaction failed 29189/-22, size 0-0 line 3012 18:49:46 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100000000000000000000007f000000000001000000000000000a0000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) r3 = dup2(r0, r1) bind$unix(r3, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) [ 283.333480] binder: 7343:7347 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 283.346646] binder: 7343:7347 got reply transaction with no transaction stack [ 283.359004] binder: 7343:7347 transaction failed 29201/-71, size 56-40 line 2920 18:49:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @dev={[], 0x1f}}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000180)={'ip6_vti0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x8, 0x6, 0x0, 0xfffffffffffffff9, 0x22b8, 0xfffffffffffffff9, 0x6}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:46 executing program 4: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x6, 0x120c2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x3, 0x9, "d034ace353355dfa424019fb4b727cec6ec7c64a32c4c159a2925be52ed80a96ffcbb431781a8727990c9c9c24e6f8c9173e1c315a3e5f27209a63d16cc60ead", "4e207462d81e93cdf009463ffbda21aa9d458bd8da1921dee64103e39f89d23a", [0x5b423839, 0x2]}) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x139}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000040)={{r2, r3/1000+30000}, {0x77359400}}, &(0x7f0000000240)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 18:49:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x3) tee(r1, r4, 0x3, 0x0) r5 = dup2(r0, r4) close(r2) fsetxattr$security_ima(r5, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0403410fdcc50acb9c41fad271050015d1a23d2635971da71480f5436147555405fd811de76574353b6c6c85139bd682c72df7a13b022d527ac97397f25b34c1dbddb2a467169ed7000000000000000000"], 0x5, 0x3) 18:49:46 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 283.565119] binder: 7363:7365 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 283.573922] binder: 7363:7365 got reply transaction with no transaction stack [ 283.582926] binder: 7363:7365 transaction failed 29201/-71, size 56-40 line 2920 18:49:46 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init() syz_genetlink_get_family_id$ipvs(0x0) pselect6(0x40, &(0x7f0000000240)={0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080), &(0x7f0000000200)=0x4) 18:49:46 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$poke(0x3, r1, 0x0, 0x8000000000007) [ 283.637372] audit: type=1400 audit(1556822986.573:39): avc: denied { module_load } for pid=7369 comm="syz-executor4" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5005 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=system permissive=1 18:49:46 executing program 4: r0 = socket$packet(0x11, 0x1, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20800000d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) write$P9_RLINK(r2, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b3095b0e115f47d81c9db8bcf025000002020000000000000000000000ffffe00000023e020000000000000000000000000001830090780009040060b680fa0000000000000000000000000000ffffffffffff00000000"], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r3, 0x0, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) 18:49:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x13102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) gettid() tkill(r0, 0x1e) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x19}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/27) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000080)=@raw=[@exit, @alu={0x7, 0x20, 0x4, 0x7, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}, @generic={0x7, 0xffff, 0x9, 0x4, 0x7fff}], &(0x7f0000000180)='GPL\x00', 0x5, 0x36, &(0x7f00000001c0)=""/54, 0x41000, 0x1, [], 0x0, 0x5}, 0x48) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ptrace$cont(0x1f, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 283.709619] binder: 7378:7388 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 283.728417] binder: 7378:7388 got reply transaction with no transaction stack [ 283.740171] binder: 7378:7388 transaction failed 29201/-71, size 56-40 line 2920 18:49:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000001c0)={{0x11, @multicast2, 0x4e24, 0x0, 'dh\x00', 0x4, 0x7ab1, 0x23}, {@multicast1, 0x4e22, 0x3, 0x1, 0x8, 0x800}}, 0x44) sendto$inet(r1, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xf666) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:46 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x40007, 0x4, 0x7fffffff, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x800, @remote, 0x8}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x41) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000fbdbdf2501000000080005000000000008000500080000004400020008000600050000000800050008000000080002004e23000008000b000000080005000300000008000b0002000000080003000000000008000300000000000c000200080003000008000500040cacbf000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20040090}, 0x800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x101, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x2, @ipv4={[], [], @remote}}, 0x1c) 18:49:46 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/1, 0x1) 18:49:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:46 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 283.910446] binder: 7420:7425 ioctl c0306201 0 returned -14 [ 283.917832] binder: 7420:7425 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 283.926672] binder: 7420:7425 got reply transaction with no transaction stack [ 283.934321] binder: 7420:7425 transaction failed 29201/-71, size 56-40 line 2920 18:49:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x601, 0x0, 0x0, {0x2, 0x34, 0x0, 0x0, 0xff}}, 0xfffffffffffffe96}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='net/softnet_stat\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000006c0)=r1, 0x4) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000080)=@ipx={0x4, 0x8000, 0x9, "57cdf76a52ec", 0x2b}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="a83c55ef49f62eb1ac92616d2f221d242616a7ecd316f3f082e9cb11eb636de4d2d5c0cf75215313ee3f7a21b19d1ad38ed8d0d4024ea325d0dd9e795fded7bde9aec4a04629f0155be0f303af6cb1f551727da40eba98d4f73e5a6cbf44750ebf6508e24500e5eb6bb89c1418a2d33853f3afe3103f81449c999ba6f55ffaafe49da1b115a16d4f92fa30edca378b45fd9d442c2a455d254c3865824932973e8cb74bd5c4bef3f79b6735b88e9b5f4d8f098ae9c31f38bf84fc", 0xba}, {&(0x7f00000001c0)="4fd3cb7b0989156a0a4cc5a26d82ff3c451c18a19f53ada24cdd317cfac69a97ee51251b72dada36fc3f5abb8eaa815e4d85694c49f2305e2ceb4e573f3ad7", 0x3f}, {&(0x7f0000000300)="d1b5ee179f5d4b2a9390af2663419616576fd5c0b4cb7c79916a9dab9be195e2f1e9bf5c3e77e0e48d76f6a4d70f2f9d3878c737409569facba0ea11e081916d769d3590d08bd659599adbb13e9d368082e172f2dcbe360b0bd69dabe0183376e559efd69dee60066be0cb6751dda0b67ec0f6b687035445d7d2bf0bc8a0fcee0488937b594301938f766da09dd5820753709867052b79149fbaf604187ca7e050b62d6e6ec5156ff1e5414be737bb4005063dcc3388632612921f8aec7080f51a4061", 0xc3}, {&(0x7f0000000200)="8def9dda892cc292775b808b0a08d4d73a873b516882a48cdc18ffec07fec83f2f99ae85bdcf7414b1e8ae87f7df50c6c4c658c47cb73c46190c9f2af244ce86c7b2864be7cb451011ad68d614417b26d0dbc6a43ca1d92f7b12966a9b8c839d781fb63ffed8ea0f9c8c48fcd344fce4e042a7681497f2aa73d0", 0x7a}, {&(0x7f0000000400)="5d018da48d99f287666fea3de83a6e08887cb42cc38020004333c887f028be36613bd3ede8b79d370adb0335579dfc01dbaab3e1518954acdd53b54a84885481c52ca9566833174ce0bc66bad07cdc58687ea8e627636c15e7ff7bad3ff1023539ae2f1b8e6f80adf9b3842d9c32c333d27c295ee9672f3fae0a2cacc9ff6b0e2011336e4f91ca2e33a38e44b8480eef44b99efcd28b36752f21228c273f1e2cbc1e75448a193582564cdb1821159c3034280e9c55e5e7ea3f18a7acef7465d3cda40eb9bb62bffa3546d8a5679ca9b5dc08edbe8637822a1b0b94e3dd2871602aab8572957e33273cde1e4b", 0xec}, {&(0x7f0000000280)="be482ed07aa99cb105996fd860c2a7bbd7ad7af8243bfe351295f53f2fdd1c25e21dbb2e79f3e4d92c5f5d85ae0e9d2985a8e5c8de", 0x35}], 0x6, &(0x7f0000000580)=[{0x90, 0x10e, 0x7, "ea2db84c7e525548d2eb70e627405c5840538b986fc880f983ec825283fd4f8cc15a96a421081e292d614ed3316eb26d29f4550240c13e1d538435fc2f2163f412f8e53a26640c2b8e11e7fb13f6219ad0c0dd30c9ca3296918babe22b8af62296236578452150d5f7d39f7d4841dc8a4988ba318b48f8d61205a429e098"}], 0x90}, 0x10) 18:49:47 executing program 4: eventfd(0x1) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x17, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') flock(r0, 0xffffffffffffffff) preadv(r2, &(0x7f0000000480), 0x100000000000021c, 0x0) gettid() [ 284.063883] binder: 7448:7452 ioctl c0306201 0 returned -14 [ 284.087898] binder: 7448:7452 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:47 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) write$selinux_validatetrans(r1, &(0x7f00000000c0)={'system_u:object_r:userio_device_t:s0', 0x20, 'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, 0xfffffffffffffff9, 0x20, '/sbin/dhclient\x00'}, 0x70) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="75e851b1656fcfaf34f21502f7f6965dba4b4f3af6962cf28d78d9a78f633e0f424ffe0b19c7df6ac1a58a02104d73625e0af16c10e92d4ea6dbacc972fa49f7f9e26a220bfb56e05d89b0bd570fd2673d3ca65f36e2cac33c5c0b9526bdf5ca9a6557137c3360a42436d2bc41f100ffca715b050a4b0b78b16d6d5302b6eba8f4254cc9ab8f402a4e7c8b65aafaad541429f156bf922c1bc10dcf4892a57a69ac8ef9622c04439325379e47db01247e18e83ef7c8b09e986461008643df456e04b8409df52d1c046935f7b0b3000d7279dbdcd4105ffbd180fe34f308c118c3fafb610b64561d88823544fb1684d73dddaaadf41693413ba1cccc259299e4b1b83f5ce52ebc9a9b71fd890db91f7e938b870a1a95047afa527d8aecc7ebca0facbd966359edf91d2c3fc5206468337943cf66c7c434ea3c930b709010d188fc43046e6cbe0fc4f7a70a0ca668e6a138be2e3b359d8221636bf773ff4bee8f8bb8f758b37c9242467e5f9b713e85a41cbbf0fb7ffdcf30b99a46c1341b9828cd85ad462c9b7b83245e8377271c4b8fc8983287521ba37face8b9b7229b073c49b11c7d268affc52ed165b7451a8d7e94e002c7c7c2c7bdb719f85ea8be1399a7b0e492a70cd4c1cf0a94130af976079269c7ab9d609e9cbd18a64df406dedde87e87c9ff3d5c1d6954d9a6c3c438855d37baea3f02fc9f440a2b9b1f79a252a14c294d0e88e05026e8"], 0x209) [ 284.115838] binder: 7448:7452 got reply transaction with no transaction stack [ 284.147379] binder: 7448:7452 transaction failed 29201/-71, size 56-40 line 2920 18:49:47 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:47 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x400000000000002, 0x4) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000015c0)={0x75, &(0x7f00000001c0)=[{0x9, 0x3f, 0x7, 0xffffffffffffffff}, {0x1, 0xd317, 0x7, 0x1}, {0x6, 0x80000001, 0x401}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) [ 284.336858] binder: 7471:7475 ioctl c0306201 0 returned -14 [ 284.345522] binder: 7471:7475 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 284.362143] binder: 7471:7475 got reply transaction with no transaction stack [ 284.370891] binder: 7471:7475 transaction failed 29201/-71, size 56-40 line 2920 18:49:49 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x8, 0x3f, 0x5, 0x1}, 0x14) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000340)={'security\x00'}, &(0x7f00000003c0)=0x54) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000400)={@local, 0x6c, r1}) getdents(r0, &(0x7f0000000440)=""/71, 0x47) getpeername$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x1c) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x274}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x74b8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe189}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000680)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000006c0)) ioctl$VT_ACTIVATE(r0, 0x5606, 0xa0a) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000700)=r0, 0x4) r5 = open(&(0x7f0000000740)='./file0\x00', 0x4000, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0x0, r5, 0x0, 0x9, &(0x7f0000000780)='security\x00', 0xffffffffffffffff}, 0x30) r7 = fcntl$getown(r5, 0x9) rt_tgsigqueueinfo(r6, r7, 0x6, &(0x7f0000000800)={0x25, 0xffff, 0x9}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000880)='/proc/self/net/pfkey\x00', 0x840, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r5, &(0x7f0000000900)={0x18, 0xd, 0x2, {{0x8c, 0x4, 0x7}, 0x30000000}}, 0x18) fsetxattr$security_smack_entry(r5, &(0x7f0000000940)='security.SMACK64\x00', &(0x7f0000000980)='/\x00', 0x2, 0x2) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f00000009c0)=""/18) socket$inet6(0xa, 0xe, 0xffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000a00)='NET_DM\x00') sendto$unix(r8, &(0x7f0000000a40)="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", 0x1000, 0x4, &(0x7f0000001a40)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 18:49:49 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:49 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001600010000000000000000000300000060bb5d1d2aba5ad638da8f98276e8b720e566cf0a7bf8d1e514ea2d114d5b1253536e7c5c009aa223e51fd491ceda6eee1597c013574918743e19ab7881de66637a8d526951390a0916f41da1c0da080b2b04079184b5d700c73eccfb31a298b9720976f0f2ccb48bc82ffc2cd5dae21dd02ab6dccae34cff816f1db4ca40648fff2c59bfd03a600ef69f3dc09b0076db5223eff24dca917a026c1486f"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0x2da) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockname(r0, &(0x7f0000001a40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001ac0)=0x80) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001b00)={0x0, @rand_addr, @initdev}, &(0x7f0000001b40)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b80)={'tunl0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001c00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001c40)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000001d40)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001d80)={@multicast2, @loopback, 0x0}, &(0x7f0000001dc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000007140)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000007240)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000072c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007300)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007380)={0x0, @multicast2, @broadcast}, &(0x7f00000073c0)=0xc) r16 = accept4$packet(r2, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x80800) shutdown(r16, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000007400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007440)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000007480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000074c0)=0x14, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000007500)={0x0, @local, @empty}, &(0x7f0000007540)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000007580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000075c0)=0x14, 0x80800) accept4(r0, &(0x7f0000007600)=@hci={0x1f, 0x0}, &(0x7f0000007680)=0x80, 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000007dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200140}, 0xc, &(0x7f0000007d80)={&(0x7f00000076c0)={0x684, r1, 0x810, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r7}, {0x174, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff00000000}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r13}, {0x1c0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r19}, {0x15c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x44d62bdd}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4f42}}}]}}]}, 0x684}}, 0x4000000) 18:49:49 executing program 3: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x3c5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) socket(0x11, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) [ 286.927242] binder: 7493:7498 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 286.941626] binder: 7493:7498 got reply transaction with no transaction stack [ 286.952572] binder: 7493:7498 transaction failed 29201/-71, size 56-40 line 2920 18:49:49 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 286.975249] audit: type=1400 audit(1556822989.913:40): avc: denied { write } for pid=7494 comm="syz-executor4" name="net" dev="proc" ino=19061 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 286.980954] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:49:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f121e0d3f3188a070") ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) [ 287.040748] audit: type=1400 audit(1556822989.913:41): avc: denied { add_name } for pid=7494 comm="syz-executor4" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 287.068361] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.093163] binder: 7517:7519 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 287.095658] audit: type=1400 audit(1556822989.913:42): avc: denied { create } for pid=7494 comm="syz-executor4" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 287.108376] attempt to access beyond end of device 18:49:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 287.127911] audit: type=1400 audit(1556822989.953:43): avc: denied { getattr } for pid=7490 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 287.138681] binder: 7517:7519 got reply transaction with no transaction stack [ 287.187967] loop3: rw=12288, want=8200, limit=20 18:49:50 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ipx\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 18:49:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 287.210741] attempt to access beyond end of device [ 287.218487] binder: 7517:7519 transaction failed 29201/-71, size 56-40 line 2920 [ 287.224356] audit: type=1400 audit(1556822989.983:44): avc: denied { accept } for pid=7490 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 287.231410] loop3: rw=12288, want=12296, limit=20 [ 287.284447] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 18:49:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r1, &(0x7f0000000140)=""/24, 0xd96fc87d47cf4401) getdents(r1, 0x0, 0x1ed) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x305c, 0x30, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{0xdc, 0x1, @m_ife={0xd8, 0x19, {{0x8, 0x1, 'ife\x00'}, {0x44, 0x2, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x400000000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xef}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffffffffff9}]}, @TCA_IFE_TYPE={0x8}, @TCA_IFE_SMAC={0xc, 0x4, @remote}]}, {0x84, 0x6, "e8b1ac1dce19e03f9fe344cb249aacf81aecd1f329e1aca851a5ea6d819df9043c839d2e99c796b3b9dcd409c01412a24d1bd178e896c5c89c76884de8ff6068e044d99e322c58db771b48226ab17208b4050d7a0e032ca9f6be104ffd583e900dfda3a7a3911cd20822fc14b29a1c369cd24d331d1faa33468090fa5fc55b7a"}}}}, {0xe80, 0x1, @m_pedit={0xe7c, 0x18, {{0xc, 0x1, 'pedit\x00'}, {0xe64, 0x2, [@TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x4, 0x5e65, 0x0, 0x6, 0x7}, 0x7, 0x5, [{0xffffffff, 0x7, 0x9, 0x2, 0x1, 0x1}, {0x5, 0x6, 0x4, 0x5db29870, 0x40, 0x2}]}, [{0x200, 0xfffffffffffffff7, 0x7fe0000, 0x10001, 0x2, 0x6}, {0x8, 0x2, 0x2, 0x8d0, 0x8951, 0x1ff}, {0xdc7, 0x2b4, 0x1, 0x2910, 0x2, 0x5}, {0x532, 0x80000001, 0x1, 0x5, 0x5a9}, {0xffffffffffffff96, 0xcd, 0x32, 0x2, 0x7fffffff, 0x2}, {0x4, 0x3, 0x99, 0x6, 0x27, 0x8}, {0x9, 0x9, 0x4, 0x9, 0x1ff, 0x253}, {0x7fff, 0x0, 0x1, 0x1, 0xfffffffffffffffc, 0xffffffff}, {0x4, 0x6, 0x7, 0x7, 0x1, 0x6}, {0x7, 0x9, 0x36, 0x1ab, 0x1}, {0x8607, 0x3ff, 0x56, 0x0, 0xf2, 0x7ff800000000000}, {0x1, 0x80, 0x8, 0x7ff, 0x32c, 0x998b}, {0x4ca1, 0x2, 0xf77, 0x9, 0x5, 0xc}, {0x20, 0x7ff, 0x7fffffff, 0x1a68f67c, 0xa21, 0x7}, {0x7ff, 0x2, 0x5, 0x5b, 0x3, 0x5}, {0x4, 0x3, 0x8, 0xffffffff, 0x8, 0x3}, {0x0, 0x901, 0x64343622, 0x6, 0x8, 0xb07e}, {0x0, 0x7f, 0x3, 0x1, 0x0, 0x80}, {0x401, 0xffff, 0x8, 0x8, 0x866, 0xfc89}, {0x4, 0xffffffffffffff81, 0x1000, 0x1, 0x0, 0x40d5}, {0x7fffffff, 0x7f, 0x6, 0x2, 0x4, 0x6}, {0x16b, 0x1, 0x6b, 0x0, 0x27, 0x6}, {0x3, 0x4, 0xfff, 0x7, 0x1f, 0x10c4}, {0x6, 0x6, 0x8, 0x8, 0x3, 0x4}, {0x2, 0x6, 0x200, 0xdf76, 0x91, 0x7}, {0xe2d, 0x3, 0xec, 0xfff, 0x4, 0x9000000000000000}, {0x7, 0x8, 0x800, 0x7fffffff, 0x3d}, {0x6, 0x3, 0x1, 0x40, 0x7}, {0x3, 0xffffffff00000001, 0x8e, 0x6, 0xfffffffffffffffd, 0xfff}, {0x7298, 0x3, 0x47c7, 0x8, 0x6, 0x2}, {0x8001, 0xffffffff, 0x4, 0x0, 0x412, 0x8001}, {0x1, 0x1000000000000, 0x2, 0x1000, 0x8aa, 0x3}, {0x7fff, 0x9, 0x3, 0x4, 0xae06, 0x1c}, {0x7f, 0x5, 0x1000, 0x7af, 0x5, 0x9}, {0x401, 0x2, 0x9, 0x81c, 0xa69, 0x7fff}, {0x8, 0x3, 0x1, 0x662, 0xfd, 0x1}, {0x8, 0xd6, 0x0, 0x1, 0x3}, {0x9, 0x8, 0x2, 0x5, 0x800, 0x7fffffff}, {0x4, 0x5, 0xb86, 0x5, 0x9, 0xfff}, {0x80, 0x9, 0x3, 0x7, 0x4, 0x9}, {0x3ff, 0x100000001, 0x800, 0x2df, 0x100000000, 0x4}, {0x5, 0xffffffffffff3818, 0x6, 0x1000, 0x400}, {0x3f, 0xbf5c, 0x2, 0x7f, 0x7}, {0x0, 0x7fff, 0x5, 0x4, 0x23, 0x4}, {0x7f, 0x3, 0x800, 0x6, 0x1fe0000000000000, 0x7}, {0x6, 0x5, 0x3, 0x0, 0x5, 0x7}, {0x3ff, 0xfff, 0x5d, 0x7, 0x10001, 0x7}, {0x7fffffff, 0xffffffff, 0x100000001, 0x1ff, 0x7, 0x1f}, {0x0, 0x8, 0x7fffffff, 0x101, 0x8, 0x5}, {0x432763f2, 0x0, 0x4, 0x4, 0xffffffffffffffc1, 0x100000001}, {0x2, 0x9, 0x0, 0x4, 0x0, 0x6}, {0x152, 0x3304, 0x0, 0x2, 0x100, 0xffe00000000000}, {0x8fe, 0x206, 0x7, 0x8, 0x10001, 0x6}, {0x5c1d, 0x7fff, 0x0, 0xd13b, 0x0, 0x1}, {0x5, 0x7, 0x2, 0x38f, 0x9, 0x9}, {0x9, 0x3, 0x400, 0x212, 0x6, 0x3c}, {0x7, 0x200, 0x9, 0x7fffffff, 0x3000000000, 0x7fff}, {0x0, 0x200, 0x52278b52, 0x1fc000, 0xb6, 0x5bfc}, {0x20, 0x6, 0x3, 0x40, 0x1000, 0xfffffffffffffffc}, {0x8b, 0x4, 0x0, 0x5, 0x1, 0x5}, {0x4, 0x4, 0x7, 0x96e, 0xfffffffffffffff8, 0x2a73}, {0x8, 0xffff, 0x1c, 0xffffffffffff0001, 0xffffffff, 0x40}, {0xb69c, 0x7, 0x7, 0x628, 0x1, 0x15}, {0x3ff, 0x9, 0x589, 0x400, 0xca0b, 0x4}, {0xa5, 0x1f, 0x9, 0x612, 0x80000001, 0x6db0700c}, {0x400, 0xfffffffffffffe00, 0x20, 0x2, 0x5b75, 0xffff}, {0x9fb, 0xffff, 0xfffffffffffffffa, 0x9d9e, 0xffff, 0xfffffffffffffffc}, {0x5, 0x8, 0x6, 0x8001, 0xec, 0x80000000}, {0x8, 0x80, 0x8001, 0x9, 0x3, 0x8e8d}, {0x7, 0x6, 0x10000, 0x101, 0x4, 0x4}, {0x3, 0x8000, 0x3, 0x1f, 0x4, 0xfff}, {0x776, 0x800, 0xb1, 0x12e, 0x1f, 0x9}, {0x401, 0x1, 0x3, 0x6d1d, 0x80, 0x5}, {0x2, 0x2, 0x1f, 0x59, 0x2, 0x1}, {0x0, 0x7, 0x200, 0x7, 0x338, 0x4}, {0xfffffffeffffffff, 0xfffffffffffffff7, 0xfffffffffffff800, 0x81fb, 0x9, 0x25a}, {0xfff, 0x400, 0x9, 0xfffffffffffffffa, 0x20, 0x100}, {0x0, 0x9eed, 0x6, 0x3ff, 0x6, 0x9}, {0x0, 0x1, 0x4, 0x400, 0xffffffffffff0001, 0x3}, {0x40, 0x4, 0x4, 0xffffffff, 0xffffffffffffffff, 0x81}, {0xa2, 0xc, 0x530d, 0x20, 0x2, 0x3}, {0x4, 0x1000000000000, 0x20, 0x1, 0x21e, 0x97}, {0x3, 0x3, 0x8, 0x7fff, 0x4, 0x1}, {0x80, 0x2020000000000000, 0x5, 0x4, 0x9, 0x1ff}, {0x200, 0x8, 0x2a64000000000000, 0x100000000, 0x7}, {0x800, 0x5, 0x3, 0x7, 0xfffffffffffffffe, 0xffffffff}, {0x3ff, 0x3, 0x100000001, 0x71b6e442, 0x0, 0x1}, {0x0, 0x7, 0x3f, 0x5, 0x5, 0x5}, {0x19d, 0xff, 0x100, 0x3ff, 0x2, 0x7ff}, {0x1, 0x7ff, 0x8, 0x35, 0x80000001, 0x10001}, {0xfffffffffffffff8, 0x7, 0x2, 0x9, 0xffff, 0xffffffffffffffe6}, {0x8, 0x976, 0x6, 0xbd, 0xac5, 0xc0a86ad}, {0xc00000000, 0x6, 0x1, 0x6, 0x1}, {0x7b437058, 0x8000, 0x0, 0x8, 0x100000000, 0xfff}, {0x6, 0x10001, 0xfffffffffffffffb, 0x1, 0x7f, 0x4}, {0x1, 0x7, 0x46a7, 0xfffffffffffffff9, 0x100000000, 0x75}, {0x5, 0xfffffffffffffff9, 0x7ff, 0x0, 0x3, 0x3}, {0x1, 0x7ff, 0x1ff, 0xfff, 0xfffffffffffff001}, {0x3, 0x1, 0xfffffffffffffff7, 0x7, 0x8, 0xbd}, {0x1ff, 0x5, 0x2, 0xd6, 0x9, 0x1ff}, {0x3, 0x1, 0x79, 0x4, 0x80000001, 0x9}, {0x8, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x5}, {0x9, 0x800, 0x101, 0x5, 0x1, 0x7}, {0x5, 0x400, 0x6, 0x2, 0x401, 0x100000001}, {0x0, 0x5, 0xff, 0x101, 0x20, 0x7f}, {0x69, 0x777, 0x1, 0x4, 0x0, 0x8}, {0x7fff, 0x4494, 0x1, 0xe53d, 0xfffffffffffffc01, 0x6}, {0x7, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffb, 0xffffffff, 0x6}, {0xa21, 0x6, 0x1e15f071, 0x1110, 0xf2c, 0x8}, {0x4, 0x0, 0xfff, 0x6, 0x2, 0x9}, {0x4, 0x100c, 0x7fffffff, 0xab, 0x2, 0x5}, {0x4, 0xfffffffffffffff9, 0x4, 0x101, 0x6, 0x10001}, {0x7, 0x400, 0x4, 0x7, 0x4, 0x8000}, {0xff, 0x7f, 0x7, 0x80, 0x2, 0x77ec}, {0x10001, 0x1, 0x40, 0x7, 0x9, 0x7}, {0xffffffffb4022141, 0x10001, 0x4, 0x9, 0x8, 0x7f}, {0x8, 0x49, 0x3e7c, 0x7fffffff, 0x1, 0x49e}, {0x51f0, 0x0, 0x4, 0x68e, 0x80000001, 0xd6f}, {0x9, 0x5, 0x7fff, 0x9, 0x3, 0x2}, {0x0, 0x1, 0x0, 0x9, 0x1ff, 0x4}, {0x9, 0x6c12, 0x200, 0x100000000, 0x0, 0x5}, {0x6, 0x9, 0x8, 0x40, 0x8, 0x8001}, {0x2, 0x5, 0xffff, 0x800, 0x7ff, 0x7}, {0x9, 0x53, 0x3, 0x6, 0x7fffffff, 0x9f01}, {0x4, 0x4, 0x80, 0x400, 0x6, 0x1}, {0xe5, 0x8, 0x8, 0x4, 0x81, 0x3}, {0x401, 0xfffffffffffffe93, 0x5, 0x48, 0x40, 0x100}, {0x5, 0x1, 0xfffffffffffffffc, 0x7fffffff, 0x5, 0x2}], [{0x5, 0x1}, {0x1}, {0x7, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x3319b9657a6c9aba}, {0x2, 0x1}, {0x5}, {0x7}, {0x3}, {0x1}, {0x6, 0x1}, {0x3}, {0x1}, {0x0, 0x89d395e16828b28a}, {0x1}, {}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4}, {0x7}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x7}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x6}, {0x7, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x7}, {0x4}, {0x1, 0x1}, {0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x2e15f9c1bbf8c85c, 0x1}, {0x4, 0x1}, {0x7}, {0x6, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x2, 0x3ca648f13f65b91e}, {0x3, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x7}, {0x3, 0x1}, {0x7}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x7, 0x1}, {0x7, 0x1}, {0x6}, {0x7, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1}, {0x7}, {0x2, 0x1}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, [@TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}]}]}]}, {0x4}}}}, {0x54, 0x1, @m_connmark={0x50, 0xa, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x34, 0x7, 0x0, 0x3}, 0x4}}}, {0x18, 0x6, "33a118fdfec43c783fddf2a9d0d6592f3bad5900"}}}}, {0xd8, 0x1, @m_vlan={0xd4, 0x14, {{0xc, 0x1, 'vlan\x00'}, {0x84, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0xb9, 0x20000000, 0x1, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x81, 0x0, 0x86, 0xffffffffffffffff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9800000000000000, 0xffff, 0x2, 0x6, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x908}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x10000000, 0x7fff, 0x80000001}, 0x1}}]}, {0x3c, 0x6, "7ef1c587c6fc446fe5bf5e17014a87ea1c61c67a2f9d552f8a69e6105d877070bdd98ad4281052f481786b17618706df630df52b0303"}}}}, {0x1fc0, 0x1, @m_pedit={0x1fbc, 0x4, {{0xc, 0x1, 'pedit\x00'}, {0x1ea8, 0x2, [@TCA_PEDIT_PARMS_EX={0xef8, 0x4, {{{0x10001, 0x241, 0x1, 0x7f, 0x7e85}, 0x5, 0x1, [{0x5, 0x80, 0x80000001, 0x6, 0x2, 0xfff}, {0x1, 0x3, 0x5, 0x8, 0x7ff, 0xfffffffffffffff9}, {0x10000, 0x1000, 0x3ff, 0xb0, 0x8000, 0x4}, {0x1, 0x3, 0x2, 0x5, 0x8, 0x9}, {0x401, 0x7, 0x8, 0xfffffffffffffff8, 0x61d068cf, 0x4}, {0x5, 0x8, 0x8, 0x0, 0x3, 0x7}, {0x9, 0x8000000000, 0x4, 0x3, 0x1f, 0xc80}, {0x6, 0x100, 0x401, 0x9887, 0x1, 0x7fff}, {0x7, 0x6, 0x5, 0x9, 0x1}]}, [{0x3, 0x9, 0xdb, 0x6, 0x5b2, 0xa5}, {0x5, 0x8, 0x1, 0x5f5, 0x1, 0xffff}, {0x2, 0x6, 0x0, 0x3, 0x1ff, 0x8676}, {0x0, 0x5, 0xfffffffffffffff7, 0x7fffffff, 0xcee, 0x8}, {0x40, 0x401, 0x7, 0x0, 0x3, 0xa346}, {0x6, 0x1000, 0x3, 0x100000000, 0x4a0159ec}, {0x9, 0x2, 0x571, 0x18000, 0x80000001}, {0x800, 0x7f, 0x87, 0x8, 0x1, 0xbf3}, {0x8000, 0x0, 0xfffffffffffffc00, 0x90a, 0x2, 0x500000000000000}, {0x9, 0xdeb, 0x7e6, 0x2, 0xa130, 0x9}, {0x1, 0x11, 0x1, 0x0, 0x1000, 0xfffffffffffffff9}, {0x6, 0x2, 0x2, 0x4, 0x10a900000, 0x3ff}, {0x10001, 0x6, 0x3, 0x81, 0x947, 0xbf3}, {0x1ff, 0x1000, 0x4, 0x3, 0xffff, 0x3ff}, {0x9, 0x7fffffff, 0x2, 0x9, 0x0, 0x8000000000000000}, {0xbb, 0xb0, 0x8, 0x1000, 0xffffffffffffffff, 0x67}, {0x4, 0x100000000, 0xfffffffffffffff8, 0x5, 0x7fff, 0x8}, {0x3, 0x4, 0x1, 0x3, 0x100, 0xffffffff}, {0x9b2, 0x1, 0x0, 0x8, 0x2, 0x3}, {0x0, 0x2, 0x8, 0x9, 0x8}, {0x7, 0x5, 0x5, 0x7, 0x3, 0x800}, {0x8, 0x8, 0x78843556, 0x5, 0x2, 0x401}, {0x7, 0xfffffffffffffff8, 0x4, 0x0, 0x20, 0x3}, {0x3f, 0x8001, 0xffff, 0x100, 0x5, 0x5}, {0x6, 0x0, 0x7, 0x4, 0x8001, 0x6}, {0x0, 0xffffffffffffffe0, 0x7, 0x7fffffff, 0x0, 0x7}, {0x1, 0x23a, 0x4, 0x2, 0xfffffffffffff889}, {0xa7a, 0xad43, 0x2, 0x8001, 0x4, 0x4}, {0x400, 0x57eeff48, 0x5d5, 0x566, 0x3, 0x400}, {0x1, 0x4, 0x8, 0x20, 0x6, 0x736}, {0x1ff, 0xfffffffffffffffb, 0x400000000000000, 0x0, 0x7c, 0x6}, {0xd00, 0x100000001, 0x8, 0x7, 0xff, 0x5}, {0xf91, 0x100, 0xff, 0x200, 0x1f, 0xffffffffffff0001}, {0x9f, 0x9, 0x9, 0x9, 0x0, 0x5}, {0x1, 0x80000000, 0x8001000000, 0x1, 0x7ff, 0x8000}, {0x5, 0xbf, 0x9, 0x3, 0x6, 0x9}, {0x101, 0x83b3, 0x800, 0xffffffffffffff00, 0x5, 0x9}, {0x8, 0x9, 0x4, 0x0, 0x100, 0x9}, {0x3, 0xd8a, 0x6, 0x2, 0x9, 0x100000000}, {0x20, 0x0, 0x2f9, 0x8000, 0x7ff, 0x9}, {0x8, 0x9, 0x4, 0x6, 0x0, 0x1}, {0xce8, 0x7c08, 0x1ff, 0x40, 0x0, 0x4}, {0x6012, 0x5, 0x101, 0xff, 0x10000, 0xffffffffffff494e}, {0x0, 0x100000000, 0x0, 0x40, 0xfffffffffffffffd, 0x100000000}, {0x6, 0x30000000000000, 0x80000000, 0x6, 0x5, 0x1}, {0x7, 0x6, 0x8294, 0x8, 0x7, 0x4}, {0x0, 0x20, 0x7, 0x200, 0x1, 0x42b}, {0x3, 0x40, 0x5, 0x1694, 0x2, 0x3}, {0x800, 0x8, 0x3, 0x8, 0x2, 0x1}, {0xfffffffffffffffb, 0x4000400000, 0x7, 0x7f, 0x1, 0xcf08}, {0x7, 0x2, 0x3, 0x100000001, 0x7, 0xa04}, {0x2, 0x1ff, 0x5, 0x95fa, 0x5, 0x9}, {0x67a84d24, 0xfffffffffffffe00, 0x0, 0x3, 0x6f, 0x6}, {0x100000000, 0x1702, 0x80000000, 0x2, 0xfffffffffffffffc, 0x1}, {0x3, 0x200, 0x0, 0x5113, 0xfffffffffffffffb, 0xff}, {0xff, 0xb3, 0x2f67, 0x5, 0x0, 0xb38}, {0x400, 0x8, 0x9, 0x7f, 0x0, 0xbc}, {0x1, 0xf7d, 0x3, 0x1, 0x100000000, 0x6}, {0x8, 0x7ff, 0x400, 0xfff, 0x7, 0xff}, {0x3, 0x0, 0x1, 0x7, 0x8001, 0x1c77}, {0x100, 0x3, 0x7ff, 0x10001, 0x100}, {0x6, 0xf0, 0x800, 0x217, 0x5cf}, {0x39, 0xffffffffffffffc1, 0x0, 0xef, 0x5, 0x76c}, {0x6e, 0x9, 0x7, 0x2, 0x800, 0x235a}, {0x125e, 0x5, 0x6a3, 0x7, 0x5, 0x9e}, {0x6, 0xfff, 0x80000001, 0xd1ee, 0x80, 0x80}, {0x7, 0xfa4, 0xff, 0xfff, 0x9, 0x7}, {0x2, 0x8, 0x1000, 0x307c2676, 0xb, 0x7}, {0x8, 0x7e88000000, 0x9, 0x7, 0x10001, 0xffffffff}, {0x80000001, 0x401, 0x6, 0x4, 0x9, 0x3f}, {0x8, 0xc96, 0x4a, 0xfffffffffffffff8, 0x231f, 0x7fff}, {0x387a, 0x6, 0x626, 0x8001, 0xfffffffffffffffc, 0x7}, {0x7fff, 0x7f, 0x6, 0x7, 0x5}, {0x5, 0xab8, 0x60000000000, 0x6, 0x3d, 0x8}, {0x1, 0xc1cb, 0x6, 0x800, 0x5, 0x6}, {0x2, 0x400, 0x8, 0x7f, 0xff, 0x3ff}, {0x3f, 0x7, 0x2485, 0x8000, 0x53, 0x7}, {0x4, 0x7, 0x7, 0xffffffffffffff28, 0x4058, 0xe31}, {0x8, 0x1ff, 0x400, 0x7f, 0x40, 0x2}, {0x3, 0x1, 0x400, 0x7ff}, {0x0, 0x800, 0x6, 0x7, 0x9, 0xffff}, {0x0, 0x6, 0xdeba, 0xc6e5520, 0x14, 0x7fffffff}, {0x1, 0x8, 0x0, 0x8, 0x8000, 0x401}, {0x4, 0x1f, 0xd3f5, 0x7, 0x80, 0x80000000}, {0xfffffffffffffff8, 0x7, 0xd48, 0x7f, 0x2}, {0x3, 0x2, 0x1ff, 0x4ab, 0x42, 0xfffffffffffff001}, {0x5, 0x0, 0x0, 0x5, 0x2, 0x7ff}, {0x80, 0x1, 0x10000, 0x4, 0x40a9, 0x8}, {0x7, 0x1f, 0x5, 0x4, 0x16, 0x10001}, {0x4, 0x3ff, 0x8, 0x1, 0x4, 0x8000000000}, {0x5, 0x6, 0x400, 0x2, 0x6, 0x5}, {0x6, 0x7, 0x6, 0x8, 0x505}, {0xd8, 0x3, 0x10000, 0xff, 0x5, 0x8}, {0x45b, 0x8, 0x3f, 0x0, 0x7ff, 0x4}, {0x3f, 0xc82, 0x6, 0x0, 0x4, 0x3}, {0x8001, 0x1, 0x80, 0x7}, {0x80000000, 0xf0eb, 0x7fff, 0x79d, 0x4, 0x2}, {0x71f, 0x6, 0x9, 0xffffffffffff0000, 0x100000000, 0x1}, {0x8, 0x5, 0x0, 0xfaf7, 0x100000001, 0x8}, {0xe6, 0x10001, 0x80000000, 0x3ff, 0x7ff, 0xffffffffffffff9c}, {0x1ff, 0xffffffff, 0x3, 0x2, 0x8001, 0x3}, {0x0, 0x1, 0xffff, 0x9, 0x3, 0x1ff}, {0x3, 0x5, 0xfbd3, 0x1, 0x3}, {0x1, 0x6, 0x0, 0xf5, 0x80d0, 0x2a2}, {0x5, 0x277, 0x2, 0x0, 0x3, 0x80000001}, {0x5, 0xe8d7, 0x2, 0x0, 0x1000, 0x3}, {0x80, 0x5, 0x63, 0x0, 0x7fffffff, 0x6}, {0x2, 0x7, 0x1ff, 0x100000001, 0x9}, {0x20, 0x18000000000, 0x400, 0x4, 0x200, 0x2}, {0xd9, 0x0, 0x100000001, 0x800, 0x4, 0x9}, {0x5, 0x3, 0x0, 0x800, 0x1, 0x8001}, {0x4a9, 0x100000000, 0x7, 0xffff, 0x7fffffff, 0xfffffffffffffffe}, {0x7, 0x7, 0x7fff, 0x9, 0x0, 0x7}, {0x6, 0x800, 0x3, 0x3ff, 0x2, 0x4}, {0x3, 0x7f, 0x4, 0x6, 0x10000, 0x493f}, {0x80000001, 0xffffffff, 0x7f, 0xd59, 0x1c, 0x5}, {0x800, 0x4, 0x11012923, 0x3, 0xb, 0x7}, {0x100000001, 0xf2a6, 0x81, 0x8, 0x8, 0x4}, {0x6, 0x400, 0x9, 0x0, 0x4, 0x1000000000000000}, {0x5, 0x40, 0x1, 0x1, 0x2, 0x3f}, {0xffffffff, 0xfb2, 0x8, 0x1, 0x8, 0xfffffffffffffc00}, {0x0, 0x18, 0x9, 0x9, 0x69f7, 0x7}, {0x101, 0x7, 0x25, 0x80000000, 0x0, 0x75d}, {0x2, 0x3, 0x800, 0xafbb, 0x6, 0x9641}, {0x4, 0xe00000000000, 0xffffffffffffffe0, 0x0, 0x164f, 0x8}, {0x1, 0x3ff, 0x1, 0x81, 0x200, 0x7}, {0xa75, 0x1f, 0x6, 0xfffffffffffffffe, 0x7f, 0x8000}, {0x5, 0xffffffffffffffc0, 0x5b449642, 0x7, 0x100, 0x1}], [{0x2, 0x1}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4}, {}, {0x4}, {0x5}, {0x6, 0x1}, {}, {0x5}, {0x4, 0x1}, {0x3}, {}, {0x7, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x4}, {0x4}, {0x7, 0x1}, {0x1}, {0x4}, {0x6, 0x1}, {0x4}, {0x7}, {0x7, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x4}]}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, [@TCA_PEDIT_KEY_EX={0x44, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x1ff, 0x7, 0x5, 0x5, 0x859e}, 0x7, 0x5, [{0x2, 0x6, 0x100, 0x7, 0x7f, 0x5}, {0x0, 0x7, 0x7ff, 0xbc26, 0x6, 0x7ff}, {0x7c5, 0x5, 0x9, 0x6, 0x1, 0xffe40000000000}]}, [{0x6, 0x50, 0x4, 0x1ff, 0x0, 0x5}, {0x4, 0x200, 0x401, 0x64, 0x7, 0x2}, {0xc7, 0x9, 0x0, 0x401, 0x1, 0x1ca0000000000}, {0x3, 0x1, 0x2, 0xffffffffffffff81, 0x7ff, 0x6}, {0x3, 0xfff, 0x0, 0x7fff, 0x5}, {0x5, 0x0, 0x1000, 0xffff, 0x5, 0x400}, {0xad3, 0x1, 0x40, 0x800, 0x2, 0x9}, {0x6, 0x6, 0x4, 0x2, 0x4, 0x2}, {0xe7, 0x100, 0x8, 0x2, 0xfffffffffffffffd, 0x7}, {0x401, 0x6, 0x3, 0x2000000000, 0x44779830, 0x80000000}, {0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x1f, 0x1000}, {0x0, 0x21c, 0x8001, 0xfffffffffffffffc, 0xe5, 0x8001}, {0x3, 0x8, 0x6d, 0x2, 0x3f, 0x100000001}, {0xfffffffffffffff8, 0x1ff, 0x3f, 0x101, 0x8, 0x401}, {0x1, 0x80000000, 0xffffffffffff56c8, 0x470, 0x4}, {0x9, 0x1f, 0xfd, 0xffffffffffffffbd, 0x1, 0x7fffffff}, {0x0, 0x3f, 0x0, 0x3ff, 0x10000, 0x7}, {0x1, 0x1, 0x6, 0x9, 0x400, 0x6}, {0x7fffffff, 0x3, 0x817a, 0x400, 0x3800000000, 0x18000000000000}, {0x5, 0x8, 0x8, 0x4, 0x3, 0x1}, {0x1, 0x5, 0xff, 0x2c151c1a, 0x1, 0x47}, {0x3, 0x4, 0x4, 0xd516, 0xffffffffffffffff, 0x7fff}, {0x2, 0x6, 0x6, 0x5, 0x1, 0x111c}, {0xb0e, 0x40, 0x7, 0xff, 0xfc07, 0x7}, {0x3, 0x6, 0x0, 0xcac4, 0xff, 0x3}, {0xffffffff, 0x909, 0x400, 0xb5, 0x5, 0x2}, {0x7, 0x7, 0x5, 0x1, 0x3, 0x4}, {0xab, 0x7, 0x958, 0x10000, 0x7a, 0x6}, {0x80000001, 0x80000001, 0x7, 0x2, 0x4, 0x21ecc04a}, {0x2, 0x6, 0x3, 0x200, 0x0, 0x5add}, {0x1eef, 0x8, 0x0, 0x1, 0x1, 0x7fffffff}, {0x24f, 0x101, 0x10001, 0x3f, 0x200, 0x80}, {0x26, 0x19, 0x17b1, 0x3, 0x3f, 0x800}, {0x4, 0xe6, 0x2, 0x7ff, 0x1, 0x6}, {0x9, 0xffff, 0x0, 0x1, 0xb9}, {0x5, 0x6, 0x40, 0x3, 0x6, 0x40}, {0x7, 0x100000001, 0x8, 0x7fff, 0xffff, 0x4}, {0x0, 0x33fc, 0x7, 0x9, 0xfffffffffffffff9, 0x10000}, {0x0, 0x706a, 0x2bf5, 0x400, 0x2, 0x4}, {0x2a, 0x100000001, 0x1ff, 0xffff, 0x8}, {0x4a1, 0x3, 0x40, 0x8, 0x9, 0x9}, {0x3, 0x2, 0x200, 0x19b000, 0x9, 0x8e}, {0x6, 0x10000, 0xac, 0x200, 0x8000, 0x3}, {0x1000, 0x8, 0x40, 0x10000, 0x4, 0x9}, {0xc3, 0x20, 0x8, 0x970, 0x2, 0x7}, {0x2, 0x6, 0x8, 0x8, 0x1, 0x5}, {0x2, 0x9, 0x4000000000000000, 0xfffffffffffffff8, 0x2, 0x7}, {0x3f, 0x0, 0x4b, 0x4, 0x6, 0xfffffffffffffe71}, {0x55, 0x7, 0x1, 0xc4, 0x8}, {0xb5, 0x100000001, 0x5, 0x3, 0x61, 0x80}, {0x1, 0x4000000000000000, 0x25e, 0xfff, 0x9, 0xfffffffffffffffd}, {0x4, 0xc81, 0x0, 0x7, 0x3, 0x2bc7}, {0xa4, 0x101, 0x4, 0x0, 0x6, 0xf39}, {0xef2, 0x1, 0x9128, 0xffffffff, 0x7, 0x2}, {0x8, 0x80, 0xa248, 0xb76, 0xfffffffffffffffc, 0x401}, {0x8000, 0x4, 0x4, 0x8, 0x9}, {0x9d69, 0x82a, 0x2, 0x100000000, 0xfff, 0x7}, {0x6, 0x5, 0x5, 0x100000000, 0x4, 0x5}, {0x3337641e, 0x3225, 0x101, 0x9, 0x6, 0xa9c7}, {0x8aa, 0x9, 0xd3, 0x10001, 0x5, 0x7}, {0x6, 0x2, 0x0, 0x8, 0x552, 0x8}, {0x400, 0x6, 0x1, 0x6, 0x0, 0x1}, {0x1f, 0x4, 0x80000001, 0x2, 0x0, 0x8}, {0x80, 0xee, 0x1, 0xef97, 0xc7, 0x4}, {0x3, 0x4, 0x40, 0x1, 0x3, 0x4}, {0x200, 0x3, 0x6, 0x81, 0x9, 0x800}, {0x7, 0xae, 0x1f, 0x7e, 0x100000001, 0x8}, {0x2, 0x8, 0x7fffffff, 0x100000001, 0x40, 0xa7d}, {0x1, 0x101, 0x0, 0xff, 0x7, 0x5}, {0x8, 0x9, 0x1f, 0x0, 0xffffffff, 0xa9}, {0x1, 0x10001, 0xfff, 0x1, 0x7f, 0x80000001}, {0x1, 0xfffffffffffffff9, 0x0, 0x7f, 0x4, 0x9}, {0x4, 0x10000, 0x5, 0xce, 0x8}, {0x0, 0x4, 0x3, 0xd8a, 0x0, 0x1f}, {0x100000000, 0xdd0, 0x9b22, 0x9, 0x7, 0x2}, {0x3, 0x5, 0x5, 0x5, 0x1b, 0x9b1c}, {0x1, 0x38a, 0x3, 0x8, 0x2, 0x17}, {0x8, 0x6e, 0x604, 0x9, 0x1, 0x2}, {0x8, 0x8, 0x0, 0x2, 0x80000001, 0x2}, {0xb7f, 0x6, 0x8001, 0xfffffffffffffffa, 0x8, 0x4255}, {0x101, 0x1ff, 0x3f, 0x7f, 0x5, 0x31}, {0x40, 0x6, 0x0, 0x100000000, 0x2, 0xfffffffffffffffe}, {0x7, 0x81, 0x81, 0xc79, 0x2, 0x101}, {0x7, 0x5, 0x6a5, 0x7, 0x101, 0x2000}, {0x5, 0x800, 0x8, 0x7, 0x0, 0x5}, {0x4, 0x1ff, 0x0, 0x2, 0x2, 0x1000}, {0x0, 0x2, 0x5, 0x3ff, 0x1, 0x2}, {0x7860, 0x3, 0x81, 0x2, 0x3, 0x2}, {0x7fffffff, 0x80000001, 0x5, 0xffffffffffff0001, 0x4, 0xffffffff}, {0x758, 0x800, 0x9, 0x40, 0x5, 0x4}, {0xffffffffffffff80, 0xfffffffffffffff9, 0x9, 0x7, 0x7, 0x8}, {0x3, 0xfffffffffffffe83, 0xfffffffffffffff8, 0x8000, 0x7}, {0x0, 0x3, 0x0, 0xcf, 0x4, 0x9}, {0xb8bd, 0x8001, 0x80000001, 0x140000000, 0xfffffffffffffffb, 0x6}, {0x3f, 0x2, 0x1, 0x8683, 0xfe3d, 0xdf06}, {0x0, 0x3, 0x8, 0x6, 0x514, 0x200}, {0x43c7ba24, 0x5, 0x800, 0x1, 0x6, 0x7f}, {0xe96, 0x2, 0xa00000000000, 0x40, 0x1ff, 0x1}, {0x8, 0x80000000, 0x101, 0x2, 0x7fffffff, 0xff}, {0x3, 0x7, 0x1, 0x5, 0x401, 0x2}, {0x346f, 0x5, 0xff, 0x3, 0x8, 0xd49}, {0x5, 0x7, 0x7ff, 0x100000000, 0xc9, 0x100}, {0x462b, 0x2, 0x8, 0xc60, 0xc2, 0x9}, {0x2, 0x8, 0x7, 0x7, 0x9, 0x1}, {0x6, 0x8, 0x200, 0x4c33, 0x1, 0x1}, {0x7, 0x2, 0x6ee4, 0x2, 0x4, 0x7}, {0x0, 0x1, 0xc0000000000, 0xffff, 0x100000001, 0x6}, {0x9, 0x7, 0x7, 0x3ff, 0x7fff, 0x80}, {0x4, 0x5, 0x35, 0x80, 0x2, 0xffffffff}, {0x4dc1b61d, 0x3, 0x29ba, 0x7, 0x40}, {0xffffffffffff8001, 0x17, 0x40, 0x5, 0x8, 0x9}, {0x3, 0x5, 0x7, 0x1, 0x4, 0x2}, {0x101, 0x0, 0x2, 0x0, 0xfffffffffffffbe9, 0xb51}, {0x1f, 0x10000, 0x4fe, 0x101, 0x800, 0x5}, {0x2, 0x7, 0x7, 0x8, 0xee3, 0x6}, {0x5, 0x6, 0x4, 0x326, 0x401, 0x9}, {0x4, 0x9992, 0x1, 0x1, 0x4862fd11, 0x8}, {0x40, 0xf19, 0x5, 0x0, 0xfffffffffffff1fa, 0x694}, {0x81, 0x4, 0x6, 0x9, 0xfffffffffffffff9}, {0x175, 0x400, 0x96ee, 0x8, 0x0, 0x3}, {0x4e, 0x7, 0x8000, 0x8, 0x2, 0x4}, {0x7, 0x401, 0x5, 0x40, 0x5, 0x4}, {0x100000000, 0x6, 0x4, 0x9, 0x100, 0x6}, {0x2, 0x7, 0x7, 0x3, 0x8, 0xc6}, {0xb654, 0x8, 0xffff, 0x4, 0x9, 0x380000000000000}, {0x7, 0x3f, 0x81, 0x6b1, 0x3, 0x20}, {0x2, 0x6, 0x9, 0x1f, 0x80000000, 0x1f}, {0x0, 0x5426, 0x100, 0x9, 0x401, 0x1ff}], [{0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x7, 0x1}, {0x3, 0x1}, {}, {0x7, 0x1}, {0x4, 0x1}, {0x7}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x1}, {0x7, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3}, {0x7}, {0x7, 0x1}, {0x7}, {0x4}, {}, {0x3}, {0x3}, {0x3, 0x1}, {0x5}, {0x7, 0x1}, {0x5f8e384af965d94a, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4}, {0x7}, {0x6}, {0x5}, {}, {0x5}, {0x7}, {0x7}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x7, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x5}, {}, {0x6, 0x1}, {0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x3c, 0x5, [@TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}]}, @TCA_PEDIT_KEYS_EX={0xc0, 0x5, [@TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x4}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x8, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x8, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x8}, @TCA_PEDIT_KEY_EX_CMD={0x8}]}]}]}, {0x100, 0x6, "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"}}}}]}, 0x305c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000180)) [ 287.327521] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.363607] binder: 7538:7544 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:50 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x1ca, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x10001, 0x0, 0x0, 0x2000, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext, 0x50, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000940)='./file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x9011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000980)={0x110, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100), &(0x7f0000000280)=[0x20, 0x20, 0x0, 0x28]}, 0x3}}, @release, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680)=[0x30, 0x78]}, 0x2}}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000700)=[@ptr={0x70742a85, 0x0, &(0x7f00000006c0), 0x1, 0x2, 0x1f}], &(0x7f0000000740)=[0x68]}}, @free_buffer={0x40086303, r4}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x4, 0x3}], 0x65, 0x0, &(0x7f00000008c0)="0b6470cedb622489945e92cb392e9ea35687e06f039f0229f0c9bf331a66a6db440a65305a9de72cf4b59932a8d0caf353d03ea2134b14ca1f137d27f0f1ddf16d2da3119315abaac3231a70cfe62e2990abd1765bffffd8d91b69282e28ea98a23e580c7d"}) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="822a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa0, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000100), &(0x7f0000000140)=[0x78, 0x0, 0x30, 0x48, 0x18, 0x20, 0x0, 0x38]}, 0x8}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000280), &(0x7f00000002c0)=[0x78, 0x28, 0x78, 0x18, 0x20, 0xe2062f1ea1770d29]}}}, @acquire={0x40046305, 0x3}], 0xb5, 0x0, &(0x7f0000000540)="c9117bf1ef85da53e33231d618988c9b6ebf912dc9bfc8b07548112cfead0a04c3a722bac43c958c8169cf0d41212c2abd58fd9dfd6eea3ae5ba3cef180a63c67fb54fc54d30add3cb0ce0fb77003b2504ba44a8b108f59db1ae5c53186b30dbc65e438eeb188806714bab775075f7a7b273d99743aed66ff982e956531e436697ddc8518a47c7be9b7a6532b6757356ae446a30dad37192236c6566c41a3fc55a4af61279b65ddd9d70fcbb3a3b1c171ed87ac961"}) getpid() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="5f1067b123e4acea49d35ac3050000000000000000"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) [ 287.374677] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.376270] binder: 7538:7544 got reply transaction with no transaction stack [ 287.399627] attempt to access beyond end of device [ 287.404939] binder: 7538:7544 transaction failed 29201/-71, size 56-40 line 2920 [ 287.414192] EXT4-fs: 5 callbacks suppressed [ 287.414201] EXT4-fs (sda1): re-mounted. Opts: 18:49:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:50 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) fchmod(r0, 0x1) ptrace(0x4207, r1) ptrace$setopts(0x4200, r1, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) 18:49:50 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:50 executing program 2: mkdir(&(0x7f00000007c0)='./file0\x00', 0x4e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) listen(r2, 0x1d48) execveat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000300)='TIPC\x00', &(0x7f0000000340)='cpuset\x00', &(0x7f0000000380)='wlan1}%-keyringsecurity@\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='TIPC\x00', &(0x7f0000000440)='}posix_acl_access\xf7security$posix_acl_access(keyring\x00', &(0x7f0000000480)='TIPC\x00', &(0x7f00000004c0)='TIPC\x00', &(0x7f0000000500)='TIPC\x00'], &(0x7f0000000680)=[&(0x7f00000005c0)='TIPC\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='TIPC\x00'], 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000280)={0x1, 0x1, 0x5, 0x40000000000, r3}) r4 = dup(r0) unlink(&(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0xf02, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000006c0), 0x4) [ 287.430169] loop3: rw=12288, want=8200, limit=20 [ 287.447175] attempt to access beyond end of device [ 287.454434] loop3: rw=12288, want=12296, limit=20 [ 287.459989] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 287.494371] binder: 7550:7554 got transaction to invalid handle [ 287.501010] binder: 7550:7554 transaction failed 29201/-22, size 0-32 line 3012 [ 287.509893] binder: 7550:7554 got transaction with invalid offset (0, min 0 max 24) or object. [ 287.521292] binder: 7550:7554 transaction failed 29201/-22, size 24-8 line 3197 [ 287.555160] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.563167] binder: 7550:7554 BC_ACQUIRE_DONE u0000000000000000 no match [ 287.574564] binder: BINDER_SET_CONTEXT_MGR already set [ 287.591856] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.603512] binder: 7560:7566 ioctl 40046207 0 returned -16 [ 287.620898] attempt to access beyond end of device [ 287.626281] binder: 7560:7572 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 287.632274] loop3: rw=12288, want=8200, limit=20 [ 287.646500] binder: 7560:7572 got reply transaction with no transaction stack [ 287.648001] attempt to access beyond end of device [ 287.655053] binder: 7560:7572 transaction failed 29201/-71, size 56-40 line 2920 [ 287.667943] loop3: rw=12288, want=12296, limit=20 [ 287.677952] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 287.695620] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 287.704587] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 287.715379] attempt to access beyond end of device [ 287.720982] loop3: rw=12288, want=8200, limit=20 [ 287.729923] attempt to access beyond end of device [ 287.740934] loop3: rw=12288, want=12296, limit=20 [ 287.746002] F2FS-fs (loop3): Failed to get valid F2FS checkpoint 18:49:50 executing program 3: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000003d40)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003f40)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000004040)=0xe8) sendto(r0, &(0x7f0000003d80)="967db5ed76e97f16cd97420bb253686892d6f0d10f3aaa2e8295ef97aa457026e3693d03a7e1dc4ce6b0ef5d9524b3501019989821591036741c6c3f362dfa223bfaaf34278176e878bdeb729e620a188269e8b006534d5c8845dd1686404b21d88bcdaf3fde948fac0844b9d2024f74b4c3ea9d0a424aa4eafbc11b4d486fcb75ea720d2b5d3d6f53560769bcc8f2081740f0e21ec6add538251f20b2bddf6db3a825081bfceb85226c42f2e8326320480c6e0277796e7ef5683850d01c11f63a17f9fb6d99", 0xc6, 0x8080, &(0x7f0000004080)=@ll={0x11, 0x4, r1, 0x1, 0xae, 0x6, @remote}, 0x80) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000004100)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000004140)=[0x101]) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000004180)='/dev/ashmem\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000004340)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x11000100}, 0xc, &(0x7f0000004300)={&(0x7f0000004240)={0x94, r4, 0x400, 0x7, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x94}}, 0x20008000) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000004380)=0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/rtc0\x00', 0x400, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000004400), &(0x7f0000004440)=0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) sendto(r0, &(0x7f0000004480), 0x0, 0x40000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007780)=[{{&(0x7f00000044c0)=@nl=@proc, 0x80, &(0x7f0000007700)=[{&(0x7f0000004540)=""/31, 0x1f}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/85, 0x55}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/120, 0x78}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/113, 0x71}], 0x7}, 0x76}], 0x1, 0x0, &(0x7f00000077c0)) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffe) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000007800)={0x101, {{0xa, 0x4e20, 0x0, @empty, 0x7}}, {{0xa, 0x4e22, 0x5, @mcast2, 0x4}}}, 0x108) write$P9_ROPEN(r5, &(0x7f0000007940)={0x18, 0x71, 0x2, {{0x4, 0x2, 0x7}, 0x1}}, 0x18) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000079c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000007a80)={&(0x7f0000007980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007a00)={0x14, r6, 0x801, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000007ac0), &(0x7f0000007b00)=0x4) preadv(r3, &(0x7f0000007f40)=[{&(0x7f0000007b40)=""/216, 0xd8}, {&(0x7f0000007c40)=""/173, 0xad}, {&(0x7f0000007d00)=""/119, 0x77}, {&(0x7f0000007d80)=""/203, 0xcb}, {&(0x7f0000007e80)=""/150, 0x96}], 0x5, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000008100)={&(0x7f0000007fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000080c0)={&(0x7f0000008000)={0x90, r6, 0x712, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3b2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="6223abec914607dcfeb173c00c4c29ee"}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x48084) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000008140)={'syzkaller0\x00', {0x2, 0x4e23, @multicast1}}) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000008180)='/dev/urandom\x00', 0x10000, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000008200)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000082c0)={&(0x7f00000081c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000008280)={&(0x7f0000008240)={0x28, r8, 0x301, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = gettid() getgroups(0x1, &(0x7f0000008480)=[0xffffffffffffffff]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000008800)=0x0) r12 = getegid() r13 = fcntl$getown(r3, 0x9) stat(&(0x7f0000008840)='./file0\x00', &(0x7f0000008880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000008900)={0x0, 0x0, 0x0}, &(0x7f0000008940)=0xc) sendmmsg$unix(r0, &(0x7f0000008a80)=[{&(0x7f0000008300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000008440)=[{&(0x7f0000008380)="350e927da6b0deaed92acabef5ac39e6f5a2b6838e5773751bab62de84c37de1b1814168783c923880aa6acfaf2d737a4d38e6aa833461253f4815e378d9745c405b897e6bb45f5e70771ac77be2bbb3770d380ef64336308266c1c93440f9afa5528e177ab259bc18dcb5113f55f1064fb63abbf5f0498e7247fcf471c5a41e3802c6e8831453616af48223096df50291f90cfafc39c99635c7692b44e24c3086f7a368d4f5e93143803d311d85ddc7", 0xb0}], 0x1, &(0x7f00000084c0)=[@cred={0x20, 0x1, 0x2, r9, r2, r10}, @rights={0x30, 0x1, 0x1, [r0, r7, r3, r7, r0, r0, r5, r0]}], 0x50, 0x4000}, {&(0x7f0000008540)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000087c0)=[{&(0x7f00000085c0)="8ad705005bd0fde7eb37b6e41757d6628279809bc7ee78f253bbd7e2ab49a0a18a0e179bd0827d42cefed08d1cab0aa94ab3eee4bbbba58a942202186bb13804d458743184955c50cbac63472deb9c6ec4c68b8899d546d1227a7ffab3fd815badb37ac91c305f1c67422f5596e3866dd80fd2d7d5b3b5a58532148e3039f02c40a6f233cabe2165d70335fdb8fcef8bde018f1f1b755673583fc95243d696036b352e702b8b885aea3e85c73fe59c10f9effc4a6085fe60e0c1bacb4ad3d01bfaf8109ffde8b514c9cfb744eedf931ee4899ae195cf8b2f152a26050fb782de25e9e2790319", 0xe6}, {&(0x7f00000086c0)="cd44fd1bf31af260c871c34dc4b6c842f1a2193d74c4f60108d4797a249f1d8c9aae567cc9730e860a96b7d25a9d8f6769311ce63679cb35985eebf7e09e00fe6b263b92e058331f30bff64aa9ad4701c4aa0973114dc12cd90b6259d766086918e57ff91c337a6c4d94066a043fc61f7bd9d7c17b24821947fbedadd91d5cb49b53f456f3580ada1967d9288ca779e3e325eb090ef1bf7bcf520808581a776eb9720d3ed68c7e43bb584bf0e29ad6761659270408b22947d3f2d8ad8ebd5368c9046e717bd85decee4a82d1967f0a7ef3ac7acad1dea90bf629c6e1954c688c24a407fbd0cb7484ceedf9d1", 0xec}], 0x2, &(0x7f0000008980)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r7, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r2, r12}, @rights={0x28, 0x1, 0x1, [r5, r7, r5, r5, r7, r7]}, @cred={0x20, 0x1, 0x2, r13, r2, r14}, @cred={0x20, 0x1, 0x2, r15, r2, r16}, @rights={0x10}, @rights={0x20, 0x1, 0x1, [r0, r7, r5]}, @rights={0x10}], 0xf0}], 0x2, 0x20000000) 18:49:50 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000200)="0adc1f023c123f3188a070") setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0), 0xb6) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x400, 0x4) r2 = getpid() capget(&(0x7f0000000040)={0x399f1336, r2}, &(0x7f0000000140)={0x0, 0x100000000, 0x9, 0x4, 0x7, 0xb8}) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) 18:49:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40, 0x20) pread64(r0, &(0x7f0000000280)=""/56, 0x38, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='batadv0\x00') r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x20480, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000180)={0x3, {{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x108}}}, 0x88) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) accept4(r1, &(0x7f00000002c0)=@x25, &(0x7f0000000340)=0xfffffffffffffe57, 0x80000) r4 = fcntl$getown(r2, 0x9) write$cgroup_pid(r3, &(0x7f0000000380)=r4, 0x12) 18:49:50 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:50 executing program 4: getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4d, 0xa}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], r0, 0x2}, 0x48) 18:49:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 287.855371] binder: BINDER_SET_CONTEXT_MGR already set [ 287.860805] binder: 7585:7587 ioctl 40046207 0 returned -16 [ 287.870936] binder: 7585:7587 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 287.878959] binder: 7585:7587 got reply transaction with no transaction stack [ 287.887079] binder: 7585:7587 transaction failed 29201/-71, size 56-40 line 2920 [ 287.956401] EXT4-fs (sda1): re-mounted. Opts: [ 287.971313] binder: BINDER_SET_CONTEXT_MGR already set [ 287.982021] binder: 7600:7607 ioctl 40046207 0 returned -16 [ 287.988455] binder: 7600:7607 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 287.996415] binder: 7600:7607 got reply transaction with no transaction stack [ 288.027727] binder: 7600:7607 transaction failed 29201/-71, size 56-40 line 2920 18:49:51 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140), 0x84800) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x101000, 0x0) connect$inet6(r0, 0x0, 0xfffffffffffffdc6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$void(r1, 0x5451) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:kvm_device_t:s0\x00', 0x22) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xaa8}, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:49:51 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x1ca, 0x0, 0x0, 0x0, 0x8, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x10001, 0x0, 0x0, 0x2000, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, @perf_config_ext, 0x50, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10b, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000040), 0x0, 0x1}, 0x20) unlink(&(0x7f0000000940)='./file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x9011, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000980)={0x110, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000100), &(0x7f0000000280)=[0x20, 0x20, 0x0, 0x28]}, 0x3}}, @release, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680)=[0x30, 0x78]}, 0x2}}, @reply={0x40406301, {0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x28, 0x8, &(0x7f0000000700)=[@ptr={0x70742a85, 0x0, &(0x7f00000006c0), 0x1, 0x2, 0x1f}], &(0x7f0000000740)=[0x68]}}, @free_buffer={0x40086303, r4}, @increfs={0x40046304, 0x1}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x4, 0x3}], 0x65, 0x0, &(0x7f00000008c0)="0b6470cedb622489945e92cb392e9ea35687e06f039f0229f0c9bf331a66a6db440a65305a9de72cf4b59932a8d0caf353d03ea2134b14ca1f137d27f0f1ddf16d2da3119315abaac3231a70cfe62e2990abd1765bffffd8d91b69282e28ea98a23e580c7d"}) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="822a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0xa0, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000100), &(0x7f0000000140)=[0x78, 0x0, 0x30, 0x48, 0x18, 0x20, 0x0, 0x38]}, 0x8}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000280), &(0x7f00000002c0)=[0x78, 0x28, 0x78, 0x18, 0x20, 0xe2062f1ea1770d29]}}}, @acquire={0x40046305, 0x3}], 0xb5, 0x0, &(0x7f0000000540)="c9117bf1ef85da53e33231d618988c9b6ebf912dc9bfc8b07548112cfead0a04c3a722bac43c958c8169cf0d41212c2abd58fd9dfd6eea3ae5ba3cef180a63c67fb54fc54d30add3cb0ce0fb77003b2504ba44a8b108f59db1ae5c53186b30dbc65e438eeb188806714bab775075f7a7b273d99743aed66ff982e956531e436697ddc8518a47c7be9b7a6532b6757356ae446a30dad37192236c6566c41a3fc55a4af61279b65ddd9d70fcbb3a3b1c171ed87ac961"}) getpid() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="5f1067b123e4acea49d35ac3050000000000000000"], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 18:49:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x1000001a2) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1) 18:49:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, &(0x7f0000000680)=@rc, &(0x7f0000000700)=0x80, 0x80800) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000740)=""/73, &(0x7f00000007c0)=0x49) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9904949b", @ANYRES16=r4, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r5 = dup2(r0, r1) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000080)=""/25) mremap(&(0x7f0000c84000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) ioctl$TCSBRKP(r5, 0x5425, 0x5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000640)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x720, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 288.288432] binder: BINDER_SET_CONTEXT_MGR already set [ 288.293831] binder: 7550:7627 ioctl 40046207 0 returned -16 [ 288.299689] binder: 7550:7626 got transaction to invalid handle [ 288.305870] binder: 7550:7626 transaction failed 29201/-22, size 0-32 line 3012 [ 288.313502] binder_alloc: 7550: binder_alloc_buf, no vma [ 288.319109] binder: 7550:7626 transaction failed 29189/-3, size 24-8 line 3135 18:49:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffa) setpriority(0x0, 0x0, 0xc1eb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x1, 0x0, &(0x7f0000000100)="14"}) pread64(r0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x1e) 18:49:51 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000000)=""/8, 0x8, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 288.362978] binder: 7631:7637 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 288.383207] binder: 7631:7637 got reply transaction with no transaction stack [ 288.392152] binder: 7631:7637 transaction failed 29201/-71, size 56-40 line 2920 [ 288.422069] binder: 7640:7643 got transaction to invalid handle [ 288.428653] binder: 7640:7643 transaction failed 29201/-22, size 0-32 line 3012 [ 288.444731] binder: 7640:7643 got transaction with invalid offset (0, min 0 max 24) or object. [ 288.482202] binder: 7640:7643 transaction failed 29201/-22, size 24-8 line 3197 [ 288.493828] binder: BINDER_SET_CONTEXT_MGR already set [ 288.507412] binder: 7640:7657 BC_ACQUIRE_DONE u0000000000000000 no match [ 288.526622] binder: 7649:7655 ioctl 40046207 0 returned -16 18:49:51 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400001, 0x0) fcntl$dupfd(r1, 0x406, r0) [ 288.549575] binder: 7649:7663 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 288.569067] binder: 7649:7663 got reply transaction with no transaction stack [ 288.586999] binder: 7649:7663 transaction failed 29201/-71, size 56-40 line 2920 18:49:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 288.708215] binder: 7675:7678 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 288.727924] binder: 7675:7678 got reply transaction with no transaction stack [ 288.744961] binder: 7675:7678 transaction failed 29201/-71, size 56-40 line 2920 18:49:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x2000000000000223, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) renameat2(r1, &(0x7f0000000200)='./file0\x00', r1, 0x0, 0xfffffffffffffffe) 18:49:51 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) ioctl(r0, 0x5, &(0x7f0000000280)="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") ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000000180)) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000014c0)=0xfff, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000001340)={0x0, 0x4, 0x2, 0x3, r2}) ioctl$TCSETS(r3, 0x5402, &(0x7f00000012c0)={0x2, 0x100, 0x0, 0x401, 0x1a, 0x9417, 0x8, 0xe1b, 0x1ffe000, 0x48732bd7, 0x400, 0x3}) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000001380)=0x401, 0x4) fstat(r1, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() setregid(r4, r5) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000080)={'team_slave_1\x00', 0x400}) setsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f0000001480), 0x4) r6 = dup3(r0, r1, 0x80000) setsockopt$packet_int(r6, 0x107, 0x1b, &(0x7f00000013c0)=0x7, 0x2ff) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000001300)={0x57, 0x20000000000, 0x6, {0x9, 0x10001}, {0x3f, 0x5}, @cond=[{0x1, 0xf08, 0x9, 0x40000000000000, 0x9, 0xd4ca}, {0x0, 0x7fffffff, 0xc8b, 0x4, 0x8, 0x100}]}) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x2eb7, 0x9, 0x4, 0xffffffffffffffff, 0x0, 0x2, 0x80, 0x1, 0x5bc, 0x7, 0xb07d, 0xfffffffffffffffe, 0xf, 0x9c5, 0x8000, 0x7ff, 0x75ec062c, 0x95, 0x3f, 0x4, 0x4, 0x4e, 0x78d, 0x7, 0x1, 0x3ff, 0x82d8, 0x8, 0x0, 0xfffffffffffffff7, 0x1, 0x1f, 0x80000001, 0x1, 0x100000001, 0x2, 0x0, 0x44f, 0x4, @perf_config_ext={0x3, 0x9}, 0x1002, 0x59, 0xff, 0x0, 0x4, 0x6, 0x9}, r2, 0x6, r6, 0x3) 18:49:51 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @empty}, 0x1, 0x2, 0x0, 0x1}}, 0x80) socketpair(0x14, 0xf, 0x101, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000180)={0x67446698, 0x0, 0x1, 0x4, 0x4, "ae15a10d75b100c990ec4d513a5a48c090ad3fb489c7e8281f4a75f6539530f24627a86413405a85dba37a27c9dc3ec710df952ab414d8e8fee109edcf3b21bde453e5d4e3157dcc0ce52ab64cc77fefcbfbf2f146ad6cbe58e1211452e25cb22002382290bfecc00a64cb50147b21dc1babc4fdb1a07741e0f25aab96ca739a52504f10ba850be6d656930ea98b0cadf2abcd6b41c874c2f39a52c81c5750a2e8164325f38e4befc2eb06466a6cfdcd741ae81a53126f39a90511ef854f09732cd4f2a665dcd6409a216291a90e75cf"}, 0xe0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b6a4a2809302000000030343026c262369251e445226d20f0df085228b000400fe7f", 0x2d}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x81) ioctl$sock_ifreq(r4, 0x890b, &(0x7f0000000140)={'ip6gretap0\x00', @ifru_map}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000300)=0x101, 0x4) 18:49:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 288.956432] binder: 7682:7688 unknown command 25344 [ 288.985810] binder: 7682:7688 ioctl c0306201 20000000 returned -22 [ 288.992747] EXT4-fs (sda1): re-mounted. Opts: [ 289.005273] binder: 7682:7696 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:52 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0xffffffffffffff7c) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$selinux_load(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908a62da2987ab4a993e15d031da8c2433bb66697bce06294fe5e96a1504b87146b18e4ea823343182ad8479954c11ea393a826b682af619c0530c430ea30330efafbefff413b25b49370ee24ac5d0a8c58cdc21ee90637c4a62ffe2348c2c3809210d6cd01593a1354af795ab4625de2c94c3cd89fbbfbeebd425e50b3650549f097e1a31ff5bedabc821c01000000000000850b234c002011ddb8a5d2b88112b938b7491104a8197902119d24af104d4eac8cf7006e53f051509f"], 0x5e) r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="7d1fc4a43bfbae6fc9fea32de6d92e25ee46984c1e56e9c8b22eff63bfd53bd9b54f7d6621812070aa3ed7714bdc16c13504e705c9290dc569dfcb330262532e2cc1647d6bdb627a30e3be741a9160f0591b064789addb55e1c0cb3a94df4ac9aecdcf89fb0000000000000000000000"], 0x70) fcntl$setstatus(r2, 0x4, 0xbfc) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) getpid() ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffff, 0x7ff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000002040)='./bus\x00', &(0x7f0000002080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) 18:49:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x8, 0x800, 0x9a5) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08040000", @ANYRES16=r3, @ANYBLOB="150328bd7000fbdbdf250d000000180004001400010062726f6164636173742d6c696e6b0000c800040044000700080004000100ffff08000400080000000800030004000000080001000b000000080003000100000008000400020000000800030000000000080003002c5d00002c00070008000200020000000800040037ffffff0800020001000100080001000400000008000400001000000c00070008000300aa0000000c00070008000200080000003c00070008000400020000000800020008000000080002000200000008000300000000000800030001f0ffff0800040002000000080002007f00000078000100100001007564703a73797a3000000000100001007564703a73797a32000000000c00020008000100000000001c0002000800040007000000080003000002000008000100060000002c0004001400010002004e22e000000100000000000000001400020002004e20e0000001000000000000000098000500140002000800030000fcffff080002000b000000080001006962000014000200080004000000000008000300040000004c000200080001000c000000080002000300000008000300000001000800010002000000080004000500000008000200800000000800020006000000080004000700000008000200950b00000800010075647000080001006962000008000100657468003c0002000800010008000000040004000800010093020000040004009dff74080001000000000008000100ff0100000800010008000000080001000700000038000200080002008e583f37080001000100008008000100c5400000000000000000020009000000080002000004000008000100040000004c00070008000200030000000c000300faab00000000000008000200903f00000c00030001010000000000000c000300ff7f00000000000008000100020000000c0003000100000000000000680005003c00020008000200080000000800040001000000080001000300000008000300020000000800010001000000080004000900000008000200040000000c000200080003000500000008000100657468001400020008000400050000000800040009000000dc0005003c0002000800020002000000080001000200000008000200000000000800020006000000080003003e8f0000080003000400000008000200000000002c000200080002000181ffff080004004dffffff0800040001000100080004000101010400000200080000001c000200080004004506000008000400a8000000080001001b0000002c000200080001000000000008000400ff0300000800030003000000080003000000000008000400020000001400020008000400030000000800020009000000080001006962000000"], 0x408}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x20802, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000006c0)=0x1b) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) getrandom(&(0x7f0000000040)=""/64, 0x40, 0x1) fcntl$notify(r0, 0x402, 0x10) 18:49:52 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x3, 0x4, "663e6fbb49eae079ed92c0b90dfc86a77b20cf0d2a2aa2f687348e23f374a09bda8dae1cb5385114cb08290e34a620bb943a65ec19c435c7b7a8e420841c8c65", "0d5aa17a4255877b3824baa9a0019b754fd26fe76df9cf99ef9e276ca24edccf2350024f8995acee87f8991b7991699ffc856eae76cf897e21370773699f6d7a", "e210fd056df5303157f629d3739c657e42cae75fdce7b92edaf2f23ae43eb863", [0x6, 0x8]}) getpgrp(0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x10001) capset(0x0, &(0x7f00000000c0)={0xd3bd, 0x0, 0x9, 0x9028, 0xfa7, 0xc35}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCSBRK(r2, 0x5409, 0x4) [ 289.034376] EXT4-fs (sda1): re-mounted. Opts: [ 289.040918] binder: 7682:7696 got reply transaction with no transaction stack [ 289.059635] binder: 7682:7696 transaction failed 29201/-71, size 56-40 line 2920 [ 289.171887] SELinux: failed to load policy 18:49:52 executing program 0: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:52 executing program 4: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x0, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/14, 0x34c}], 0x1) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000100)=0x1, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000200)=0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000013e000/0x4000)=nil) io_setup(0x0, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0xff4, 0x2}) [ 289.193121] binder: 7711:7718 unknown command 25344 [ 289.196141] SELinux: failed to load policy [ 289.201778] binder: 7711:7718 ioctl c0306201 20000000 returned -22 [ 289.227682] binder: 7711:7718 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 289.245370] binder: 7711:7718 got reply transaction with no transaction stack [ 289.258527] binder: 7711:7718 transaction failed 29201/-71, size 56-40 line 2920 [ 289.323745] EXT4-fs (sda1): re-mounted. Opts: 18:49:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) dup(0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x400001, 0x0) fcntl$dupfd(r1, 0x406, r0) 18:49:52 executing program 3: getgroups(0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$RTC_PIE_ON(r0, 0x7005) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) getdents(r1, &(0x7f0000000080)=""/57, 0x39) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:52 executing program 0: getgroups(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 289.481409] binder: 7746:7751 unknown command 25344 [ 289.491056] binder: 7746:7751 ioctl c0306201 20000000 returned -22 [ 289.509466] binder: 7746:7751 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 289.517144] binder: 7746:7751 got reply transaction with no transaction stack 18:49:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 289.525769] binder: 7746:7751 transaction failed 29201/-71, size 56-40 line 2920 [ 289.625004] binder: 7760:7762 unknown command 4219648 18:49:52 executing program 0: getgroups(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 289.655699] EXT4-fs (sda1): re-mounted. Opts: [ 289.661186] binder: 7760:7762 ioctl c0306201 20000000 returned -22 [ 289.678363] binder: 7760:7767 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 289.698058] binder: 7760:7767 got reply transaction with no transaction stack 18:49:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x8000b, 0x4) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @broadcast, @remote}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 289.723211] EXT4-fs (sda1): re-mounted. Opts: [ 289.742600] binder: 7760:7767 transaction failed 29201/-71, size 56-40 line 2920 18:49:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 289.873429] binder: 7778:7779 unknown command 4219648 [ 289.902087] binder: 7778:7779 ioctl c0306201 20000000 returned -22 [ 289.925867] binder: 7778:7782 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:49:52 executing program 0: getgroups(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:52 executing program 4: getrandom(&(0x7f0000000100)=""/44, 0xf22eeb60ddf55287, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) r1 = dup3(r0, r0, 0x7ffff) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}) ioctl$EVIOCGREP(r1, 0x40047451, 0x0) [ 289.962931] binder: 7778:7782 got reply transaction with no transaction stack [ 289.971754] EXT4-fs (sda1): re-mounted. Opts: [ 289.994182] binder: 7778:7782 transaction failed 29201/-71, size 56-40 line 2920 [ 290.047718] EXT4-fs (sda1): re-mounted. Opts: 18:49:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 290.161874] binder: 7793:7799 unknown command 4219648 [ 290.167107] binder: 7793:7799 ioctl c0306201 20000000 returned -22 [ 290.191141] binder: 7793:7799 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 290.198352] binder: 7793:7799 got reply transaction with no transaction stack 18:49:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000240)={0x4, 0x70, 0x10001, 0xc2c, 0x0, 0x400, 0x0, 0x0, 0x20192, 0x4, 0x4, 0x400, 0x853, 0x3, 0x7f, 0x20, 0xa9, 0x2, 0x7, 0x1, 0x9, 0x75, 0x7, 0x8, 0x2, 0x4, 0x2, 0x800, 0x4, 0x101, 0x7, 0x4, 0xf5, 0x4f0, 0x2, 0x8, 0x9, 0x1000, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9}, 0x20188, 0x7, 0x0, 0x6, 0x10, 0x2, 0x4df}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000300)={{0x3, 0x2, 0x6, 0x0, 0x2}, 0x9c4c, 0x7, 0x400}) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x41, 0x3ff}) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x4005d52}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000380)={'ipv\xf7U\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00'}, &(0x7f00000003c0)=0xffffffffffffff8f) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0xc200, 0x0) write$P9_RWRITE(r4, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x1f74}, 0xb) write$P9_RCLUNK(r4, &(0x7f0000000140)={0x7, 0x79, 0x2}, 0x7) 18:49:53 executing program 3: r0 = getpid() capset(&(0x7f0000000080)={0x20071026, r0}, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 18:49:53 executing program 0: getgroups(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f0000000380)) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlockall(0x5) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 290.208312] binder: 7793:7799 transaction failed 29201/-71, size 56-40 line 2920 18:49:53 executing program 5: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000340)=[{0x0}], 0x2010002, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/42) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{}, {0x20, '-'}, {0x20, 'trusted.overlay.upper\x00'}, {0x20, 'trusted.overlay.upper\x00'}, {}, {0x20, '/selinux/avc/cache_threshold\x00'}, {0x20, 'trusted.overlay.upper\x00'}], 0xa, "6a5f4ab33d67c36711daed9e87e7c92af9ea599069f53d219020e8df472373a4ebfd186e98ac429d0c65d1752245ccc1409253a69b7ba3f92e6814846eb817080a06ecd35718782fc7bb477d51e0030bdbc9e97180643936287eba9b2d2b6e8f624eb32de4339b5a013237d3452623612ddae34613fb89ce13d08479e461a1d0108ef92b6ebb86699de3b38e654e14e01b5c9aa81fa47e33577c9f9dd05a6c7d2da45025472a972dd7e0ba785f2610cbc15b8ddc8ef9010269f9479296f19de6564f37bb0c31c47795a03b75d4"}, 0x13f) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000014c0)=""/148, 0x94}], 0x1, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net\x0ff~b_triestat\x00\x02\a\xb8\xb3Q\xb5\x8a\xeb\xd8\x1d\xc8\xe8\xc0M&') preadv(r2, &(0x7f0000000480), 0x1000000000000268, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb26020349ba3cf4acd10eee078bef847227af7e7cb0db0af700000000000000000000000034f0658fae1f7125c18bc303d999450150de8a04e827e00f0241d5e3ce85995cb224af0c5f994b8dda554c4d8701e089507a03a76234f0f66251c58e24002d69e52794c3fdfe7bbcb666e993f0c76025ac3cd3aae74a9cb02755"], 0x26, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0xac, {0xffffffff, 0x9, 0x7fff, 0x2, 0x8, 0xffffffffffffffff}}) [ 290.311952] binder: release 7808:7814 transaction 117 out, still active [ 290.311967] capability: warning: `syz-executor3' uses deprecated v2 capabilities in a way that may be insecure [ 290.318732] binder: undelivered TRANSACTION_COMPLETE 18:49:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:53 executing program 3: socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlockall(0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) [ 290.357307] binder: send failed reply for transaction 117, target dead [ 290.367759] EXT4-fs (sda1): re-mounted. Opts: 18:49:53 executing program 0: getgroups(0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80080, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x101000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000280)="85ba6c428b757c3cd1fe58dd5748e722", 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) unlinkat(r0, &(0x7f00000001c0)='./file0\x00', 0x200) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x8000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x90000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9f11) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 290.455773] binder: release 7823:7828 transaction 119 out, still active [ 290.472002] binder: undelivered TRANSACTION_COMPLETE [ 290.514576] binder: send failed reply for transaction 119, target dead 18:49:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}, @exit_looper], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:54 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x80) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r3, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbc}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x15) ioctl$TIOCSCTTY(r2, 0x540e, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0xff7f) 18:49:54 executing program 0: getgroups(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', r2}) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="000000ed000000009b51982200000000b757200a4f3ed93b6c6904e49f9fef93f814ce528028819f6a1c0e5fb8913e3a2a7282a2777509b3d284d2149621b9b0d1f3e25f855889c9ae32718945d686e097b4213f5ba7b678e2e76565966dd449db80fffa8cd1312202b967d65eeb725f3cda20a0cd5a8e4d7d1a09aaea3242081e8daa27784d3046a18b458d30b04ade772d62edd6b48619b15ccf9cc5b1bb4d3a06c304730dc2e762bb0aab341bcedecbfe9716e4833088de48037d24d0453710c723dc091d21a29c3b8ec9a4e2bbb616a234e77959dd0c9e4baeeb20ff02005fdd4666125082c842fc84121f"], 0x8) r3 = dup2(r1, r1) connect$inet(r3, &(0x7f0000001400)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x4e20, @remote}, {0x6, @random="f83c33994cd2"}, 0x26, {0x2, 0x4e20, @remote}, 'netdevsim0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect(r1, &(0x7f0000000140)=@generic={0x7, "a76ab14aa9cf3f239b0ec7ddad992412fd301a8f8b20c64b3cb7ff19e4bb260fe3ed81fa1dad3455abd57e4f296450bc26853fd01045bf01eeed171e41fbd5b64cfaa0971181179c5cf87b86e1059b32611e6cea043c9d45797ad173247dc16095cbfdaab7409a5c76de6767ceaf5744e6a3b263fe7db9dce7f7db2bfce2"}, 0x80) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/249, 0xf9}], 0x2, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000d7, 0x0) 18:49:54 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) fsync(r2) ioctl$int_in(r1, 0x5452, &(0x7f0000000580)=0xe2e) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x7fff, 0x100000001, 0xfffffffffffff000, 0x0, 0x80, 0x2, 0x9, 0x5, 0x9, 0xd8, 0x1000, 0x10001, 0x1f, 0x4, 0x9, 0xef, 0x200000, 0x30, 0x9, 0x40, 0x3, 0x5bca, 0x0, 0x9, 0x40, 0xffffffff, 0x41f, 0x200, 0x5, 0x3, 0x9, 0xfffffffffffffc01, 0xfffffffffffffffa, 0xa61, 0x100000001, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x10, 0x0, 0x9, 0x0, 0x1f, 0x0, 0x10001}, r3, 0x5, r0, 0xa) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) ftruncate(r4, 0x2007fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 18:49:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000140)='(keyring.mime_typevboxnet0wlan0\x00', 0xffffffffffffffff}, 0x30) sched_getaffinity(r1, 0x8, &(0x7f0000000200)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0064fd51148d0113c19fdb7220690260b5809d4efcb26e86962d9367f271eda73b70b9705a91233649ae495eca6e0098a7121dfcfbd1551564dcb514ff4916df7864e436dcfe1d"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x4}, 0x48) exit(0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x91) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='\v', 0x1}], 0x1) prctl$PR_GET_KEEPCAPS(0x7) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') [ 291.132778] binder: release 7854:7863 transaction 121 out, still active [ 291.143658] binder: undelivered TRANSACTION_COMPLETE 18:49:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:49:54 executing program 5: rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f000094f000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x108) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1, 0x1}, {}, {r3, 0x1}], 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000004c00)=[{{&(0x7f0000000100)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000280)=""/212, 0xd4}], 0x4, &(0x7f0000000400)=""/174, 0xae}, 0x3}, {{&(0x7f00000004c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/195, 0xc3}], 0x2, &(0x7f00000006c0)=""/241, 0xf1}, 0x7}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000000840)=""/129, 0x81}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/28, 0x1c}, {&(0x7f0000003940)=""/109, 0x6d}, {&(0x7f00000039c0)=""/245, 0xf5}, {&(0x7f0000003ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000004b40)=""/178, 0xb2}, 0x6}], 0x3, 0x2103, &(0x7f0000004cc0)={0x0, 0x1c9c380}) read(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pause() [ 291.173286] binder: send failed reply for transaction 121, target dead [ 291.218549] binder: 7877:7878 ioctl c0306201 0 returned -14 [ 291.227178] binder: release 7877:7878 transaction 123 out, still active [ 291.241532] binder: undelivered TRANSACTION_COMPLETE 18:49:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:49:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregset(0x4205, r1, 0x206, &(0x7f0000000200)={&(0x7f0000000180)="6870eaf6806a470fe7463ce10885656f3c4d1d42fb3939354b2952d2f4872a9003f8e9ffbfae5f0b9709f1549fce9b1432402804d95b14b3776f59498fea631241344ebc", 0x44}) mkdir(&(0x7f0000000040)='./file1\x00', 0x21) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 291.281181] binder: send failed reply for transaction 123, target dead 18:49:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 291.346180] binder: 7890:7894 ioctl c0306201 0 returned -14 [ 291.353109] binder: release 7890:7894 transaction 125 out, still active [ 291.365840] binder: undelivered TRANSACTION_COMPLETE [ 291.381305] binder: send failed reply for transaction 125, target dead [ 291.459639] binder: 7901:7903 ioctl c0306201 0 returned -14 [ 291.474602] binder: release 7901:7903 transaction 127 out, still active [ 291.484437] binder: undelivered TRANSACTION_COMPLETE 18:49:54 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:54 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = getpgrp(0x0) ptrace$cont(0xffffffffffffffff, r1, 0x401, 0x200) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0xe311, 0x0, 0x0, 0x40030, 0x0) [ 291.505752] binder: send failed reply for transaction 127, target dead 18:49:54 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:54 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 18:49:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001100)='io.stat\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000001140)=[@mss={0x2, 0xa70}], 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)=""/4096, 0x1000) fcntl$getownex(r1, 0x10, &(0x7f00000011c0)={0x0, 0x0}) ptrace$setsig(0x4203, r2, 0x40, &(0x7f0000001200)={0x25, 0x401, 0x200}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000012c0)={'syz_tun\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="4c00000000f4ffffff00000000000000000000000000000000000000000008000000000000000000000000000000000005c038f7b4f6de0950319271b55430abdb620cb1a15ea82344a3d9f1d5ada621dd8c66d0d5d069b8a20e21a8309c3e82ec427b60d30f635fd6376863d06a11da07d9e3cf4bb9702035bad37a06"]}) signalfd(r0, &(0x7f00000010c0)={0x3}, 0x8) prctl$PR_GET_THP_DISABLE(0x2a) openat$cgroup_ro(r1, &(0x7f0000001180)='cpuset.effective_mems\x00', 0x0, 0x0) 18:49:55 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0xb, 0x0, &(0x7f0000000040)=0xffffff73) 18:49:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat(r1, &(0x7f0000000080)='./file1\x00', 0x8124, 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0xa0140100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x11) wait4(0x0, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c450000000000000000800000000000000000000000000000f2000002000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:55 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) 18:49:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x2400000, 0x936a}], 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000019007f5300fe01b2a4a280930a600000ffa843359154bda02c0001002caa976b00d1000019000500fe800000000000d21338d54400136ef75afb83de448daa7227c440b8220000060cec4fab91d4000000", 0x55}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x150, r3, 0x801, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8640}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="e9c9d93fe47b8d58ea3bb335b58ccc4e"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x80) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) fcntl$setflags(r2, 0x2, 0x1) r4 = socket$key(0xf, 0x3, 0x2) dup3(0xffffffffffffffff, r4, 0x0) 18:49:55 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000240)=""/153, 0x99}], 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffe03}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000780)={0xff, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x11, 0x10000004) add_key(&(0x7f0000000340)='trusted\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) poll(0x0, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write$P9_RREAD(r1, 0x0, 0x1f7) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000005c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) openat$cgroup_int(r2, &(0x7f0000000680)='cgroup.max.descendants\x00', 0x2, 0x0) getxattr(&(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)=""/135, 0x87) [ 292.259945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pig=7971 comm=syz-executor3 [ 292.298363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7973 comm=syz-executor3 [ 292.328058] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=25 sclass=netlink_tcpdiag_socket pig=7978 comm=syz-executor3 [ 292.329839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=7979 comm=syz-executor3 18:49:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:55 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000380)=ANY=[], 0x0) fadvise64(r0, 0x0, 0x0, 0x4) read(r0, &(0x7f0000000040)=""/188, 0xbc) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) [ 292.408868] binder: send failed reply for transaction 129 to 7911:7916 [ 292.418448] binder: undelivered TRANSACTION_COMPLETE [ 292.435167] binder: undelivered TRANSACTION_ERROR: 29189 18:49:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-'}, 0x28, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0xfffffc, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:devicekit_disk_exec_t:s0\x00', 0x2b, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:55 executing program 3: socket$inet(0x2, 0x40000000080000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44}, {0x20000000000006}]}, 0x10) sendmmsg(r1, &(0x7f0000003040), 0x304, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r4 = dup(r3) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_pts(r4, 0x40) r6 = dup3(r5, r3, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}) write$UHID_INPUT(r6, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) connect$inet(0xffffffffffffffff, 0x0, 0x0) 18:49:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xb, 0x100000000000914, 0x5}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x10) r1 = getpgrp(0x0) syz_open_procfs(r1, &(0x7f0000000000)='clear_refs\x00') 18:49:55 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ec, &(0x7f0000000100)="37d9b558ef711a696b6148aa3df6a77e1b78b639be2b966861fb38e65dda877a29f1caf10b681abdb60ca3f155e302dd5b469de19d72f758ad6de48c9dab668ff7a384380853b6209f339bdf39c18be0228989fc6ca5761378566542044fe87146e9985b329737de34025f32051df48c95295c55f4b75162f3d16fa66160ce0f9bf2d9f9c8c13185d9e2f7b7295524dcd6c484256678014d656858bfe7b15deab7041029a7b0950bcedd2886dc9eaa51c35a0d7d937e5b70aa0b4981f0f2d3418fabd8dba8") socket$inet6(0xa, 0x3, 0x1a) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x3, 0xffffff3a, 0x0, @ipv4={[0x6], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 293.302877] binder: send failed reply for transaction 131 to 7986:7987 [ 293.309704] binder: undelivered TRANSACTION_COMPLETE [ 293.315045] binder: undelivered TRANSACTION_ERROR: 29189 18:49:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 18:49:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:58 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 18:49:58 executing program 5: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x11d0, 0x11, 0xf, 0x60a, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0x7}, [@typed={0x4, 0x47}, @generic="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", @nested={0x178, 0x20, [@generic="eb2b3d86f1fc62b48b79c69ec7630bd158705ee9c5f152e0fd699f8558711058dce81b35ffe9444fc74a56c0fb5d5d25738cab24c8c30ed54e890acea4559f0b369134ba585f4763fcc7b4174cfad9c9dbeb3a2e1d3af8b6afdbf26ded0c4ce02c4de3320b4241009fb0871e1119729a69ae638b2e8c1e777747361be6683beba4c77b9858fd621e62629222108ab8a2d1624fa7b1086b6d68bfbd8dc972fa1450b39190723f558b6f5cb8c0a7dfdacbc06a3d469f2a9279eb75aa825d1add387841eb9ad25c7992fe7b36463d49140e82abc5", @generic="7bdca03a0a73fc0e3527a9651086f4e9792e5c16318afe357d1d7eb7f77f8d459d08371a1b5077df33011c502d4305faa163c71ed81e72dd34cae190814a74cc62cc22fbcda3ed0b365d0588b574e2430a63b8d3404d631f50ee34bf0b0f2e38bbb781d19adbf8f86afe52c6e94cfa75756622d84a5f2886da0a02edb073def37536de32e2442cd763fccba652cfdd9cdf", @typed={0x8, 0x47, @u32=0x8}, @typed={0x8, 0x8c, @uid=r1}]}, @generic="0e2a48a17dccc418c7287b9959af066e02abc38f0e36d01b97662db05b30db4ebe5068073168775456bf89ed05", @nested={0x10, 0x89, [@typed={0xc, 0x7e, @u64=0x7fffffff}]}]}, 0x11d0}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2, 0x14, 0x0) r2 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000040)='selinux(\x00\xef\x12\xfd~\xc3Y:t\xa9\xe7\xe8JE\ra3\xd6r\x1a', 0x1c, 0x3) sendfile(r0, r2, 0x0, 0x40000) pwrite64(r0, &(0x7f0000000100)="14407ba8abba2b40e4e87cd7224c9c2eb8b58f0b3e496f994bc584823893ea7e811d48675df855502c5f1902cace3007fa72c6b67ae5e5823e00c068795c9d718b0039bb934ba9dd7acbf333770fe52601817b809f", 0x55, 0x0) 18:49:58 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x8c) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6400022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xc47d, 0x1) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) getgroups(0x9, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r9 = getgid() lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) write$P9_RWSTAT(r0, &(0x7f00000009c0)={0x7, 0x7f, 0x1}, 0x7) dup(r0) lsetxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010001000000000002000700", @ANYRES32=r2, @ANYBLOB="02000400", @ANYRES32=r3, @ANYBLOB="02000300", @ANYRES32=r4, @ANYBLOB="040000000000000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="00f90000", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r11, @ANYBLOB="10000100000000002000020000000000"], 0x74, 0x1) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 18:49:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:58 executing program 3: socket$inet6(0xa, 0xa, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x1, 0x8, 0xc50, 0x0, 0x2, 0x8000}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000500)) socket(0x1, 0x4, 0x10000) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) 18:49:58 executing program 4: socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18000}, 0xc) 18:49:58 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl$RTC_RD_TIME(r0, 0x80247009, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x100, 0x9, 0x9, 0x7fff}]}, 0x10) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000180)) [ 295.242005] EXT4-fs: 6 callbacks suppressed [ 295.242013] EXT4-fs (sda1): re-mounted. Opts: 18:49:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 295.305318] EXT4-fs (sda1): re-mounted. Opts: 18:49:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_selinux(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:devicekit_disk_exec_t:s0\x00', 0x2b, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '){:=bdev#em0\\\x00'}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='O\x14\xb7n\x81g\xf2\x1b\xdf;:+\xbb\xa2\x84\x84\xdd\xf2\xf5\xa3Z\xc65?t\xa2oA\xa8\x01\xb0\xa4\xd0\xaa\xa77\xa9\xbcl)\x90\x17\xc10|\xdc\x82\xec') fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:fonts_cache_t:s0\x00', 0x23, 0x2) sendfile(r0, r1, 0x0, 0x800000080008002) 18:49:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:58 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0xa) r1 = dup(r0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) write$cgroup_int(r2, &(0x7f0000000080), 0x2001007f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) set_robust_list(&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000140)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) [ 295.396932] audit: type=1400 audit(1556822998.333:45): avc: denied { bind } for pid=8065 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 295.470332] audit: type=1400 audit(1556822998.403:46): avc: denied { relabelto } for pid=8074 comm="syz-executor5" name="UNIX" dev="sockfs" ino=20153 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fonts_cache_t:s0 tclass=unix_stream_socket permissive=1 18:49:58 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') renameat2(0xffffffffffffffff, 0x0, r1, 0x0, 0x1) socket$inet6(0xa, 0x1, 0x5) preadv(r1, &(0x7f0000000480), 0x2000000000000113, 0x0) sendmsg$nl_netfilter(r1, 0x0, 0x0) 18:49:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 295.532895] EXT4-fs (sda1): re-mounted. Opts: [ 295.621409] EXT4-fs (sda1): re-mounted. Opts: 18:49:58 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x200006, 'batadv0\x00', 0x2}, 0xfffffffffffffd84) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) recvfrom$unix(r0, &(0x7f0000000200)=""/162, 0xa2, 0x2002, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) [ 295.829342] EXT4-fs (sda1): re-mounted. Opts: 18:49:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb4, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release, @clear_death={0x400c630f, 0x4, 0x3}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 296.007639] binder: send failed reply for transaction 133 to 8033:8035 [ 296.015370] binder: undelivered TRANSACTION_COMPLETE [ 296.020822] binder: undelivered TRANSACTION_ERROR: 29189 [ 296.068072] binder: 8117:8119 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 296.079348] binder: 8117:8119 got reply transaction with bad transaction stack, transaction 135 has target 8117:0 [ 296.095075] binder: 8117:8119 transaction failed 29201/-71, size 56-40 line 2935 [ 296.105348] binder: release 8117:8119 transaction 135 out, still active [ 296.137156] binder: send failed reply for transaction 135, target dead 18:49:59 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12001, 0x42) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xb) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0x7) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x1400) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x20080, 0x1) fstatfs(r0, &(0x7f0000000140)=""/108) ioctl$VT_DISALLOCATE(r1, 0x5608) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\\posix_acl_accessprockeyringnodev\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)="397524080d5e3dee167454427c9845540ae991fb8c93f8b978e96b479f40c95236bc43f7d189bd9c579fbad72905beb830143ff43cc332993ae808d7616b43b8a0f212030654296fb04b371f9f5573c514099080122cd932e9219b81b59bb18fdc765faf2bb0815e9df26d75aa9c58ebc75f35a3e1e93a60107c787e2b32d9814313f541871ce8c96b75850125817eba1f98829c612ff8a7b263a39a3cd0d15707a7b8c4c0173634b0396a5ec67a82df31f108c9af3836cb7b8631e79c3863bb5765", 0xc2, r0}, 0x68) bind$unix(r1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv4_getaddr={0x7c, 0x16, 0x20, 0x70bd2d, 0x25dfdbfe, {0x2, 0xccc1664ee06139e5, 0x11, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x14}, @IFA_BROADCAST={0x8, 0x4, @multicast1}, @IFA_LABEL={0x14, 0x3, 'sit0\x00'}, @IFA_LABEL={0x14, 0x3, 'veth1_to_team\x00'}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_LABEL={0x14, 0x3, 'veth0_to_hsr\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000640)='syz0\x00') ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000680)={0x4, 0x8, 0x8, 0x4f3, 0x6, 0x7ff}) r3 = openat(r0, &(0x7f00000006c0)='./file0\x00', 0x400000, 0x20) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3f, &(0x7f0000000700)=""/204, &(0x7f0000000800)=0xcc) fsetxattr$security_selinux(r3, &(0x7f0000000840)='security.selinux\x00', &(0x7f0000000880)='system_u:object_r:hald_exec_t:s0\x00', 0x21, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000008c0)=0x5) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000900)="1d79b940b1b27ede96d5d0e697ab7be72478c228c18a62dbf280fa4ac925b727abe7a2cf3af592abc67c452a0b03921810785dcea065f3d565c7fb", 0x3b) write$binfmt_elf32(r0, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x2, 0x100000000, 0x3f, 0x4, 0x0, 0x3e, 0x100, 0x3a0, 0x38, 0x202, 0xde, 0x2, 0x20, 0x1, 0x3, 0xdb1, 0xadd3}, [{0x5, 0x200, 0x10000, 0x8000000000000000, 0x2, 0x8, 0x2, 0x1}], "b29502f9fa3a0fa8008ff10f703db3ebe2dfd60e9bc039b755934edcf063c18e2dd4e1260378f02db0d5aa27b48449dffe70ff4557b6137660c16179598499f5119612500f3943c2969bcca46ac21050704b0c7f6d3f8273db1cc859ab62219bdf5470ab2d244b68cb1ced6ebeb804600731c7a1c6a9c6232b9aacd98cc6471757790003cc21ff65fa08f6b895c3a3c33b96945b87120f1a7672543fe5e6223e5663e70a586a85457b73e831773b3881e16ac04d6a06117e97ccbee5239a97e21fd8509d19c2a684f6e1613812b3229b", [[], [], [], [], []]}, 0x628) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000f80)={0x1, 0xb0e8}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000fc0)=0x2, 0x4) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000001000)={0x1, 0x1, {0x37, 0x26, 0x9, 0x13, 0xb, 0x200, 0x5, 0x117}}) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000001040)=""/144, &(0x7f0000001100)=0x90) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000001140)='trusted.overlay.nlink\x00', &(0x7f0000001180)={'L+', 0x7ff}, 0x28, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/zero\x00', 0x0, 0x0) 18:49:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:59 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0xa) r1 = dup(r0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x804}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) write$cgroup_int(r2, &(0x7f0000000080), 0x2001007f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) set_robust_list(&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000140)}, 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) 18:49:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xa4, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}, @release], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:59 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) r1 = fcntl$dupfd(r0, 0x0, r0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000300)={{r2, r3+10000000}}, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50060000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x20000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x301, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 18:49:59 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x101002) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000340)=0x1c) accept4$inet6(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x1c, 0x80000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1e0) write$UHID_CREATE2(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac00000000000000810000000104000007000000f16216b86c6ccee4485dafea596e99298f10298c85888e6d48e7d49f467714f6b6ee5feda725b54ed1e0f7a006ae8f8a59851bc3994581a2d1ff501f14587a71ad84b268d0c749126f002396c275cdf6261b251e9b1c1fcc1da3b930039e6bc875fa6db21d42213dbd116c66969d26d8692b2c06c1d48d8aa04bb471843f379ab3458115f651665b7f51f114f9b0ed998fe4dfaae9e981d8b6929ba46c4e696861bd1bf6bdf8820057b2654ae4f2886ee9e61525657cce39add56a1b583a5c438ed5c285caef1ed3e893e3b81330cd92ce69ac3ff38bc1039f61b8670c20dcd98dc7d8bb42fdc1fb74d8d64e182cf97a99b2cd6690d4b975a569130748dfdf210b2851a1828b551fe5eec9ded1d47170cdd61510ff7694"], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r2, 0x0, 0x12, &(0x7f0000000440)='/dev/input/event#\x00'}, 0x30) sendmsg$nl_netfilter(r2, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14040}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x264, 0x9, 0x6, 0x120, 0x70bd27, 0x25dfdbfe, {0x3, 0x0, 0x6}, [@nested={0x68, 0x25, [@typed={0x8, 0x7a, @fd=r2}, @generic="65e767d67c669df87ada66b80e63c0be093f8906c8139e830a9f71ffde4d5bfa2cf7609caa58d44ec11dd53d76e71ade1782b5191a1c1bd44bed816d54f4e3253fc168e5786bd39266dc75bb584a7b68d2299b3d3329404f7f3e"]}, @typed={0x8, 0x49, @ipv4=@empty}, @nested={0xf8, 0x35, [@generic="870fb0cc3d476546372df4da442619c3dcad0d83481bee9f941797578b922a4e090f49d7d4d1a35401815f82c1e4113ef2cc43014cdf2fb1400d07f5302bc471f2b9b5ae64e9dd26ad458f58fa4e239672ed91882c1aa8fc36fd8375ec7185d147a047267a0d874a07a0d95009c4daa51c8eaf4d216defdf0041c5a1614005f33ad3761f0cd8aa7550a930e4425253f895ced6cec5fa6c7786c1815cc5db0d7684b3847a3696a097e6a2dcb37b16dd012a7d4618357a35203077da2a0a541dcfba8200e85eca588df9b88883f8fd10307dde356b0c31158538871051349fcd", @typed={0x14, 0x55, @str='cpusetbdev!bdev\x00'}]}, @generic="904b224214e4c50d6d2a43ca770eb68d3d985c0d6d5dd236972d65392eca11acee74f3ac91465a4d76d4ddf13ef5cfff63ac6e03dbd0e80519d1929fc9d958ae9aeedd8bd7a499aa922199a556a9200e3d0f0be67d1b0b5630f03ffc0c9b0e6d29cfbf94644802a187a2aec88efac1bf5fa2c452712c878f111bcece2716a086f7fe75258f0d731589a01f05a8063e746562e9c17711d92f28b5634314468ec69a6cf65c42bf4b051d5497406ceb84665d0e934075c359f2bb0a894aba484cb3e6fb7c1edf96a6140067ebec8c4cbd5797b80d4e75da3eb97e7ca09110", @typed={0x8, 0x82, @pid=r3}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0xae7}], 0x18) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000007c0)=""/143) pwritev(r0, &(0x7f0000001a00)=[{&(0x7f0000000880)="ef516b7853bb9b1f069013b4b51476bec521093bb966f94e1a7acc7f989f180311456851d12bfa86b1486e19da3bbfad471f23ebd2f1c88e7e0e08ef93f62ee7499d9636772a0076539443929c4172cc4abd764143e026514c5189f1cd62bb045c60b46fcf4f8798616a083c67f1d20fc0f4b9516013af", 0x77}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="efd298ce20532e314c44be29b6ba795639740610cc062e4315ed748c9d92c5b693a7708cb3aff3a68a426682e69f5da2dc6ecce4f922cfdfbdb2d51d5d2dc2807a5174954604fcd69a7cff71ec7613fd41ce147736a784e42338060497fcb2ad8fc66e9233248aa43ced0360dec357525a172784ef4d9cd0f9880fa884910d4be09045b1df9f06e6f5ad87abc35b3953530b3059", 0x94}, {&(0x7f00000019c0)="74136c88", 0x4}], 0x4, 0x0) 18:49:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 296.388600] binder: 8137:8141 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 296.402801] binder: 8137:8141 got reply transaction with bad transaction stack, transaction 138 has target 8137:0 [ 296.423240] binder: 8137:8141 transaction failed 29201/-71, size 56-40 line 2935 18:49:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x9c, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000240)=[@fd={0x66642a85, 0x0, r0}, @flat={0x73682a85, 0x100, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x3, 0x1d}], &(0x7f00000001c0)=[0x28]}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 296.446765] binder: release 8137:8141 transaction 138 out, still active [ 296.477421] binder: send failed reply for transaction 138, target dead 18:49:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x0, 0x8000, 0x8, 0x4e3d, 0x0, 0x849, 0x90, 0xc, 0x5, 0x80, 0x2, 0x5, 0xff80000000000000, 0x0, 0xd07, 0xfffffffffffffc00, 0x7ff, 0x6, 0x1ff, 0xa7c1, 0x7ff, 0x8, 0x81, 0x48c, 0x4011, 0x7c5, 0x10000, 0x8000, 0xacb9, 0x28, 0x7a7579e, 0x5, 0x2, 0x80000000, 0xfffffffffffffffe, 0x5, 0x0, 0x1000, 0x3, @perf_bp={&(0x7f0000000040), 0x8}, 0x20000, 0x3, 0x5, 0x7, 0x0, 0x6}, r0, 0x8, r1, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a}) gettid() ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 18:49:59 executing program 3: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f0000ed3000/0xa000)=nil, 0xa000, 0xc) madvise(&(0x7f0000a73000/0x4000)=nil, 0x4000, 0x0) [ 296.549953] binder: 8156:8161 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 296.564849] binder: 8156:8161 got reply transaction with bad transaction stack, transaction 141 has target 8156:0 [ 296.606153] binder: 8156:8161 transaction failed 29201/-71, size 56-40 line 2935 [ 296.620996] EXT4-fs (sda1): re-mounted. Opts: [ 296.645438] binder: release 8156:8161 transaction 141 out, still active 18:49:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) symlinkat(&(0x7f0000000040)='./file0/../file0\x00', r1, &(0x7f0000000180)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:49:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x2, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:59 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x72002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r1 = socket$inet6(0xa, 0x6, 0x1000004000000039) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x7) [ 296.666598] binder: send failed reply for transaction 141, target dead [ 296.746029] binder: 8180:8185 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 296.772057] binder: 8180:8185 got reply transaction with bad transaction stack, transaction 144 has target 8180:0 [ 296.788194] binder: 8180:8185 transaction failed 29201/-71, size 56-40 line 2935 [ 296.814600] binder: release 8180:8185 transaction 144 out, still active [ 296.846056] EXT4-fs (sda1): re-mounted. Opts: [ 296.847405] binder: send failed reply for transaction 144, target dead [ 296.927699] EXT4-fs (sda1): re-mounted. Opts: 18:49:59 executing program 4: clone(0x3002001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x22) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @loopback, @mcast2, 0x0, 0x0, 0x0, 0x11d}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000200)) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x8f4ad42) 18:49:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:49:59 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:49:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000240)=0x24) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0xfffffffffffff801}, 0x28, 0x1) 18:50:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 297.071587] binder: 8205:8207 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 297.112078] EXT4-fs (sda1): re-mounted. Opts: 18:50:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000180)=0x80) [ 297.261778] EXT4-fs (sda1): re-mounted. Opts: [ 297.857574] binder: release 8205:8207 transaction 147 out, still active [ 297.869131] binder: undelivered TRANSACTION_COMPLETE [ 297.874494] binder: send failed reply for transaction 147, target dead 18:50:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v1={0x2, "7e8c260c"}, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1000400200) r1 = inotify_init() r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x80000002) write$apparmor_exec(r2, &(0x7f0000000000)={'exec ', 'posix_acl_access\x00'}, 0x16) close(r1) 18:50:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:02 executing program 4: r0 = eventfd(0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) r4 = geteuid() r5 = geteuid() getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x7}, [{0x2, 0x4, r1}, {0x2, 0x5, r2}, {0x2, 0x1, r3}, {0x2, 0x7, r4}, {0x2, 0x1, r5}, {0x2, 0x2, r6}], {0x4, 0x5}, [{0x8, 0x5, r7}, {0x8, 0x1, r8}], {0x10, 0x1}, {0x20, 0x5}}, 0x64, 0x1) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x210000, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000540)={r9, 0x0, 0x0, 0x200000000}, 0x20) 18:50:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x1000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) mount$bpf(0x20000000, &(0x7f00000000c0)='\x00', 0x0, 0x2001003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:02 executing program 3: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="f0ff0000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x1e}}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20001, 0x0) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 18:50:02 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getpriority(0x2, 0x0) 18:50:02 executing program 3: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x14080, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0x6bc0885e) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000140)='sit0\x00') 18:50:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 299.634096] binder: 8249:8260 BC_DEAD_BINDER_DONE 0000000000000002 not found 18:50:02 executing program 5: keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x4000, 0x0) tee(r0, r0, 0x80000000, 0x7) write$P9_RLINK(r1, &(0x7f0000000080)={0x7, 0x47, 0x2}, 0x7) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000001c0)=0x54) 18:50:02 executing program 2: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='vboxnet1md5sum{\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x3415d, r0, 0xfffffffffffffffc) mremap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x4000, 0x1000000800000003, &(0x7f0000002000/0x4000)=nil) io_setup(0x10000, &(0x7f0000000040)=0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = signalfd(r2, &(0x7f0000000140)={0xffffffffffffffe0}, 0x3a4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) r5 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@alg, &(0x7f0000000240)=0x80) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000180)="8a07b12064c25b838cda866b7c61f662fcd86c2e009eae3055a5", 0x1a, 0x3, 0x0, 0x3, r4}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x100000001, r5, &(0x7f0000000340)="8a9360236be757278101c16b6f65e48280ed91a9d0812765b82479f86f0a", 0x1e, 0x81, 0x0, 0x0, 0xffffffffffffff9c}]) r6 = dup(0xffffffffffffff9c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='cubic\x00', 0x6) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa, &(0x7f0000000100)=0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000033c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x377140be6b5ef4c7}]) clock_gettime(0x0, &(0x7f0000003340)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000001740)=""/255, 0xff}, {&(0x7f0000001840)=""/124, 0x7c}, {&(0x7f00000018c0)=""/255, 0xff}, {&(0x7f00000019c0)=""/161, 0xa1}], 0x8, &(0x7f0000000500)=""/15, 0xf}, 0x8}, {{&(0x7f0000001b00)=@isdn, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b80)=""/59, 0x3b}, {&(0x7f0000001bc0)=""/241, 0xf1}, {&(0x7f0000001cc0)=""/71, 0x47}], 0x3, &(0x7f0000001d80)=""/9, 0x9}}, {{&(0x7f0000001dc0)=@isdn, 0x80, &(0x7f0000002100)=[{&(0x7f0000001e40)=""/180, 0xb4}, {&(0x7f0000001f00)=""/206, 0xce}, {&(0x7f0000002000)=""/232, 0xe8}], 0x3, &(0x7f0000002140)=""/22, 0x16}, 0x6a}, {{&(0x7f0000002180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002200)=""/61, 0x3d}, {&(0x7f0000002240)=""/231, 0xe7}, {&(0x7f0000002340)=""/50, 0x32}, {&(0x7f0000002380)=""/210, 0xd2}, {&(0x7f0000002480)=""/218, 0xda}, {&(0x7f0000002580)=""/163, 0xa3}, {&(0x7f0000002640)=""/179, 0xb3}, {&(0x7f0000002700)=""/189, 0xbd}, {&(0x7f00000027c0)=""/113, 0x71}], 0x9, &(0x7f0000002900)=""/121, 0x79}, 0x240000000000000}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002a00)=""/175, 0xaf}, {&(0x7f0000002ac0)=""/5, 0x5}, {&(0x7f0000002b00)=""/156, 0x9c}, {&(0x7f0000002bc0)=""/34, 0x22}, {&(0x7f0000002c00)=""/187, 0xbb}], 0x5, &(0x7f0000002d40)=""/34, 0x22}, 0xb08}, {{&(0x7f0000002d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/243, 0xf3}], 0x1, &(0x7f0000002f40)=""/96, 0x60}, 0x1f}, {{&(0x7f0000002fc0)=@pppol2tpin6, 0x80, &(0x7f0000003140)=[{&(0x7f0000003040)=""/147, 0x93}, {&(0x7f0000003100)=""/4, 0x4}], 0x2}, 0x6}], 0x7, 0x1, &(0x7f0000003380)={r9, r10+10000000}) 18:50:02 executing program 3: r0 = inotify_init1(0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000300)={0x4, 0x6, 0x3, 0x5, 0x14, 0x1d, 0xfffffffffffffff8, 0x7, 0x400, 0x4, 0x7b, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x28, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r5, 0x3f, 0x8}, 0xc) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) tkill(r2, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0x4014}) ptrace$setregset(0x4209, r2, 0x20000004, &(0x7f0000000080)={0x0, 0xfddb}) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000340)) 18:50:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x16) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x20, &(0x7f0000000140)=0xc1414ac, 0x4) 18:50:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:02 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x321000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="d4008000", @ANYRES16=r1, @ANYBLOB="000000000000fddbdf25130000000800020004000400b80004000c00010073797a300000000024000700080001001400000008000300de070000080003000500000008000400ff0100000c00070008000400010000004c000700080003007fffffff080004000900000008000300070000000800010010000000080001001d0000000800020000000000080001001a000000080004000400000008000200090000002c000700080001000c000000080001001700000008000200ab000000080001000b0000000800030000040000"], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setownex(r2, 0xf, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000001100, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0x3, 0x101, 0xc12e, 0xc36}, 0x10) 18:50:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000001240)=""/91, &(0x7f00000012c0)=0x5b) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={r1, 0x10, &(0x7f0000001480)={&(0x7f0000001400)=""/112, 0x70, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={r1, 0x10, &(0x7f0000001500)={&(0x7f0000001300)=""/224, 0xe0, r2}}, 0x157) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000000040)=0x4b2) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/170, 0xaa}, {&(0x7f0000001140)=""/80, 0x50}, {&(0x7f0000000000)=""/52, 0x34}], 0x4, 0x0) 18:50:03 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 18:50:03 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)={0x500000, 0x8001, 0x1, 0x0, 0x0, [{r1, 0x0, 0x5}]}) getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) bind(r2, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) 18:50:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x9, 0x1, 0x3483d677, 0x5}, 0x2c) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x40) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) 18:50:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 300.429558] binder: send failed reply for transaction 149 to 8249:8260 [ 300.439403] binder: undelivered TRANSACTION_ERROR: 29189 [ 300.478123] EXT4-fs: 1 callbacks suppressed [ 300.478132] EXT4-fs (sda1): re-mounted. Opts: [ 300.499532] binder: 8336:8338 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 300.550090] EXT4-fs (sda1): re-mounted. Opts: 18:50:03 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000300)=""/194) r1 = dup(0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000003680)='/dev/full\x00', 0xa0000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000036c0)={0x1, {{0x2, 0x4e22, @empty}}}, 0x88) add_key(0x0, &(0x7f0000001a40)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ftruncate(r0, 0x6) ioctl$void(r3, 0x5451) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) prctl$PR_CAPBSET_READ(0x17, 0x5) ioctl$BLKROTATIONAL(r5, 0x127e, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') dup(r1) r6 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) fsetxattr$security_capability(r5, &(0x7f0000003600)='security.capability\x00', &(0x7f0000003640)=@v1={0x1000000, [{0x2, 0xfff}]}, 0xc, 0x0) recvmmsg(r6, &(0x7f00000034c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1, &(0x7f0000000200)=""/104, 0x68}, 0xa1e}, {{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/4, 0x4}, {&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/59, 0x3b}, {&(0x7f0000001580)=""/193, 0xc1}], 0x7, &(0x7f0000001700)=""/110, 0x6e}, 0xffffffffffffff7f}, {{&(0x7f0000001780)=@alg, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000001900)=""/129, 0x81}, {&(0x7f00000019c0)=""/59, 0x3b}, {&(0x7f0000001a00)=""/119, 0x77}, {&(0x7f0000001a80)=""/27, 0x1b}, {&(0x7f0000001ac0)=""/166, 0xa6}, {&(0x7f0000001b80)=""/234, 0xea}], 0x7, &(0x7f0000001d00)=""/105, 0x69}, 0x8}, {{&(0x7f0000001d80)=@alg, 0x80, &(0x7f0000003380)=[{&(0x7f0000001e00)=""/93, 0x5d}, {&(0x7f0000001e80)=""/125, 0x7d}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000001fc0)=""/254, 0xfe}, {&(0x7f00000020c0)=""/68, 0x44}, {&(0x7f0000002140)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003200)=""/187, 0xbb}, {&(0x7f00000032c0)=""/178, 0xb2}], 0x9, &(0x7f0000003440)=""/103, 0x67}}], 0x4, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 18:50:03 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/116, 0x80afe50e6a780d74) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101042, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) lseek(r0, 0x4, 0x1) 18:50:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000180)="c905a140d3e9c7dde522bf72a3822df7dd604b3f0558e26db7e43a2f64cca82e9143421ef345fb963b9d0b5b4059812c44563e8c06323f8baacdd7cbd829435d6d8637b877fbfe1d65574d6c0efffa9908e546e634453c557363277018521033639e1fb615553dbe808b6eec83a875d3e3cb175afe56cddb7629560bbf7f26e0bb4434cf0518ff8be218aae197e4746e15d733b65c823c81fe2d40114af2957a4cb1a53588513c64b9d3fe18b3f73fc284e1e17856f65813e9c574a26b828e5c1a982bc9d1edc14f67fac5b99b4348b957905be6e973597bcc8671dc6b2f7925b03f4211d1e3df8748bf6f2bbbe773d4cc5fddcada", 0xf5}, {&(0x7f0000000280)="42dbb54ecca6c9c2161279bde910b1e7ecee89f324029f72cd9cde1705c7c17cea6c7642b5d8a1760c630695b8dffbd30f0b99f5e240f4bb86d75d680a9dc7bf66655cc3827ce3accdc26b7606666dcbafad64665b6b29235b6e375e6069137da022b217bcb7cdddf0d414e7d57f7210b8aba3e2a72386b3a973f581398a533c115ee19c2056d5ca287839510aeb10230851c50275e5c2", 0x97}, {&(0x7f0000000340)="2459ca556b7f1a5b816c8ee77546444479203c1dce86857238dbcf3d7e0c7c21b8877f3de71d5fba84414f820c7455748d7f764bf956a980dd1bc6bdef39a7d05776ad3d92bd54dd3e53966a74a6515a201a04f701740b1f9d875aee3e2dd8f0b3cc074fcd416c2e7dac4a9ef417729051bb896ba989b27cad93eb2e6ec931bbf14a26f5855811c9edaa0c038b6dd9291902459e47fcdf026062a7db636157a0423f37f759e7155291a9f93d721babb45508ca3d8324aed71842481ae5a884a42d73bdd9f21800f31af2ac2060f229fcaf0b472746f9a060945699eaafaa3d3b131a40b7ec2af5f3db08af505218f6ec", 0xf0}, {&(0x7f0000000440)="34208fd91cba22f6a283192167043f834a76bbf1df1d9e2bb84330f6b6a99c55c872d0d767c88f6c88817d2b8a2bae65787341eaace2512edf71e2ab9cd8cedcbcfb68a9cea708e9c455ef3f6cce8cd54326707fff8b9c9aed9daa7edba05c8eacc874d5ffbed6380bd88a7d85107c9d4079ffa24c30e779f0688bde7e263c1d43b386146b4730a38a6079f85408a8b1e27e924e261e18157a8b88615d84c338e744ec53d78289ed55bce2fe351002759e19138250decb92200114a199b21422177fa1a7847e4c", 0xc7}, {&(0x7f0000000540)="3f7b887f2f1f71d5c6006325e5e811ddfbba", 0x12}, {&(0x7f0000000580)="846ec1df068ae73ef54b932e8f0814b4d309a4316516", 0x16}, {&(0x7f00000005c0)="3a60bb0d44d0ccfa3c8bfc358fe8be49a30bd9ef54549c868ff386f436df3c9fd94e50db8cde0ba6f11526685545", 0x2e}], 0x7, 0xf) 18:50:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:03 executing program 3: r0 = socket$inet(0x2, 0x803, 0x20000000000000ea) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'lo\x00', 0x35}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipddp0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x1, [0x5]}}) [ 300.794391] EXT4-fs (sda1): re-mounted. Opts: 18:50:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:04 executing program 2: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) setxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:restorecond_exec_t:s0\x00', 0x28, 0x2) sendto(r0, &(0x7f0000000180)="55a01e115930f80cc78b6bc75fbf8e7e6779bed977e6662fc145", 0x1a, 0x80, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000190c41cf99"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='btrfs\x00', 0x1, &(0x7f0000000280)='*:vmnet1:systemppp0\\\x00') tee(r1, r0, 0xbe, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000440)={0x0, @speck128}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x14}, @remote, 0x0, 0x1, [@loopback]}, 0x14) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000480)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:04 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x3f0, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/4, 0x4}], 0x2) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000000240)=""/205, &(0x7f00000001c0)=0xcd) rt_sigaction(0x4012, 0x0, &(0x7f0000000000)={0x0, {}, 0x0, &(0x7f0000000200)="c4a2193ee70ffd9d080000002e0ffa6bf8f0418145a700000081c4e1c962ad0000010044d922c44135f330f3460f5221c4c17850d96bc832"}, 0xffffffffffffff8a, &(0x7f0000000040)) 18:50:04 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000001300)={0xffffffff, 0x1, 0x8, 0x2}) ioperm(0x200, 0x604c6329, 0xe) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0)='IPVS\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001280)={@remote, 0x63, r2}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x84, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) unshare(0x4000200) setsockopt$inet6_buf(r0, 0x29, 0xfd, &(0x7f00000012c0), 0x0) dup2(r0, r0) fgetxattr(r0, &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f0000000080)=""/4096, 0x1000) 18:50:04 executing program 5: r0 = epoll_create1(0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x281, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:04 executing program 5: mkdir(&(0x7f0000000a00)='./file0\x00', 0x1ab) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f00000009c0)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = dup2(r0, r0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x0, 0x0}, 0x10) fcntl$setsig(r1, 0xa, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) fadvise64(r2, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x8, 0x401, 0x1}, 0x0, [0x5a, 0x0, 0x632, 0x6, 0x8001, 0x2, 0x3, 0x0, 0x7, 0x3112, 0xffffffffffffffff, 0x3, 0x7, 0xfffffffffffffe01, 0x6, 0x1, 0x100000000, 0xf1, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0x6, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x5, 0x100000001, 0x2, 0x0, 0x6, 0x7fff, 0x6, 0x4, 0x2, 0x4, 0x10001, 0x0, 0xea, 0xfff, 0x3, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xffff], [0x0, 0x0, 0x1ff, 0x26, 0xfffffffffffffffd, 0x200, 0xff, 0x0, 0x2, 0x3, 0x101, 0x0, 0x5, 0x0, 0x0, 0x8, 0x40, 0x8001, 0x0, 0x0, 0xff, 0xffffffff00000001, 0x0, 0x0, 0x81, 0x4, 0x5, 0xee9b, 0x7fffffff, 0x1f, 0x5, 0x0, 0x0, 0x3f, 0x9, 0x81, 0x1030, 0x0, 0x6, 0x20, 0x8, 0x800, 0x0, 0x0, 0x9, 0x3, 0xe0000000, 0x0, 0x10000000000000, 0x5, 0x0, 0x0, 0xfffffffffffffffb, 0x257, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x40], [0xffffffff, 0x8, 0x0, 0x200, 0x0, 0x5, 0x6, 0x9, 0x401, 0x1ff, 0x6, 0x2, 0x1f, 0x6, 0x0, 0x3ff, 0x9, 0x9ca, 0x3, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffe1, 0x0, 0x0, 0x5, 0x1, 0xdd, 0x1, 0x0, 0x1, 0xfff, 0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7, 0x0, 0x101, 0x2, 0x7fffffff, 0x200, 0x36, 0x0, 0x0, 0x5, 0x4, 0x40, 0x94, 0x40, 0x27, 0x7, 0x8, 0x0, 0x2, 0x0, 0x5, 0x5, 0x0, 0x0, 0x2], [0x2, 0xfffffffffffffff7, 0x8, 0x8, 0x0, 0x7, 0x1f8, 0x0, 0x10000, 0x7, 0x1df0, 0x0, 0x0, 0x3, 0x0, 0x3618, 0x2, 0x5, 0xfffffffffffffffe, 0x0, 0xfff, 0xe1, 0x0, 0x100000000, 0x3, 0x0, 0xba6c, 0x0, 0xb520, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x53e7377d, 0x3, 0x100000001, 0x3, 0x46c1, 0x986e, 0x0, 0xd720, 0xd0, 0x7, 0x4, 0x3f7, 0x3, 0x1, 0x1, 0x5, 0x5, 0x0, 0x0, 0xfffffffffffffbf8, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0xfffffffffffffffa, 0x1, 0xfffffffffffffff8, 0x80000000, 0x8]}, 0x45c) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) prlimit64(r3, 0x0, &(0x7f0000000000)={0x9ec9, 0xff}, &(0x7f00000000c0)) [ 301.304832] binder: send failed reply for transaction 151 to 8336:8338 [ 301.311689] binder: undelivered TRANSACTION_ERROR: 29189 18:50:04 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000180)={0x10000008}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3ff) socket$inet6(0xa, 0x8000000003, 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00SA\x19\xe2\xac\x87\xa8\xf9\xe1\xf4\x18\x97\xcd8\xd5\xe1VD\x19o\x80\x17\x94\x14\xab\xb0\xdf\x9by\xb5\xfd\xbfrA\x0f\xcc{1#\x16\xf0\x99|2\x88\xccshL\bN\xb7\xafGk\xd6T!\xd4\x1c\x1aF\xec\xfe\r\x82\xd0L\xfa\x8c\xd9b\x98P\x97\xa4\x9e\x8f\xe1\xbe\xda\x14H<\xad\v\x00\xdd\xa3\xd3E\f!\xd2\xe7\xb0\xa8o\x8f\x17\x98j)N\x11\xda\xdf\x906\xf5') sendfile(r3, r3, &(0x7f00000000c0), 0xdd) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) write$P9_RREMOVE(r3, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) 18:50:04 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x490201, 0x0) write$P9_RLINK(r0, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7) r1 = inotify_init1(0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x7, 0x7, 0x7, 0x4}]}) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000000)) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x8, 0x4) get_robust_list(r2, 0x0, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000100)={0x9, 0x6, 0x4}) 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) [ 301.388226] binder: 8406:8410 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 301.396582] binder: 8406:8410 got reply transaction with bad transaction stack, transaction 153 has target 8406:0 [ 301.410934] binder: 8406:8410 transaction failed 29201/-71, size 56-40 line 2935 18:50:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:04 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000600)=0xe8) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x9084, &(0x7f0000000640)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303632303030303030303030302c6d6f64653d303030303030303030303030313037323330303137c9356d5127c64bb4303137870a3737373737373737373737373737373737322c6d6f64653d30303030303030303030303031373737373737373737372c6d6f64653d30303030303030303030303030303030303030373137362c657569643d", @ANYRESDEC=r1, @ANYBLOB=',defcontext=user_u,fscontext=staff_u,context=staff_u,smackfstransmute=/dev/vga_arbiter\x00,smackfshat=mime_type,fowner=', @ANYRESDEC=r2, @ANYBLOB=',smackfstransmute=proc:,uid=', @ANYRESDEC=r3, @ANYBLOB=',fowner<', @ANYRESDEC=r4, @ANYBLOB=',\x00']) setxattr$security_capability(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000800)='security.capability\x00', &(0x7f0000000840)=@v1={0x1000000, [{0x5, 0x9}]}, 0xc, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x4000000}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1100020, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:04 executing program 4: r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r1, r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, "8e992a855aef50de3b36275159d4e99e6d92832733c6fbee684526263b1f00bd48865a59195dc13f9e6e4e1180fe6925ecabe1a5a42341a3b94f299ac7a8360401b9119e8e6b706af75f72b3941a9dd3c85761ee80dac9a5e361ed273737dd25415c5e36a48b105824e3ef4a14db3e16eeaa747b86d37a4bd7e3b9ff049c6dbd0585843fb8bd03239e8c691f166df1c815ec972af0545e18a0107031c965010ff28ddce1c7d8272b6aa39ac4504981f059769e3f9d230effb2a7639be749c060a4aad53d125ffd1d9e72f517892746f3b036843cf4ef7a903b10cf7ee84209396fd9209ade090078e856d225ae322cf13dfec49f40241bb00a6fbda4b87c4722fcd69619b201a04cee3c97e9d11bb182d9826ea60a68dbe34c2ce35a4dd8cfb5966a6681ab74392e77cdf0e406ca7f85d383a80540d2386bc43504b29c4b56cb3ddc4dace30d7ef745a14ff03cab0d6277b387555021dbe929144c8acd326f4588a5c7eccbb0c5ef8737c575d008e97ff57b7bbfa96ad2aefdbaea197e09140e4cb48d4ac448ab5ef67550f4448fb2051e0f4c0d465ebec78fc12ee25153366da54a25017a6b3ec7f2b8629504070b9c007a90f5d07d98ce3adfb209a31109bc98abb114cf94394ffa0c735942f54481426e94e3900437e28bd482fcaf77b6b95301855f90b5165b26b713cf617ec5a71e621ce792ff807156fbf53ea33f727f93476c06bc6564770dcf64b24654eaa38e2c4646f83b4ee419f3a457e9e9ed29e3baab4806e5f1e9fd0bc74d64fcc0bef9328f5ac148a07577b606415506a093718d632529b29c738c05d741b9f630f5f7f20e41eada386e68423c48d69cbb9bfca139e145a100161f5066a65eb6d1ddd80ccdfbb3c69f2e34ad5d0195d0c5320550d4941d6aaa701d4bcc6a17e72f01ba2e59326e05ec64ad1f0f179c7b94b3be30adda78b6c8b5270174c2fcef27fec50739a5db44102128e0df99cce12d4df95eb03480e1d6bcb12a29c7e4e228f8660d2737e849df1133b40c77f5afb24907c6ae4da09327d56ff5f39869a03fcba6eb2c76b3eeceb76c96e9dd34628db735fa43e3c0b92aeb15f1bf4687242fcbf53287092aca65171f706b4cfb06b48f4d646958a5f659ed570e0b2d7e30dd9d6068f7a03781752cfacc8ab0906d36309719cd6e63c2c088cc4adbb57482f7dd91362da4494463a6e24aaa8fbe00192dcc8e0cc0428b2726abff2b0d63881f941d6a48434a20854d4302abb47f2d6c67483e8e786fecf517fb259264cb145598b6ad56146755d56fa521fe69b56eb26cdd08da3d3fecfc3106fd0f4cc3aadd0b674685fefc549ff1ca738c41f56c35b0a48df40456a1339858ee56afa1b66123c8741e599f5390d3779c44a7d0f8f074acf357eb8094a7d68783a85007a7b4d05954d3f4ab5f5ab6969dd745eca00de516cbeca7e1f1b6c06fce2cede53fff8d32c6f01461588865cbc7fa635891e0c777a646569e631a602392c9ad413f88f7fde147f95cddd8e5c1d90bbaa534ea309fe6c788564edd9be30e9beb2e55155492b4015f6de4331784c2887ff4e6018a25fe3cea09aebc707547fcf0e3a8a3a75a12d405fc9170411a505715f650b2034fc9b34e283b0a82580b500fb13fec659ad7994fc010626dcd0266e86a6ca8c7261ad37fc703c862747d62b760e664a95eeb49c518775b65744245e5e97e46d9ada027cba0fd6bbf42301aebf8c6490dbc7188a7cbf6cf6846b6efeb8067e967749c093bc44ac3ad1e44065c8f00f9aba30626c6f16cf855f5979b45cb9b5b7300062e4caa741482b80b60d434139fd3ec4f71c8ebf113dea14e68f8cf138cf9ece3fb71f53715398ff58fde45818947d59fde2f9f7e754d14300abf5df4898fbdab2fe88d84b247dab572755ae400901bcb5c7a7724064932cdebd04ebc0d4a4fd697c11898d0480843080fa323b1f7bcac0866b56fc6dbe1e194f7f79837f10cc36b7afb567ec74f267ed546d3ee126b4769ebcf9e67054fe2bbe07de76f847e6746fc1181992eb7a9b7da6a624a3afd54be1dc42aa9abac1e0c20b8791331386aac8b503f9e0665a04fa86d09136343f5e372ec254aafc1eee49918642e914c4ae9f794c10dca8dd81abb00d6009f15cab0709199b969ce1dadbcca416cd7b37d4465b2ee9eff5304e35eefa9a6c2ba86052ba14a66def6444d564069c34360e154c7691f8a6bcdf7fe0aaf3037546d0b3c9ac4860b8dd6d39d60d735f6363b2c8a5ec34754fcd1bc80116612c5e2e391a0db47e73a49e5b1fa5f1568ca165c08723d6c2de575185ebad1104e4a3f1040eaf81aa0fd9c1003a661a184eb299e0303a6cacfd0e96eab8fd6377f8f35d254bdc757d33b40a15be0230a30048df833cfc03aac3a4b13ebceea35923c023880c6b3e145991df04028abc06ced70383a3ec8cb809b1ef2a80ff0c95c216d430d6fa91dc180b857bcb546f9200d632df7430cadf7a8a2ba12fe96d904cac969e59aa908f62edbccf4c08527a89e27b9e84a777359fc2de631d40ea22febcbc3fd425cdc0e53124198eacddd35825362e152a5280c09a90f102f461d8a7780b4e88820bd3987d022bce37f719897abf1774601e488332ad1dc2f2c60d1e1993d61f37bcbbc9c49936c024cacc286c5e912de4a4f5c6af35545862e72b43bb665cdd05e2f7f0c86c4815789e59d4737220bb1e0302fda8d919fe2ebe22accc0c87c33a224401de41a786aeccac10f4de1023c4a4c0a1a15f513d03b080ac1205954ae46e440f66c18ffbb1ca743dd8cd8cf42df4bb28ea160f950cccf7264a91d40a1f337915b7c0086a00789004d2e31af876aff9b88d0ded691fc1ae73279aa97e213aa15fcf78576f27b7d49884931afe2ac2ba125e58484cf2be872e29c7b78050ea21c04a84cf3528d87b66124356f89939c7a15b8b2904158d6f099c64946543eca73bbcb97f4aa48aa4b1cc3cb9de01de1cb0415a83d78e3567138ac76a1e7d89a9df102477f99fa6ecca8941681c6a5696abbef4e77cbf1f55384404cee3d7f94b53b6037a29bc69836f79b97ba943a7db9ebd97ec38b06ba1cf2b4425fa676663bbcb1602effba21d86007ed52dbf7ea793ceea19b8ad1ff8fa3f2de81dd84328654ffc7ef72e5a4d2201d28cb921a73c9b50fcad3d0cb6af183edccc3c85c80494e9ea5075af150bb9b02ad20e76bc2077bca288f5cd88618362082ef77df3e3adc2a2bbff99c2c1e752aac79571dc0e4610fe25361280dba4bc1c9f862c3f1c4bf1526ac2f8f98d5e21bd6b940d18e3d3bf7515be31be9a924a531a518a6551d336c7468d73a78e453c6bd8c520136721676dd958a834d751585a96647e8130fa6d00a69c2a08bf499f295c0195a3196cbd7341c8d3c2a5a976b9259dea3b3bd7cfd883845a82678a7e7229e93668b9d5e4a7167e8b95110b7ac8320da527305890d966143fd9f52c7e32b89608bfe9a658d8d905b5f8b02719e68e1cea7b387c2d05ba3e7379385558c04bdcc2ce09d79a9454d1ee599df8986eaf929c19a80507a90215db669b128a6f97ea4f88b5bd6e03e87f23d1b1c7c647fe0c30babe0ec9542937c279996661722bf3ac3ea5850d13efcfb02a6ed3ece7f5ac03b5db751790f9e70086cea4624900bd7ae767f66200f7678ff02fc7eff5b77ad7863eaba3b7ef1626d1c37d75554b9101742ddee12420664f122aa5dfd5da0a0fd17326a9becd01008ccd6be46348b12738a39f52a54d994aa126e91146a9acfbb77363f18ca86a915f28b7ecddb1bed7a1dc8752f8ec9901c98c03ef02d76dd5eda4768f63e1baf93046dd48349633dbb1d771b324b0e44996fd7fe3d851361fb28ef9cad0c278bc92c3497881f2f8638116f7611482695dd8a18c6a27b423c60e21bfdb14ce114b71c917b21417f33a77b8659cf3d1c2817d25b666b05a0f40b33480c370e3d4114157c246ab65bd7ad85e8ce8e31cc657bb63c884598ff436d4a3f5817c1b0e19fd4c70b67991275340513c61c4de06adafaefd813e8586858f7c41e0b276967c9ba9efe2c2042e37080dfb4e3cbdacae98552575a45cb994e521e071ad23ca2911097d50977b4bd60e278424cef4df91ec21897873e974f0437494f1bd784692d80f58967ceaa6c5ef9b32e9074aea293be1630af73f4c142985135e99865040800ec86fb7d7f7813d1f0bd468bc99efd0819f27de9914c51cbc348259b0daed08e08c993fe9f6e9392f4c7d0c99a63b524c4a029e2fdd23af58e6cff498ecfbb5532ffe8410fa9c8fe41656e19359a65c7d43dff421cd1a6ac0594ef318019c8699a3e92f4662bf3a599d59ac86a9dcd17871a8d4b85028b3448b929321803f9010cc98d02642c240ac4e89e65df967b7f5e4ef560c3d40fb4568e573daa96d38c2295d2918c51f4b3cda45c931aa683e637027e0ce34e8e506c75f77647016380ec697a197f8e83a7a3f04516cd3e497f4f65556437f01b1733f251ea5f566509083d28931646c5839e695e9150846b29fff5e5df7b23cf48b4eeac82d61bbecb966c8468830c0320866377f0fc5726b35de9e49c1e7c8f463b8caa169bd16bd3c7602708fb05d68ac0ee9dfe30b8c03e1f1c342ecd5be5cad10c925773af5541a2917b44cf78f0036bbefac9daaa677b93232c5e1e6d830f6737a48ac8c89fd39b5787637fd7ef1ec737dffe751a889f68d8c4a5556254e34246e2c15334ca01ae103abcd2be14fbab590250c7f68e11c7ae44d03ec50f3f0775357f7a97b30cfb7f8f75936a4f950d25cb7366c1682ef28d9b728697853cc004b39ad52ebc000aa1b9d9e491d3771ffba6c4dbc3b8a00831027a5decd8c200bbb2f6f76d13108ab6fe67d96bf52fde4f3f32553a5054e11c2580fc6e3d8aa1a991c7f91a3e0a282b1528c3eca3affd97ba874cc0a11022f0b14f01d25e2228a035b4928e67bd896761985a7e5f0788887bf710ba93846a4f9ebf57ff3c20dadcc622675d38b6c887eadf9b2b5498f8618040f9076e6c7151046f0612104139555660cde2aa53028fa0acd7323f74ccaec26e28c6d1b9c5184019afd1a3b366edd2ecac46a89069fcd66313e8f448aa13107d2409588ea1d8f2388f0cb3a267aaa2901f834bc110b0f0537a06c450a5768e6a1ae05e874afac1ab463a175529fd564c8c2e2b026d8581029e7a3d1e125acc1d38a245441a98ec3fdc6fc51b30482dbec7d5c4c569963367a781f69cab9e20928d73ec715f8017c23ce91f4bbd358de9c828c672e9b4aeb1d2f0220b2ffe3dab6e7c00760ca638f976513c1024f40d0188af408d7a9d0a30de857a01136eb603f2db0db722decb9889759692f9da73db4d75c39cc192e3b4051d83da8a386d16a6d38638abad6766026b740887a4e4575bb8d204d8f6ba887b0a3296a5b14553b7f396083de62bbe2966787b0076c55e3f94999919ed213b1e865c64a103eb02a56d85c8ad9e2aa4bef9b2c5553c6a832c7a4afa1f1d1cc1b07f101e6062737c3a87ffdee43d0f0ec1fe162c884a005733b9b3faded15d41833658df8c08fccc6715ce93db312ad764f25d7f65f51c205202a4f4545554befdf06a71743299f5b456e68c74ae67722db6c0fe12e01e9b29407fe8f0eff5ab2c8c7e2d7189a9f4ab3156b90084273549572ce210e39812da2b7c0b17c57f1c8a4ac95b0bcab8e9c4414f49be7d18671db6487bbcc565ae7005ec976e2146a5047fa575e2390cc8159dcaa4b8e613df2243a725841b006730e5ddae63c0d5", 0x1000}, 0x1006) sendfile(r0, r1, 0x0, 0x400008bca) bind$inet6(r0, &(0x7f0000001100)={0xa, 0x4e24, 0x2, @local, 0x7}, 0x1c) 18:50:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x18<]\xb7H8V\xd1SP\xfa`\xd5)\x8d\xcbG\x0fH\\\x8d\x8awr\xc9\x91VB\x11\xd8\x9e~3\xf1\x87\xa3\xc6$V.\x0f\xbe\xcccbY\x10\x8f\x05\xfaH$_\xa6u\xc6\"\x16k\x16\xc3\x94]\xb3\xd63V\x1d\x19\x02H\xbc\xf2ic\x9d\xdd\bq\xf9\xc0\xf7\x9f\x8d\xf6\xfe\x1d\x9e+Kf\x06s\x19rJG\xa1d\xc6\xe1\x03\xf4m \xe6Re\x1c-\xf4\xdd\x98\xa4p2*u\xd1mW\xaa\xb8\xaa\x17\x1b\xea\xa9\nzF\xead\xdfov\xaa\x9fQ\xb4\xd3U\xd7\xd4\x88[\x1f-g\xbc\xf9\xb9\xd2\xf6\x12\x04\xdc3i\x8e~!\x99\xe4\xfb\xd2\xfb\xa7lgj\x87\xed\xcb\xdf\x91\xaf\x16xG3;\xb6lXN~\x83\xcb]\x1cIL\x91pH\r\x997\xde^\x9e\a\xc0L\x01\x93}c\xe84\xa4j\x00\x00\x00\xd8\xd0\x88R\x17\xcb+]\x1fe\x12\x8a2\xb1469\xa2\x19\x02\xd2\xc6\xe9\xe5\x006\\@\x96\x10C\xe5\xe697\xe4\x12\xb0\x9bi\x8aB\n\x7f\x7f\xb0\x9dL\x87\x8f') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) getdents64(r0, &(0x7f0000000200)=""/116, 0x74) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4, 0x9, 0x100000001, 0xf47, 0x3, 0x2, 0x0, 0xa74, 0x5, 0x1, 0x1, 0x8}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, 0x0, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) listen(r0, 0x7fff) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000001c0)=""/31) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000340)=""/67, 0x43, 0xe0, 0xffffffffffffffe0, 0x10001, 0xaba, 0x8}, 0x120) fcntl$notify(r6, 0x402, 0x8) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setflags(r1, 0x2, 0x1) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}], 0x1, 0x0) ioctl$TIOCNOTTY(r6, 0x5422) lsetxattr$security_capability(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580)='security.capability\x00', &(0x7f00000005c0)=@v1={0x1000000, [{0xffffffffffff0000, 0x8}]}, 0xc, 0x1) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000001bc0)={'syz', 0x0}, &(0x7f0000001c00)="e27bc7eb7efc9fadf2318a3f80dd5d79bffa2bfb689966f96dff02d81002a7f2ba567caac18a4bd036bdbace5270cbbe7a9455c8a270d7641e7fb28185c9d608932c85d62792a239002c70a1ddc4ff9e93794449b929f565da41b9155a3f4b69dbf4379f15ddcb1d95beb82eed788ca708597a33ea0a9741d71353d49f", 0x7d, 0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, 0x0) sendto$unix(r0, &(0x7f0000000280)="f50805f9e06ff933cd61ddbdf1e3714d29f349fc363c85f62ee103ba15abdc8b20faf9d21a763d034cb7ffec812ae6fcbc1f439ce5f60ac646a0097ef5217603af5c606f798328a5a79705f6e71d76f88d2fcca0975cbf04cea6e53e3543a8", 0x5f, 0x20000000, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) [ 301.447529] binder: release 8406:8410 transaction 153 out, still active [ 301.472420] binder: send failed reply for transaction 153, target dead 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 18:50:04 executing program 5: r0 = socket$inet(0x2, 0x100200080003, 0xe9) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xfffffffffffffc83) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, 0xe8) [ 301.564488] binder: 8427:8436 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 301.582287] binder: 8427:8436 got reply transaction with bad transaction stack, transaction 156 has target 8427:0 [ 301.594941] binder: 8427:8436 transaction failed 29201/-71, size 56-40 line 2935 [ 301.605952] binder: release 8427:8436 transaction 156 out, still active 18:50:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x28, &(0x7f00000000c0)=[@fda={0x66646185, 0xa, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}], &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x0) 18:50:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x1ff) [ 301.628667] binder: send failed reply for transaction 156, target dead 18:50:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = socket$inet(0x2, 0xa, 0x7) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x1}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 301.687543] binder: 8453:8460 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 301.695693] binder: 8453:8460 got reply transaction with bad transaction stack, transaction 159 has target 8453:0 [ 301.708437] binder: 8453:8460 transaction failed 29201/-71, size 56-40 line 2935 [ 301.718989] binder: release 8453:8460 transaction 159 out, still active 18:50:04 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000100)=[0x0, 0x78, 0x38, 0x78, 0x30]}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:04 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000540)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) fremovexattr(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='cpuset\x00') execveat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='/md5sum}vboxnet1\x00', &(0x7f0000000140), &(0x7f0000000180)='(system\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)=']selinux\x00', &(0x7f0000000280)='(#4vboxnet1-.+\x00', &(0x7f00000002c0)='/vboxnet1\x00'], &(0x7f0000000500)=[&(0x7f0000000380)=':self%\xb0^))eth0\'lomime_typesecurity\x00', &(0x7f00000003c0)='system\x00', &(0x7f0000000400)='cpuset\x00', &(0x7f0000000440)=']$!locgroup:#%vboxnet1\x00', &(0x7f0000000480)='vmnet1\x00', &(0x7f00000004c0)='security#{\x00'], 0x1400) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x200000, 0x0) gettid() [ 301.735842] binder: send failed reply for transaction 159, target dead 18:50:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x10000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) r3 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) r5 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000a40)={{}, {0x1, 0x7}, [{0x2, 0x3, r3}, {0x2, 0x4, r4}, {0x2, 0x1, r5}, {0x2, 0x1, r6}], {}, [{0x8, 0x3, r7}, {0x8, 0x0, r8}, {0x8, 0x7, r9}, {0x8, 0x5, r10}, {0x8, 0x3, r11}, {0x8, 0x4, r12}, {0x8, 0x6, r13}, {0x8, 0x2, r14}, {0x8, 0x3, r15}], {0x10, 0x2}, {0x20, 0x4}}, 0x8c, 0x1) 18:50:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000280)={0x2, 0xf62, 0xdd, &(0x7f0000000180)="447dd3ff3e09203b46dbacc58e8bea8455920e56a44edf6997ddbe8ea809ad617798956380b983379b97bfaabf2e1830b4ce947aa0dca818f8d42ad4f09fb32c43d22c0ace97f374d173c6097cb6205a72dfba396d4067cb7e8569ae7085a1b6139303ff4c41192c73c8a082c1d220b3bf33a461c1a148e3e7ccc1ea168f36c41da94bea7c654ab1b7a803f7d84664b09b7cf84c0a96d7723b0452a2b75cc7f703d48976036072c9a117a4a915b885a1b720fc5a4bb35d6fe691f4ee56448f5c656f3492252fe7e5d15c791812031c918005c78c8fd597379c7e0a7409"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000000c0)={0x54, 0x40, 0x1, {0x9, 0xffff}, {0x1, 0x9}, @period={0x5a, 0x2, 0x1, 0x4, 0x80000000, {0x200, 0x0, 0x20, 0xff}, 0x8, &(0x7f0000000080)=[0x3, 0x2, 0x7ff, 0x3f, 0x80, 0x101, 0x941, 0x3]}}) writev(r2, &(0x7f0000fb5ff0), 0x0) close(r2) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000100)=0x7, 0x4) r5 = fcntl$getown(r2, 0x9) prlimit64(r5, 0x8, &(0x7f00000002c0)={0xff, 0x7}, &(0x7f0000000300)) 18:50:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) connect(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x4840000}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f000010000000000000000000000008001a0000000100000000000000000006000000000000000000000000000200e00040010000000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x5cb043, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 301.919244] binder: 8469:8477 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 301.928622] binder: 8469:8477 got reply transaction with bad transaction stack, transaction 162 has target 8469:0 [ 301.940589] binder: 8469:8477 transaction failed 29201/-71, size 0-40 line 2935 [ 301.950200] binder: release 8469:8477 transaction 162 out, still active [ 301.965885] binder: send failed reply for transaction 162, target dead 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) 18:50:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/load\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x40, 0x5) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908e62da298"], 0x30) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) request_key(&(0x7f0000000ac0)='ceph\x00', 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r3, 0x700, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) gettid() clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:50:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x4e23, 0x2, @local, 0x4ff9}}, 0x1, 0x1, [{{0xa, 0x4e20, 0x7, @remote, 0x1000}}]}, 0x110) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:05 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x47f, 0x40000080000040) r1 = socket(0x11, 0x100004000000002, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$security_capability(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000700)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [], r2}, 0x18, 0x0) execve(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000100)=0x78) 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f00000002c0)=[@dead_binder_done={0x40086310, 0x2}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 302.091066] binder: 8495:8496 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 302.098490] binder: 8495:8496 got reply transaction with bad transaction stack, transaction 165 has target 8495:0 [ 302.110712] EXT4-fs (sda1): re-mounted. Opts: [ 302.110878] binder: 8495:8496 transaction failed 29201/-71, size 0-0 line 2935 [ 302.124690] binder: release 8495:8496 transaction 165 out, still active [ 302.133028] binder: send failed reply for transaction 165, target dead [ 302.194661] EXT4-fs (sda1): re-mounted. Opts: [ 302.213666] binder: 8508:8515 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 302.215452] SELinux: failed to load policy 18:50:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'erspan0\x00', 0x4}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:05 executing program 5: socketpair$unix(0x1, 0x40000000000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3de, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xac14140d, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2, 0xffffffffffffffbb}, {0xa, 0x4e21, 0xfffffffffffffff9, @dev={0xfe, 0x80, [], 0xc}, 0x1000}, 0x7, [0xfffffffffffffff9, 0x824d, 0x1, 0xc7, 0x0, 0x2, 0x5, 0x8]}, 0x5c) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000500)={'\x00', 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000280)=0x4) setns(0xffffffffffffffff, 0x0) clone(0x3fffe, &(0x7f00000001c0)="ee517bdfc2bdc43fedd4c7be47b74b14d39c9f987de2", 0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340), 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{}]}, 0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x9, @rand_addr="a070105530f76e9f6e391f35a6a83281", 0xff}, {0xa, 0x4e22, 0x7ffd, @empty}, 0x0, [0xfffffffffffffffe, 0x0, 0x7, 0x66, 0x0, 0xfffffffffffffff9, 0x6a9]}, 0x5c) [ 302.245519] binder: 8508:8515 got reply transaction with bad transaction stack, transaction 168 has target 8508:0 [ 302.279144] binder: 8508:8515 transaction failed 29201/-71, size 0-0 line 2935 18:50:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) inotify_init() sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2800000000000000290000003900000021020201cb933d15fe800000000000009f00000000000000c54e42e7761c1d743b88973e589d8e560007e582c9c6959ccc723e9417924d482c9236f91b4cff7c7b9ebc097391ff33bb988dd499ac3032056acc48d97e35b2008be9d3fa526a70eeed5338ec040097"], 0x28}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 302.314017] binder: release 8508:8515 transaction 168 out, still active [ 302.343730] binder: send failed reply for transaction 168, target dead 18:50:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/load\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x40, 0x5) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908e62da298"], 0x30) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) request_key(&(0x7f0000000ac0)='ceph\x00', 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r3, 0x700, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) gettid() clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:50:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) [ 302.422967] binder: 8532:8535 got reply transaction with bad transaction stack, transaction 171 has target 8532:0 [ 302.446574] EXT4-fs (sda1): re-mounted. Opts: [ 302.464872] binder: 8532:8535 transaction failed 29201/-71, size 0-0 line 2935 18:50:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x1bfffe, 0xffffffff, 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:05 executing program 5: r0 = add_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000000400)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000480)='id_legacy\x00', 0xfffffffffffffffc) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x40) r1 = dup(0xffffffffffffffff) read$eventfd(r1, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) add_key(0x0, 0x0, &(0x7f0000001a80), 0x0, 0xfffffffffffffff8) link(0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x8, 0xbf}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x5c, 0x0, &(0x7f0000000500)="ebd4a953126115a4ff84e2db99c8e891c33250f91fe570f60286e6652267a5c5ef36a1a890f498cd197f2f6a040212ab4a60365c9a71e9acc7a748162a88b1e97f4e525671351028563b798b7dc17c8d364f0ff0ac807a83a1588673"}) [ 302.501248] SELinux: failed to load policy [ 302.504889] binder: release 8532:8535 transaction 171 out, still active [ 302.534854] binder: send failed reply for transaction 171, target dead 18:50:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) r2 = dup(r0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 18:50:05 executing program 3: mount$bpf(0x0, 0x0, 0x0, 0x201050, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='++}nodev\x00'], &(0x7f0000000340)=[&(0x7f00000000c0)=']mime_type\':\x00', &(0x7f0000000100)='cpusetwlan1.procem1@\xb1\xd8@&selfsecurity#proc\x00', &(0x7f0000000140)='ppp0\x00', &(0x7f0000000180)='nodev\x8e(eth1\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='posix_acl_accessGPL^\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='cgroupself\\self.md5sum,&GPL\x00', &(0x7f00000002c0)='em0!\x00', &(0x7f0000000300)='nodev\x00']) 18:50:05 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x1000002192c07) socket$inet6(0xa, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setregid(0x0, r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) keyctl$chown(0x3, r1, r2, 0x0) write$ppp(r0, &(0x7f0000000180)="9b4c3556a8", 0x5) [ 302.617168] binder: 8552:8562 got reply transaction with bad transaction stack, transaction 174 has target 8552:0 [ 302.643995] binder: 8552:8562 transaction failed 29201/-71, size 0-0 line 2935 [ 302.659847] binder: release 8552:8562 transaction 174 out, still active 18:50:05 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/load\x00', 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setopts(0xffffffffffffffff, 0x0, 0x40, 0x5) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815000000000000000800000007000000402c0000000000002315c908e62da298"], 0x30) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/239) request_key(&(0x7f0000000ac0)='ceph\x00', 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r3, 0x700, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) gettid() clone(0x4007ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 302.684949] binder: send failed reply for transaction 174, target dead 18:50:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x80000, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x100006, 0x4) sendmmsg(r0, &(0x7f0000000080), 0x4000000000000c1, 0x800) [ 302.800197] EXT4-fs (sda1): re-mounted. Opts: 18:50:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) flock(r0, 0x7) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) r1 = getpgrp(0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf25010000000000000009410000004c000d0000000573797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000"], 0x217}, 0x1, 0x0, 0x0, 0x10}, 0x90) fcntl$setown(r0, 0x8, r1) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000040)=@routing={0x2f, 0x2, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x18) restart_syscall() creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x5, {{0x2, 0x2, 0xfffd}, 0x6}}, 0xfef7) 18:50:05 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r2 = accept4(0xffffffffffffff9c, &(0x7f0000000300)=@can, &(0x7f0000000380)=0x80, 0x80800) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000940)={0xffffffffffffffff}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4100e00}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000fddbdf25010000002400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="7916f0494afcad14dfb276188dd39ed62b482a906aefa8e33202c98f3d140ad4132246eb1a5a45f28a6a44d0e1e4806dc6c67096e7f13582793bc2cd5ba2020998e1964d9f623be9a782fd7ed9f6d62d7c706187539a16ce6369e10b0facfc20c2d22bc4005a739a562d8f71eafbcd05a200b0518f1aeaa6cdd5a38aaf74ece022cddbaa8e457eb5193ebb9703e55db8a758e937f60a98ddbc3996ad9bf9dda9cf9e613370a4de87800fa599a7", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x9e4e3bd2e1d1b61a}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\x84\xe0\xda\x82a\xbe\x18O\x17\x1b\\\x143\x06v\x9b=>\xc1\xd9\x06\x00\x05\xf7\xae\xce\xbeA,j5\xac\xf5\xf0&\xc5$\x951QC\x87\x9f\xe0};\xac\xb7k>0\xce\xcd~\xd766*\fo=Cg&[\x8b\xe2\xbd\xe9\x16\xc6\x1e\x97e]\xb0\xed\xe7I\x18\x96RS\x10\x8cyr\xb7\xcf', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x7c774aac) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xb5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x1cf}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r6, 0x0) 18:50:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) accept$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000380)={@ipv4={[], [], @multicast1}, 0x1e, r1}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x23}, @rand_addr="f74fed3b848a8aaf3f3dc942ba99e81d", @empty, 0x6, 0x4, 0x1000, 0x400, 0x1, 0x41000222, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) [ 302.835136] binder: 8573:8581 got reply transaction with bad transaction stack, transaction 177 has target 8573:0 [ 302.849316] EXT4-fs (sda1): re-mounted. Opts: [ 302.862783] SELinux: failed to load policy [ 302.868087] binder: 8573:8581 transaction failed 29201/-71, size 0-0 line 2935 18:50:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x121042, 0x0) r1 = socket$inet(0x2, 0x6, 0x10000) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={{0x77359400}, {0x0, 0x2710}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r3 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@local, @in=@empty, 0x4e24, 0x6ec03c9f, 0x4e23, 0x4, 0x0, 0x80, 0x20, 0x3d, r2, r3}, {0x80, 0xc0000000000000, 0x3f73, 0x80, 0x178f, 0x1000, 0x1, 0x7}, {0x1000, 0x100000001, 0x4, 0x9c}, 0x1, 0x6e6bb6, 0x0, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0x9, 0x4d6, 0x7e}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x3, 0xffffffffffffffff, 0x7, 0x81ef, 0x80000000}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x5, 0xffffffffffffff84, 0x0, 0x800001, 0x0) [ 302.889714] binder: release 8573:8581 transaction 177 out, still active [ 302.899031] binder: undelivered TRANSACTION_COMPLETE 18:50:05 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x8000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x17, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 302.941755] binder: undelivered TRANSACTION_ERROR: 29201 [ 302.966410] binder: send failed reply for transaction 177, target dead 18:50:05 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x20000, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) utime(0x0, 0xffffffffffffffff) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x7ff, 0xe0]) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="0b19577f96a086766e65d600a984b2a331fc3fe317677341b338e1f35add33f0fd45835fb4d8ddaafdc96b8ea706e6aebeed76cffad929e2a8e6bffe6378640e70a4c3f7341247ddbc6c448646f3e3e5976bf18fbf64427e6c0ca41dd228ad5da6113ce4105646148b526fa4afa037fcd3b224d9fcd61b5112abb8b7186be5c23c915c77f5fdcaeffe715df819ecc0a9120959e40b0fe613e2e1b9038cb77141604a7cb83f9c0a2617605e6df1bcf52c8ab315434e2e03d01f1c70a593f7f8e5340bd0a72998a195386304867a64aba71a301039103fb175eff824760254f0c8ae0d2f389ec800b4b29ceebba8a2bdb2bd9c90f5a54dba44cca58466c7e30fd5") umount2(&(0x7f0000000000)='./file0\x00', 0x2000006) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2c080, 0x0) getrandom(&(0x7f0000000180)=""/25, 0x19, 0x3) lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchownat(r1, &(0x7f0000000340)='./file0\x00', r2, r3, 0x0) [ 302.994335] binder: 8602:8608 got reply transaction with no transaction stack [ 303.004293] binder: 8602:8608 transaction failed 29201/-71, size 0-0 line 2920 [ 303.031433] binder_alloc: binder_alloc_mmap_handler: 8602 20003000-20005000 already mapped failed -16 18:50:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0xfffffffffffffffa, 0x1000, 0x1, 0x5, 0x0, 0x35, 0x8202, 0x8, 0xb6, 0x0, 0x5, 0x1, 0x2, 0x2, 0x0, 0x1, 0x3, 0x9, 0x400, 0x8000, 0xffffffffffffff4b, 0x8, 0x7, 0x10000, 0x1f, 0xffffffffffff8001, 0x3, 0xdf, 0x9, 0x5, 0x3, 0x4, 0x7ff, 0xc0f6000, 0x9, 0x20, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x40, 0x4, 0x5, 0x1, 0x2, 0x1, 0x81}, r2, 0x0, r3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="126348400000000000000000000800008f6e9dbb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) ioctl$FICLONE(r1, 0x40049409, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000001c0)) setsockopt$inet_tcp_buf(r3, 0x6, 0x3f, &(0x7f0000000400)="a02abf7beb6f5654d5d7481f5cea5c3a9169d5a24ccd86d036a7fdc9bcde53ebfbf695dd349fffea7e7bcb292c9edac875150aebaa4568b14d586c78489e7b5739eafddb653dca9d3d2c68faf3d3747112c7e6672a7cdc8000b6448b1c0a6caa66924dbee8f7b8a2c9ec890203b3ae6d89b6218afc7d3bf65fcd84fb9ec8bcbeb3b89a9ec08685cbd03ab9fcebd0316b5bf06dfd58c9dbae606480911b27b292a8526b0aebd642e99ebf889bde2fa20232472e793aa4aea3b17ab02569e2a9c8953fbf5805b054fa7e", 0xc9) [ 303.041627] binder: BINDER_SET_CONTEXT_MGR already set [ 303.047111] binder: 8602:8608 ioctl 40046207 0 returned -16 [ 303.055340] binder: undelivered TRANSACTION_ERROR: 29201 18:50:06 executing program 5: fstat(0xffffffffffffffff, &(0x7f0000000080)) getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000380)=0xc) setresuid(0x0, r0, 0x0) socketpair$unix(0x1, 0xfffffffffffffeff, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000400)='./file0\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000180)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r2, r4, &(0x7f0000000040), 0xfffb) fcntl$addseals(r4, 0x409, 0x8) lsetxattr$trusted_overlay_nlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='trusted.overlay.nlink\x00', &(0x7f0000000540)={'U-', 0xfff}, 0x28, 0x3) fsetxattr$system_posix_acl(r4, &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x24, 0x0) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000580)=""/19, &(0x7f0000000700)=0x13) r5 = dup3(r2, r4, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000780)={0x10, 0x7, {0x56, 0x1, 0x7ff, {0x8, 0x3ff}, {0xebd, 0x7}, @ramp={0x5, 0x2, {0x7, 0x2, 0x77e, 0xe1}}}, {0x55, 0xd46, 0x9b7c, {0x100000001, 0x69d5}, {0x0, 0xffffffffffffc1ab}, @rumble={0x8, 0x4}}}) shutdown(r1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 18:50:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fallocate(r1, 0x0, 0xba2b, 0x4008005) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0x7}, 0xff7f) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/12) write$P9_RSTAT(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="c5"], 0x1) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3}) 18:50:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:06 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x5) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x4, 0x2, 0x9, 0x0, 0x0, [{r0, 0x0, 0x4}, {r0}, {r0, 0x0, 0x7}, {r0, 0x0, 0x1bc5}, {r0, 0x0, 0x8}, {r0, 0x0, 0x7}, {r0, 0x0, 0x401}, {r0, 0x0, 0x6}, {r0, 0x0, 0x6d818a50}]}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="eeb43e4d326476121c9d11009c62d8a1e242643842c5fc8df14e7edb92e8e7b5a4d5d8f43af4fa0aad75ba81fbc576482ae5d67b3ccadd3364ce3e8eb46bc7fc73c3089abcf3de05a33231991922cd46164e3b03c07e5997eb7ad82489adde29651f07791faa38bc09ce88a84fd021491232dfeb53557088a261968584e1", 0x7e, 0xfffffffffffffff8) keyctl$describe(0x6, r1, &(0x7f0000000140)=""/30, 0x1e) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 303.166835] binder: 8632:8635 got reply transaction with bad transaction stack, transaction 182 has target 8632:0 [ 303.202622] binder: 8632:8635 transaction failed 29201/-71, size 0-0 line 2935 18:50:06 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000000)=0x6) r4 = memfd_create(&(0x7f0000000140)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2) ftruncate(r4, 0x40001) sendfile(r1, r4, 0x0, 0x100000000000) fcntl$addseals(r4, 0x409, 0x8) capset(0x0, 0x0) [ 303.216334] binder_alloc: binder_alloc_mmap_handler: 8632 20003000-20005000 already mapped failed -16 [ 303.232180] binder: BINDER_SET_CONTEXT_MGR already set [ 303.244106] binder: 8632:8635 ioctl 40046207 0 returned -16 [ 303.260500] binder_alloc: 8632: binder_alloc_buf, no vma [ 303.276638] binder: 8632:8644 transaction failed 29189/-3, size 0-0 line 3135 [ 303.298315] binder: undelivered TRANSACTION_ERROR: 29189 [ 303.308221] binder: send failed reply for transaction 182 to 8632:8635 18:50:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00e24040"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 303.324660] EXT4-fs (sda1): re-mounted. Opts: [ 303.342448] binder: undelivered TRANSACTION_COMPLETE [ 303.364408] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.399674] binder: undelivered TRANSACTION_ERROR: 29189 [ 303.411696] binder: 8662:8665 unknown command 1077993984 [ 303.418058] binder: 8662:8665 ioctl c0306201 20000000 returned -22 [ 303.425379] binder: 8662:8665 got reply transaction with no transaction stack [ 303.438207] binder: 8662:8665 transaction failed 29201/-71, size 0-0 line 2920 [ 303.448507] binder_alloc: binder_alloc_mmap_handler: 8662 20003000-20005000 already mapped failed -16 [ 303.458989] binder: BINDER_SET_CONTEXT_MGR already set [ 303.467805] binder: 8662:8665 ioctl 40046207 0 returned -16 [ 303.474057] binder: 8662:8668 unknown command 1077993984 [ 303.479714] binder: 8662:8668 ioctl c0306201 20000000 returned -22 [ 303.486331] binder: 8662:8665 got reply transaction with no transaction stack [ 303.494788] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.500651] binder: 8662:8665 transaction failed 29201/-71, size 0-0 line 2920 [ 303.508516] binder: undelivered TRANSACTION_ERROR: 29201 18:50:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_ima(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x2, 0x13, 0x9, 0x1000, "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"}, 0x100a, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2001000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x10000, 0x10, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x83, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x5, 0xd, 0xffffffffffff9a84, 0x0, 0xff, 0x0, 0x80000000}) 18:50:06 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x41f8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0x9, r0, 0x0, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000001180)=@pppol2tp, 0x80, &(0x7f00000012c0), 0x3f9, &(0x7f0000001300)=""/255, 0xff}}], 0x1, 0x0, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df704011100fe800000000000000000000000000000fe8000000000000000000000000000aa00004e2004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1218ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccf26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c1171b6a324e8642b2ab76618b824110c312ab52d9f65d6a980634a6a7cba8bf89e01a91259fa7fb32476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e5354ba1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e0071d1ebd25f8f0a23c17ad840aba3d1f50cb41fdbfc60be3ce696b101c93e94b0f0448814ffb3513eb16ef1800ff8d9d4168592f8a142d35b6168f63c677a0fbf88c90ab15260036b4e55d50e4f1290966a78be8f36149d1fb7a963b31b3b8f4eb57cbef52eb8ead6aa2c4f677ce6dcdaed0e90921c79a01505f5718ada3626f69a442f3712898c608deb58ce926510a1318a828e70e98d4fc8eac29e0e31f8d88df02834361189d29def4069fd6dacfe2fed7c8c5c80300000000000000c993db4676b97f000000e8643be8bc5ae904a575cad1453965ea46769132cf03abfa9b0aa5b7ae0d242b47dd490985ef9f236ef9c5a1a8a54ec709f60d089daa62d3c284a747f0ca6ea72a06b55cd54c3b892a5e1c83205492114c05cb9fa40ee35b38aeca3ec71abaf442bd6c3e0cc902f6e270ac0ba943632894b6455023a8cfabe269f8118596f529f44c686a728599e4dd3b238712d2fa58e3b43eaaf885957b3c464ca8fa861e9e406b1332e684522d716f3290eaf034dece3dcd71e2ed82a52f1c7d63502a670fe7eba8d76d7ca8329ba6a0ac70cd4084f24acf"], 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 18:50:06 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)={{0x1cf, 0x1, 0x94, 0x8b, 0x222, 0x103980000000, 0x267, 0x2d3a7774}, "fee12e784af55038833d85a33cffdd4cabd30a6d8c0a08439abe311c3c40a930bb3898c9b91a5b102a1adb851118b75a6a3e6b435dfbf9b77bad57f37e1a0d5bc40b64aff03ac800b74b642aa53aa2694a5dfba700b343cc240e6d413cc0fd6c6850cbfc79880e98728ad7e7da3f9729aed110249557d70abc521c53a1e9bcf6aca4e8b5eac450012833709d"}, 0xac) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x120, &(0x7f0000000180)={&(0x7f0000000200)=@delpolicy={0x5c, 0x14, 0x231, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}}, [@policy_type={0xc, 0x8}]}, 0x3b9}, 0x8}, 0x0) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3b9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff800000000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffe01}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048894}, 0x4000000) flistxattr(r2, &(0x7f00000002c0)=""/2, 0x2) write$selinux_attr(r1, &(0x7f0000000280)='system_u:object_r:qemu_device_t:s0\x00', 0x23) 18:50:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x8, 0x5}, @sack_perm, @mss={0x2, 0x100}], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x3c, 0x1, 0x3, 0x4}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x90, &(0x7f00000000c0)="6db31f7acf2a4d6cd4bb558776af15ee7a7c91c5ad7f6b494c47a9be93f8cb899e6975330833420caee38b0f3f03b1bc2eae16509fd60def75c40a7c4e2105f4a3029e999794a16f7165b6ea70738ad94a5c3552a4fc935a331d140dbea606bee28fe114f57f6242dfdfb0de4a6e66f29b68d30b57e2deb61c9eadbffb7638cd2578342458219633d3b74842d9927d39"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r0, 0x4, 0x42803) [ 303.805048] binder: 8679:8685 got reply transaction with no transaction stack [ 303.812875] binder: 8679:8685 transaction failed 29201/-71, size 0-0 line 2920 [ 303.817114] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=8686 comm=syz-executor5 [ 303.823621] binder: BINDER_SET_CONTEXT_MGR already set [ 303.835049] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28005 sclass=netlink_xfrm_socket pig=8686 comm=syz-executor5 18:50:06 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="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") recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:50:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x20000, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) [ 303.843073] binder: 8679:8688 got reply transaction with no transaction stack [ 303.859917] binder: 8679:8688 transaction failed 29201/-71, size 0-0 line 2920 [ 303.864524] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=8694 comm=syz-executor5 [ 303.872690] EXT4-fs (sda1): re-mounted. Opts: [ 303.885545] binder: 8679:8685 ioctl 40046207 0 returned -16 [ 303.890670] binder: undelivered TRANSACTION_ERROR: 29201 [ 303.896806] binder: undelivered TRANSACTION_ERROR: 29201 18:50:06 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000000000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:06 executing program 5: r0 = inotify_init1(0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom$inet(r1, &(0x7f0000001580)=""/4096, 0x1000, 0x40002000, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e23, 0x2fb, @mcast2, 0x12}, 0x1c) ptrace$setregset(0x4205, r2, 0x207, &(0x7f00000001c0)={&(0x7f00000000c0)="27c780f0d69f8564cb0f584384d329d6ce454ef04076c6dbdbcc5046615ce5f733826f1c7bf235d17b84417608c16c39f8ebb7be66f7fb7b8ffc1c0659edcce94834f539f1d054dc050f243e95298976218e9fdc9e74fa8510bf26b1754493c8a8ccd2727125a40b8447ae9c0a4eb1331f778aee2d4ce7c38645d0237f3ae62585b994ada2bd6b458981a2290146bdff8a6692e6dae7b392237efd2c461b3268478c2a9c429ce7d8a4d2b901c86b75a6763273453e9fb518d279eaa66fca9117bba2e2257f901fbcd0df9813ed579f51dda7a063c10e942d5513", 0xda}) r3 = gettid() fcntl$setown(r0, 0x8, r3) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) clone(0x400, &(0x7f0000000200)="555c03d09e9cc6d08be5fe795b958a33b320397128d66044b9dbb7d873572dc7234a6c29dddd851155e595538af919394395e74c99edb48e616e97fe684c50a1e1b760de69fdbcc7236377df6a15326ee3296e025b", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="a7dcf18666af47dfbaa157a8c3382ae4ef34a87cbdf56249474be43b0292d9421e0828eb36e6845df79a65499ef364d8cd612a497be1f728d7e8985901fb551cd5624e3f2f751b3423b9bc3f3e2b3d12d38ebe3de1e875cd150392a02077b58e69cf7839027090bec4b05236ecc99a8114de809e7f6278434636c1481eecc193e6666657f84c62574d5cea366e50cb762747d39ad58c785bcb5028b72bbd") ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000004c0)) recvfrom$unix(r1, &(0x7f0000000080)=""/29, 0x1d, 0x100, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e) close(r0) [ 303.914974] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28005 sclass=netlink_xfrm_socket pig=8703 comm=syz-executor5 18:50:06 executing program 4: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x3) r1 = dup(r0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) setxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100051, r1, 0x0) fcntl$addseals(r0, 0x409, 0xc) 18:50:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) socketpair(0xa, 0xf, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xa66}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) [ 303.987622] binder: 8713:8718 got reply transaction with bad transaction stack, transaction 192 has target 8713:0 [ 304.027290] binder: 8713:8718 transaction failed 29201/-71, size 0-0 line 2935 18:50:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4008}]]}}}]}, 0x38}}, 0x0) 18:50:07 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8), 0x8, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r0, r1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000025d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x10001}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(0x0) [ 304.066120] binder_alloc: binder_alloc_mmap_handler: 8713 20003000-20005000 already mapped failed -16 [ 304.081870] binder: BINDER_SET_CONTEXT_MGR already set [ 304.088158] binder: 8713:8718 ioctl 40046207 0 returned -16 [ 304.093815] binder_alloc: 8713: binder_alloc_buf, no vma 18:50:07 executing program 0: r0 = socket$inet6(0xa, 0xffffffffffeffffe, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getsockname(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 304.125632] binder: 8713:8727 transaction failed 29189/-3, size 0-0 line 3135 [ 304.133415] binder: 8713:8718 got reply transaction with no transaction stack [ 304.133665] binder: send failed reply for transaction 192 to 8713:8718 [ 304.147809] binder: 8713:8718 transaction failed 29201/-71, size 0-0 line 2920 [ 304.167276] binder: undelivered TRANSACTION_COMPLETE [ 304.189909] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.206116] binder: undelivered TRANSACTION_ERROR: 29189 [ 304.212675] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.225925] binder: undelivered TRANSACTION_ERROR: 29189 18:50:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xf2aad5efcbd9b48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="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") recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) 18:50:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x0, 0x21b, 0x2, 0x9c2d, 0x80, 0x800}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) dup(r0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:07 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x2000, 0x40) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e23, @broadcast}, {0x7, @broadcast}, 0x40, {0x2, 0x4e21, @multicast1}, 'veth1_to_bridge\x00'}) r1 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x4, &(0x7f0000000000), 0x4) r2 = geteuid() sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000001f00)={0x13bc, 0x9, 0x2, 0x800, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x8}, [@generic="dffed4983c5417231727c29a0c0adbc88fafd2e0cebef5ab191ede6fd67ae752fdb30ff65b79fa2eae369d1e4d03ae10d7a09575e8d88109eab1ee6df1feec0c0e1ae41cf0a619c773c091e8039e6b83432d5dcef32ea1a637f813945b27f4c2ed009a4d58038bfb2427f6bb11cc8bf6fb0488341eea01c40df71f79f9e9a54410", @nested={0x30, 0x4f, [@typed={0x4, 0x91}, @typed={0x20, 0x92, @str='trusted]self$]$.procbdev\x00'}, @typed={0x8, 0x11, @uid=r2}]}, @generic="d75e56a387759260aa68c1ea59fc4c3b9ff62843b34d813456d1bc8d203113db87d8b0785fdf72bf541bb79c8dcae4d39320e2e9360348ee520a6296cbe984c3375fc211e9b9d068e8d413d1d6984d7c43a2807952610fa8dd7da4ed075a885c32e4a3594b3157f1b05e50b3dc7744a45843102fd429780927e540aa784c26ae1ee6888a747e69d54c2b3221c89350069d9e110b9f487ea989841b402b587320e63de1c71eab39c8b669af3f34a6fd0dc999274810b6f1a597972a115843df1e86857f36b98981713c67b0687f782479a691d62939125bd1ab377f6c80c66b85eda74e9bd015244cf131ee70735a21e2512cae770ccbb5e1d82fe9dacb51f8af29a2f16c9e3cdd4d7ef97ff35a27d0a51a56c1433137914ca7d981bcf3f480b8335d8a0eaef91f4ef1466c2c88f8e9f18de721f73769dd7905f79fca7085b905938358e00c5d1162071c21d7f97384b48d071c36b78b542562e38bfa0200bfa94b9d66e53a1156847d0562ee4488f85c673578b286d1208862d75ae7c8ac5f6aeb38d45bc9b6575824e1661fa94ce46203360aa0b2371976df27f4c2d19a741fc4924a2a2a7db7542371d719f43b4fce99e16b8ffdbcc986cc647a87e0ca1be5e54aa312f9ff23e2a384a3392b3d5fd0c5a04cf2f64a72840fa7ebf396dd4718a847370d224ca6b6f89ff96c6d1b14c38979a372c2c6d136197d28ea75fb8e3fcc53f0bc6e2b44aecb7d74fad3658550bdf029ea031fb1232924c06c181754530b535af4cfc51557e826d7a3f75c65c5b6a3c5904b0f4179cfe61195b2c4aa692f38b268bace72a421c8269433d7b0ec5e4257d7589f850d88b1ff92ddb87b5c12e3aaa3ac4aebff8d23cde4f64f3c5f9f74e01a33bc45ac553992821f5863803418add791f99174a31a73e7b1ac7ff38bcd210a5e12a5aa63877832082d101cc1c547f45a829f024bf3f8ca5a1f17b7c1450c9d8b392694d1c85ede737c9781b23d3ab7c154ae7ae51c1756ff246e7428f67a773b71084bc8e42e1c8552eb7eb64d2bc071601fbeb041c9b487e7e4e4b6b953d656a0f52f3b14e024c4e03cfb006a40c11efb8f879fc9bd5c90720958d9f49b007260d1db45f68fcc3db3840cd53c26e2748490ed8bd98d3fe53d91fae4e17d94072a96c18e6793586a62e1526c043f95a6705c33abbe5685efd3a6fc95deafbe346fb04ad30ba3f2e62b87d98e50aef61436ed040708a55ab9ad5e95b2d327dcda3d9693d80fe0c0d977076fbc29838f13520b37f2c2661b7b0849f167560fe4416f72966c42e4e46d6bb21377e3ae2d686f75acc6845e71a68de29d24defbff7faea701e5d6eefbcb1ac86255282b47aee1bda39a33b6a3676cd8ffb62befc088e1dd11523f03e0035f8f59acfc51432e92c92d2c2f04d8696ab4eeb4c1eedef78bd6ffe5a4039b4ffb06a87701e37d540df519a1122dd46013afd6dc6bf93e7de8825bec1a519d27ac57efa27c06950096437560e92fbb099c8349ad212f1d2ce6099f9576cd231d2c5539421befa0e1ade18f6087d400747e266acb1076015c77a675b0d3a8cc817e13734f859a1eea791d7bc8470576586c7c44c9b73ab215c5591728c774bd710e0069e90dc8f7a1f0957fbab0b2d71d3e3cbd1382bacf9e55ccda1d035718df257279291abfc9b2b413935f93d718bc1d581156cebb07cded7dfd5ec6173c2a21e9f481ce81a7496bad3525b3bae54a077968d736435e04f48e13dd2db6d6fccbed0d17630381ba1a56802bc627b58c83521a27cd07af55d33d2db4a4610c05798776b4fbb54860978d21f3de6e5eba66b3c8ee849f6fb67aa2c6e1fff1a151f79562131722ba932b636877047050c195207fe51cf4410709e10b598e06b50df51a3a97d9e2a17d4ca5b9e15e2b540a01100cf295f24541d7dd1ca341ac98e0b07926d50cd194fdebff463e6d30393e8bd6ec67eb860c7ebc5563715814432adc795180f099af36a5b2e5f0b60759fb0208e54b67a2cf2137b123e74d081c3afe91a9c15217603ffa887798748947ec85210757d9d8f33963ffe79f0285bd4443f7e66105c5d03dbaf184050320d1e988b79cc8a8aa5ce5e0fe86450574945c527635925ac556b10f2b80d6434831de46bc5463264845f02cb0c2c210aa94213f97cafed6fb6f1fca7f03b11216079ae716ab54b0fb34f7089973f7e1d93a7882c908f119cb4d51741e3dfa98a3580e2af64c8e03d8ab9c703cb5a87be474b050efcd7c376022d4d1360e3a5d676f1fc1e3cffc85b7da2c544c8b5de4f97a4f11a9870dd512465336f17e2fd0160dac90865692ce4a4f7c8046eb608f0a57e5957a78686d8186a2c231b54da1131de0ad262673b00ec6964045475cbed92485503b4a013b07837d02c612abbb4d7c9b61695db9385473d8e570384b41400ac5fff9718df1f7c36d57dec82fa479dd29c087c09e9cb7db9597d11a4c7ac192dfeaf2a1a9919f4c4d7a5fb936f7dd91d2990f8ab74c2963ab7de949842e5b285651bfe66e22f0fbf904c01055992866b17950ed99baddc95d9dc8decac94e402984dc9779d657449fa43ebf26b2c62441f2eaa03e3477cf42df88fb6ab06e9f23fb370eb0918492c5f2f0687bcf3071f7036b179a83e6b6f511feeab29c6a6de8a63898cbb2ce1872b9753f6acc43b3e002da970bac45c8c1f6fdd27e2072670441f39a6db489dd7bdfe8bdefd1e0cced061560955daf889084cd8b4453562013fae8be0056518c133cf926a68712e425965d2edff380485b5a1f6a5458542e2c15873e698bcc515ed72bafa67b7a7e959bec605c13fe767fc2ba502043e8a3baa21108b1384cee80487cc2d053d3bc94e8d03d084c60c184ff9e47063e1418906442d1dccfac695e33f582bd0d7548ae785817bf4716295ef8eb5f12da576ca9a960b1f35e8a1a834f22cee1ea9b38c9e120a44024333d249e2b83c49b472376b7277cfb048a29df6e5f5e3eb3e24ce5e04f9b35f8d675bf76b4b379256452b08ecd6aed96f306817515b0fdc9a30454ff518c48c6e6c5210b2c6d214406bc36a90bcbb1d7fa963ddf33f86a22788092fb8d819e4660264eb7949138d445901ddcd39297f57f835ac69208e8abc375e2f7cae543b7307de05fc7570ba00162f6cf1e6b04f13ad47f4cd84e3b6a6500bfb36b190db4da49d1a5c38b3fb0d36014101454cede9aa138b17708f23361c851e1c984b8bfffe22ec690d980aa77590dd033d17810d0ddc44b11490354bbaf79fac1fc093043854ecf6c40c3fd183b47a7e9e509b60a84803dc11b048cb8812c3169ff4eab3920b155696e48a37c7a23bb82ca35e07180b88457617ba22d19bc8542dfc9246736a6c8b7e48c9adb399ea5c6bebe25f3d07a7f870a4da18c15cb007c6624ca5f50a34953df794b09cd883197cb63a00b866a5fca5320e86847ae21494a0028a73d76c5da9da9d8c19c7cc9093d1323d826193e20106169453c9488f46e157eac749458b145a45318ab1c1a8f959711d0a237569f32234f54e265d0672a1849bafbca7c1f576eadd26a42b24ed9ce96925529ba63b35c1f7dc0662a70a9b17d662a25063cbc5c485374c3399fc9da094b121e28ec3760938e9cef6afe12c5f9592b38e3b566a15783e8c401392b87d682a25c7a7e12bc3e7caed6330746f9072d8a463b8de15eec2f73233e391b389a99ba682e183ac11c5f1163f3f98b1696a1f57f56cb5ea08fbbbe7eff571eaf758dc66a9c4b74f102e289b1f6bc8505d44f51c966df99e4a40e35be2cb270c4afe5e3a0c51835ca1584d3aea9d6d7f096dd2f2595e38fef670bdeffd69d454e8b5286abd52319508b25a77ccb643f35ea99979ccef19935c5bbf5cb61f3e20408842de9a908ae0e48586dab6da7d75c7ed6f1ae63c4c0762a0b8a8b709b180212e0f7dbfe748a79e72e6466cf33ec1f2ebde00dbe4c9b87a2b09a9d39bc089f3100c0f1b80f25671fbe356b8d1fe3810b872c72e67ff8d762f5846c0ed50204ffced8781032f0d00758429b301a46df611f54472006bdc38f9e91beeb88d52494a9663bbe448014c0b58055edc3f1da377cc880f90798e438756ce196c4729be674664091a0ceb35c3f34b83ffb604ff2fadc95d6dc0f720a3d2a319bdcc53c1058d08f8a81e3269d253b67282b001bfecf9638093360d8468fa78f31730cb8611796b47df75e321c81c86442b66769b6c1f84f62bab0b42cc4c44c428a226429ba131723d83e3bc2db87f548c817ac645927773d8982fa1815e09e42390a786704405079b7e4a8de72b9abd5bb9c41a94f56bcb59c1d633b84aa2e700d470ff854d61f2dcead05ccde442391a7d2864ba59519a2fdb37880cbda50fb22b6f551aebe831218a2472b445b55d338ed4bbefb99559768a19da3719af4ea0ae8dd71b6490faad363dc404f05bb2f943a528bbfcf6d787aa0c8683578baf4b79efb264a9bf06d31682c73d565d7e0a98a6cf512ac49f5f7422636440435f16a8237d294575714e9984eeeb8145e38e2d6cd699b9f0c1d6bdfd055114979a044649ab4b838c55044f47c3858f39b88bc8aa35a5797ed80dc98eeeddbffc7bb6065dcf77c2b949bd6abb396b676ba09c790f7b47b8479f6bdbde349f79ab4a7b88dc69147faed8f7253977febc38a751a2aa056972ad63308a64cb4bd728f491a09279330fb2ce0cfeca989e2007692af4331a990f1a411c70472c1c1aaa61673acda0a798f3f22510cfcd0ed7648f7d37f34cc435c2247d28ecd52b6d0ccf0eb3a002cb6d697ca21e188cb08d76a28d72a179a52c3075b465a058ddaed3e7837346b534bb1877c9de2c0869ea105d9d839aa8353bd816f6508ca22f84173ace2ad893acd8abd7be5c84a7e78e03550384ae45726dc785dd1ac28ed7f76ffe70e066b76d0d75d509d80a085d566363d921f9b177d3931cce9282df2a4398960fb587117c097288e4f8ff42d21943fc31cb058d7d4120271aa49b6f1c1e71297cf04a150840a0efadae35a08855ec3e0a8d38b9628800420f04a9a27267af4fe81d28bb8ec4ba7cd923bc3ce7c22b446b084bfe88c805de69183196e4d2f4300b5146cebbca7157c5002c64e49b7f26e2e20103432f0cdc8a54b2411b18cb881014be6390d93d6da2c7b6d3f0c62a6878d2de45082738c33e8851c0c763647786fe7236c7071f1d5094c27e4d2fd7ee64abe8011e86553853016628c61ee9c288fcd8b5842d6cf9a12ac340f7d4d15ac9a2e6c84d32322251c836bbb196dcb3f3815bb9aa035874bc0aeed78f23ba6942261912b453d4fd8f165e9d5fd905beedb8e45e6b36da66235169c03587c1a32ea674d84c4098d20d075c539325786a9465382ec2f2b27eb0af8376e05201ff46e9c6d3cef90277adaaa396b52ffff0744438844ceeed048156d82f21ac203b189242ce34fd9cb836680289fcd44de15ab8d7c3c14211b3492451acfe508390b90acc8e86f359dd339334cbee8fd5fabfbf4b2572e1f803f1b3dcb10d53c01d2aba2a17d63e3c7df81782f2ab29cacc090b4c0154bae535b20910eff0decc9f7bba090b35d1582b9da7c0de98e7814f29225c8f9a12887a5912ce64f02a9e66fa7c499ceb5651da128dfffeadf493e01e69a5a235b6bed4307a54f74938395a26a50b00d5ea791cda6c63cc86531b3ddc98eb4dddccdbaecbab1ec877603693327851199a335dc0c6b00389445cb28fce074a21b0e818573e81af43d1a67a7bef32aaaa9c9a789f89832e5b7e405072efbd9", @typed={0x4, 0x52}, @nested={0x1e4, 0x89, [@generic="71435f272ca422ff09fa3cec7b77671a125bae4a330d07fac50365514e1692c67d4836dbb6f79f080f31fd4df27e3078b7943cd11dabdd077e878adbd7323f708ab564f18bc93a83a5375a8dc80bb1591a4447ab4c66e25c454f9c4c95a894e5de39005b2f50ec7e0b288c4c5a7391d2bba0ca56a081e74213a259faea6ef02cf1b63e98dcbb2be7bb8dfda7618b3f4a1c951f0b4c86d1cb2ecaebdc96e79ed6c924b2c5aadbfb05898dbc217f507d9a1acdaa0ec6e417fd9b49", @generic="3052ea021c3d4d76132bf901b2de546f72cfefb99f0fb5e25a78c32b4df8763f30a7a2f754d60daae5a7e0d4afc54bde50f34aa786aad7f38b9a298f8c04587b6225", @generic="4f2e9e2d7718206cc60e732463f0d00d46b7a346d60d67577f00f608983890d894e1a1b9b64e4e48f0957d75029dbfb5b63cfbd6eb0da57c6eedde1af90a23f0008ed11cb3214b07cb59c9a87b55de0ca87fb48f7bc3a8d21baa67948f17da42e314f02a7b8deac28cb16eb1dc262af809e563685b7d2bd311fc81f846cb05085eb354ff2ce337c6fa881a6aae0b69bcc713d4dd8ed78a5c0b618a296bc0c34cc0d1a7f8466180efdf368aea42bf67d723c0b273d2b7a619401a360109571727b63987dad7a922644241c5cad5e416e96b40f65c83d3bd9b8093b98d14f8ceb889efff21"]}, @nested={0x10c, 0x2c, [@generic="6a914087113084bd23f2701e9a10e34e1009a66863b8446ae125364fdf83166cc63108619e9e310569435031cef008a28b83cc42b7810a738e817c7c80538415ae484978aa78f9f1ba3d066e9bd0a46c9b410304e7e7b8bb813abfdff48453ffd2170daed901a60d49598462ec983e34d424d78e85bee4bf9621cfafa272888c1722f82541915013dac700785a6e60d4bfdc03706aaf2820037ab270fd5f42da7b5e3207ab6bc2a1d1bb5adb38c1ceae53dd0f61340ee5ead46c3b8285050af80c3889558cb11c3c", @typed={0xc, 0x43, @u64=0x7}, @typed={0x8, 0x7f, @fd=r0}, @generic="b0b6f6c69b558147fc21443e61bb42e21ff8d7318deec4d675d0ec8a294962063b81033ed2fb0c73458d4510"]}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x8040}, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendmsg$unix(r1, &(0x7f0000000900)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000001900)="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", 0x5c5}], 0x1}, 0x900) getpeername(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) 18:50:07 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getpgid(r0) tkill(r0, 0x12) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x45, 0x0, 0xfa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 18:50:07 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x800, 0x7e) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480)='fou\x00') ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000340)={0xd, 0x7, 0xe4}) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='./\x00\x00le0\x00'], &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x10000, &(0x7f0000000300)=']&selinuxprocselfselinux\x00') rmdir(&(0x7f0000000080)='./file0\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000d81afbe4f5dc3de4b69e5fd0ab98b9083f7a07692ed0d846748a82e69050ca9ea3f8f0bea6425aeef374ce370f249cd095c81116e71e16ff1e", @ANYRES16=r2, @ANYBLOB="22072dbd7000fedbdf2501000000080001004e240000080002000a00000004000500"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r3 = inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x0) inotify_rm_watch(r1, r3) rmdir(&(0x7f0000000380)='./file0\x00') iopl(0x7ff) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0), 0x4) 18:50:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = geteuid() r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000000c0)={0x5, 0x2, 0x6, 0x1}, 0x10) ioprio_set$uid(0x3, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 304.629753] binder: 8768:8771 transaction failed 29189/-22, size 0-0 line 3012 [ 304.642130] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! [ 304.652906] binder: 8768:8784 transaction failed 29189/-22, size 0-0 line 3012 [ 304.661403] binder: undelivered TRANSACTION_ERROR: 29189 [ 304.667187] binder: undelivered TRANSACTION_ERROR: 29189 18:50:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xa008, 0x401) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) sendmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x2, 0x4, 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="dbdef1726d59307fc2f730fa931cc0511a79f839f7d59a333ad2bdad6c2aa44880391954e60f225861c9c8b604f21b7649410019279340803f1d41a3829c9a0ae6afcf434d57b0647b74a87c35528ec71689525680e9f1a13430d6e24c7a93c1e758eb5284e58c55d789aa64a5c871c16bfa154cd025352d78a098016d3e1e4a19e33bb97e973e0de796f9c6858087d4a907dd02799c8dc26bab757a3eb24bcb2d682e06a68cf529866429d6525d5c00be9c0cf57deb6567049b5cb88c7ba0a7048703b1b0f61f09cad4c2a97493ebefde98788d835215599acdc1fa251cd484b08184e93f", 0xe5}], 0x1, &(0x7f0000000600)=[{0x80, 0x11d, 0x3, "8bcc08e0eeb43a2ddd4eb867dbfbcd98fe684901a4222268560ce8320e6504ccaed4451ecc5024e78bae90360fa6b8a66086325a1071fa003f6ba7daf2237bf0f71f940ffacd7d28917e2579e028fe8b3da8c4721ae0ec57347f0d5f521801d5d3aaf4244079c783b9b79492"}, {0x70, 0x189, 0x3, "8f8c9cb7d7bd08293e60959900b59c5aae25d98b43976e6a3f1f01dc5bff84239bdac2f47879ee2e32a04db628727dcc79b9af29715bb3eeffe0dcc38ea081358c05d52d6e55073d18c098a1a0853cb4b95e5e8f1998aa2890ed6f"}, {0xb8, 0x11f, 0xe4, "df6a0cbf8f14a27af20da1251388130b3deb9ea0791c6aa4f531f31499bb48daad8a3b8158e50e41378771f1726b215704d2adfc26d7adbcc2fb0b018c8218e0ba4f7bbe4d909cd2b70785c7aba1a04bc8abff9044e65df2fb21b3ba2137f010cbaf3ce4037effaf390cacc9b3426159afc19cab4230362eeabf9eda37affbd559667c4a195bec51c5855b05526cec543a0de3440ad10d8b34d5e87818691866261a8534d5"}, {0xe0, 0x0, 0x100, "6ca04cc99b22cc43b096fd7fa040fa9da207c036e5a8a347bd3b86e204c82bd0efb31f0780c6b3c3b233d7f08210f36583ceb020c6bc8559a78c22a416702b4beae17c2b20ca8a2fe47b4ec61be7c6926442a85b078b99d76136f62a0948f2656b65eb9393381c7f7c6baa2ee77e3489867b9eea6ba78499ab9cbde83e1f2072b100e8988117811a37b472d75976067d0f904d4da32a5eb16d72f22a0b5757db892ee366ae2b2914603a599a20466f6145edc8d314f468e2dc3a897b61c8f4b374d12a4215af2594f3"}, {0xc0, 0x11d, 0x1, "0c31fc82be072439541ef7c2bd89324b6a51559134304b71393d79229892d441e1b344db356eaa727a8a612759f0dcaf0f146c02e658f5c8f131479432cbee1502f4423cd3a643135bdb89f93c3f4445fbbc49920f30d72909a597736cd69b13c292d78f1806372c8aa1c0125a4cd79e7a8d82e6ecb83e1626c8a5980755b66361f89a239a4fa376e64bb6001d6b507f05870594d743e131ba7032e41f9abd0593cf6d7b4c86f1761e"}, {0xf0, 0x11f, 0x3, "a55c266a5f46279ab02c43c7a2e2fd53dadce74d4ebf023fd316105a6e538676fc374595ed727b50a51c2201606c223352ac4de38e42f07f995e13cf4f2337aaa2a23daf52832823f15c1c64960ae4f3ea35e840d8c6c21166ce2d07834a893d1a0e6d73810a19cf1e2159da58dfd1ecbc02e978b2dc783234dcd4f79657a69b8245399e0c5c6fdb5f482119cb999b5621a0f3e33f74fb2543edb4e1170b553ee8b5410643559b3096c042a498619dc37e43b27ab777a8a89ff667bf0731704f92b0bc45462f69c98f8b7cbc47a5afa2e09269f261a27883a6128e97a33a90"}], 0x438}, 0x1}, {{&(0x7f0000000a80)=@hci={0x1f, r2}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b00)="6cce97e4dca1846f3347309d33a519f96873c7b62a8f3ea3957f10b2ca95a7918dbdcac4e63f1f8fa8554b9c17354d0684789b79db689d302981ab98d02287cd2f48ea56bc", 0x45}, {&(0x7f0000000b80)="cdf9ea741845fad1b88e42571c53a32647d39ba93e28118e3cef81eb71fac6368d7cf121c3d3411f328ea2e118a43c51d92f3543e37f5cb2747926414e01f0b14cc7d1e11410175e73f71f9b4ef61664e1210c957053eeba929d2dcc6cb57d93cea31e0756406f72e83b45aa5de077ff8f76a10581eb5276d4e4d3d601f7664a0c8cb8895ce3d29d2eb2a4eadaf4d8153622df79ddfb8e63153d6da0d427269bbe50b77b78e94f623de64dec799e828fb67b480fb01055d2bc4d0615b1991d902887b42303a0d51c4ba3fb21869cb4dfbc0be6aa2bb68b06b2a78aed7ed02845f84ce271aa64b941e13034", 0xeb}], 0x2}, 0xfffffffffffffffa}], 0x2, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0xc7, {{0xa, 0x4e20, 0x200, @mcast1, 0x2}}, 0x0, 0x5, [{{0xa, 0x4e20, 0x7ff, @loopback, 0x81}}, {{0xa, 0x4e21, 0x4, @rand_addr="b2ab10fd673f35cc35d6c012c622e1a3", 0x1f}}, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, {{0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0x14}, 0xfff}}, {{0xa, 0x4e21, 0x8, @empty, 0x5}}]}, 0x310) [ 304.747805] binder: 8794:8796 got reply transaction with bad transaction stack, transaction 199 has target 8794:0 [ 304.763867] binder: 8794:8796 transaction failed 29201/-71, size 0-0 line 2935 [ 304.773373] binder_alloc: binder_alloc_mmap_handler: 8794 20003000-20005000 already mapped failed -16 [ 304.784616] binder: BINDER_SET_CONTEXT_MGR already set [ 304.789903] binder: 8794:8796 ioctl 40046207 0 returned -16 18:50:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="f392af813441fa0c64a7b0893e85f40735d1d68f9c4e03d9b74c5631a4d3b8e578ea49bfc48b2e8d3ec87fd1ca883ab3bea88b3c420b000059f0f761e5b01a505aa6a913c913cb797be82bfd909672e52ab9b185d0d337b91093cd4050bff0f453573e95ea2751287f97aee9cc11811a4c37a1d3047f85f687e90ecf1d74c37ae91ba680fdda7d1bc1546d6c5c7d38"], &(0x7f0000000140)='GPL\x00', 0x41, 0xa7, &(0x7f00000004c0)=""/167}, 0x48) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) [ 304.795744] binder_alloc: 8794: binder_alloc_buf, no vma [ 304.802222] binder: 8794:8799 transaction failed 29189/-3, size 0-0 line 3135 [ 304.819668] binder: 8794:8796 got reply transaction with no transaction stack [ 304.831946] binder: send failed reply for transaction 199 to 8794:8796 [ 304.838680] binder: undelivered TRANSACTION_COMPLETE 18:50:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @remote, 0x4}, 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x69b9, 0x5, 0x5, 0xaac4}, 0x10) 18:50:07 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 304.846581] binder: 8794:8796 transaction failed 29201/-71, size 0-0 line 2920 [ 304.862179] binder: undelivered TRANSACTION_ERROR: 29201 [ 304.876500] binder: undelivered TRANSACTION_ERROR: 29189 [ 304.888659] binder: undelivered TRANSACTION_ERROR: 29201 18:50:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000240), 0x4) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0x3d, 0x5, 0x7f, "cebaf73f58a6fa7d5c07a4ddba42d039", "03e6b50429254e5c487dbd875a8d054356c4b48e6b8ee9650a4c7a91940b79e9314814a0c0632fd5"}, 0x3d, 0x2) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@sco={0x1f, {0x800, 0x1, 0xfffffffffffff000, 0x9, 0x200, 0xeee}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000100)="93b6e60bed5ab215d6", 0x9}, {&(0x7f0000000140)="5117e5b61c0c99e5027dff90427464b24e6e2c714021738fbd42c5ccaeb69358a5896800da7f974dc0097e6fe7f7f3bd07bf3960774365e88aa565b9abc6e4906adc0f3f89922bdc0bd42686547667b7be41c92f117faa429057506d277c6a8edf9831bb5363becaf263e5bfdbf48c19882d3403db70e1d2ed745c7cfbf2b03348885168e8e8cca85f4cdf74b9f8b30acc322b9601f84d69764c78b6", 0x9c}, {&(0x7f0000000280)="6c033b715560ee11c66fc2d123bc985ec42063e6ac9bf1881450e1eadc2d87c572501eebda30a8dc28e28fae3b870d5637d25a3675b0e5268c4c425222218651eef719d25115e213f3347ff7", 0x4c}, {&(0x7f0000000300)="1ed779d116ef25e53a26d4bbbca64064222f357780b738a9f29f943f5450db8926b528b48db134e2ddeec640569baf078f93a8d1f8ec2ae8f34972f44e29745e40d1de9a919ed2b00f339bc4e236bb3e299790bfa5b24bc1032a73b833a4812b", 0x60}, {&(0x7f0000000380)="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", 0x1000}], 0x5, &(0x7f0000001400)=[{0xb8, 0x101, 0x5, "8aaa4e9590f53278fbf436c91f0f384f2ec7fc71f061c6822d360d573f2924f18deae961b0f0e1a14f5ee7c2a1534c80fe92383eaec4f4938af24390591dbf7fe1b65753498c66119b7a3e5ec9e9b7cf39248f640a46dd0cbd985b35c9724c67671d5764920cceb0570eb85a552f26051a98d5a3abd9593c6118df957489fca9b298915ccf51170fa27ed042fe8e74f7fc885f09b15aee8e8eaa08cd97ad8fe83574"}, {0x10, 0x116, 0x2}, {0xd0, 0x108, 0x9, "224de0351082680ff2c79ef9d5200b65295432788cdd5e6c70ea7d20cf95454ae0c9558f77c8d8dbe4d2e789a550bf874b7a7a12ada5249862ce90f703bff8c539fa4cbe43054795fe4259ba7f87a0bc7981ffe1d94de77c42ac6fc583d23d5b723e3de0841997e35de69f523b31f5a9875cafca130f4e2221ee2b22a43862b428a813e7351ce3a4232118b6d18877d8fb8bb422ea8deb1dad7162693f99c05b9a14b0c09993779a33ef0d0f2bbc232fa7e91afc9020641ab98e0c1e58c470"}, {0x40, 0x102, 0xe8, "145c4b1cc864898ae3fd602424e5627edca45a2d24e52d7bdbc4d6357daeed611682bb579b3aa25d2b9bc85e3e89"}, {0x1010, 0x1, 0x3ff, "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"}, {0xb8, 0x107, 0x9, "3a3f81773f796997c57a08850e623547155dee6270c03e65d2b5609621e290ac688bc4735f2ebe1ef0ab523e7f3c228b0f1362c01bfffbf110024bc553a042423d6b2b03eb87259a600273e449fea38e1d20c787bf67e6d090c7b0473f0d64fd0098be0d391c851aea45b53383aefd07e0943da4514fcef62bdacd3c9995090beecf71d3e559259823419034916c7d47d1585a9401019e5d99e58c4e0eefae2d657774"}], 0x12a0}, 0x20040000) 18:50:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 304.896435] binder: undelivered TRANSACTION_ERROR: 29189 [ 304.929844] binder: 8821:8822 got reply transaction with bad transaction stack, transaction 204 has target 8821:0 [ 304.940764] binder: 8821:8822 transaction failed 29201/-71, size 1152921504606846976-0 line 2935 18:50:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') fstat(r1, &(0x7f0000001640)) 18:50:07 executing program 3: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460080000000762e23b8000000020006000000001000000010c94fa800800000f7ffffffffffff1d0002000000d0fe6d91000000000000000010fd00000000f8000300000000000005000000125c0fd78935719c1172eec19cbf00a54e13ef3a"], 0x63) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0xd, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0x8159}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x35f}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f0000000340)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x33}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x44, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) [ 304.972987] binder_alloc: binder_alloc_mmap_handler: 8821 20003000-20005000 already mapped failed -16 [ 304.998644] binder: BINDER_SET_CONTEXT_MGR already set [ 305.022943] binder_alloc: 8821: binder_alloc_buf, no vma [ 305.028838] binder: 8821:8832 transaction failed 29189/-3, size 0-0 line 3135 [ 305.039501] binder: 8821:8822 ioctl 40046207 0 returned -16 [ 305.041795] binder: send failed reply for transaction 204 to 8821:8822 [ 305.074041] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.100730] binder: undelivered TRANSACTION_COMPLETE [ 305.105885] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.112791] binder: undelivered TRANSACTION_ERROR: 29189 18:50:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000012000), 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 18:50:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000002002000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r2, 0x0, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) write$9p(r1, &(0x7f0000000240)="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", 0xfd) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair(0xa, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xffffffb7) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@mcast2, @empty, @mcast1, 0x2, 0xffffffff, 0x3, 0x500, 0x1, 0x80220101, r2}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0xffffffffffffff66, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:10 executing program 5: mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='posix_acl_accesswlan0keyring/nodev#*md5sumcgroup\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000000240)=""/174) read(r1, 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) pipe2(&(0x7f0000000040), 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, 0x0, 0x20000010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:50:10 executing program 3: r0 = socket$unix(0x1, 0x801, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000d40)={0x7, 0x0, 0x8000000000008}) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x12a) lstat(&(0x7f0000001f80)='./bus\x00', &(0x7f0000001fc0)) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400), 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000b80)={&(0x7f0000000600)=@ax25={{0x3, @null, 0x5}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)="b122179ec6e5540041e05df5a991621896ab9f16b45aedc2299a2bd7cc46d2f5aa9904d1f21ca8d1f3055f92bd175318c1d37296832d30b6456586be07b3864089088e0fbea4765bf8f52549e389b67f5f0cbf9e39d34948cc5dd9f6241e8f7a94a31243bf04de76aee80cb61643c81b4a5d6eadf88cbdaffe7c829b917a3fb32f38d92298fc67ce668f93cd8437557a09e4e372aa63c611d9b0462ba1487654d6a84b60331cec857fa6aa94eb3dba8cdeb08d853bd784267511a8c37d4086c0", 0xc0}, {&(0x7f0000000880)="89f866fa22517535cbb6e080028a8f52", 0x10}, {&(0x7f0000000900)="555048a3a395ddfcb34b4755e7d686e958dce6ba012e23e4e0da84b150074015698b3175e015311dae41ee31640f1d26ee52586d1d67bacfd37b5f6b2b5718cd4e83d01a27d1802b77f2696049d626d8f7be58f2ab42bfea5cd1131e5698c051ec546a0559b146f432be91f8832cdced7b93989e3890c53142d8a9855cebd7a7c45e93ac0d", 0x85}, {&(0x7f00000009c0)="5860a61b51b9b83c20e003387af7a8164e770e6836ec111699b1cd963a61675d48", 0x21}, {&(0x7f0000000a00)="1fce305bf413d489745036fe960cbfb9f174a0e7bcd49e23c100488eb7426b87244e87a01e84f8f2f432548150529354706ec0521066744a7071fddad76104c50dc4c0a3dade65d14267c04e50c6c2fe161f2cf056b9c893d024bf2baee3e2be67ba48ad19785163a5ff67f55eea8c6f2049d0f774dee375f9e70602b11847b8f1662785b11d3291a1a4167c4fa7138dbcca4bba9168f7b62083670a9b39ae7aa5861ba88201fc1a", 0xa8}, {&(0x7f0000000ac0)="fb689b8929c5b7b2a298d692f2a2a311628bad901186977fad83d30eb1f0afab0775a7ae6e1bcb24552beecc097cca7e8af2f3fbc12322d02ca8053ff0a2b7", 0x3f}], 0x6, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], 0x1200}, 0x40) sendto$inet(r5, &(0x7f00000006c0)="2822fdd113623984e7fc698f741c1fa896b9cbb158c4b01786cccce055006ec394693b03924c82068426201cbb46c20ee8f3978092bf62c17be7db629b0bba17d55fc0a345eff076453bdbd0c4ed6e8ce5376e703edbbd6798227324d45e7e06525a02f5521de6b4a77167976d5250dbb6ddf25ec874f32612094dabd4ab684f8903b9f497e8bc686d665d0fe505acff149237e9cca1e49a95a43abe309f03820416a70cf49f18521bbdd1b2cccadbcaae6c79cc2d76f00afe765c70b424c6973abe772bb22d4642", 0xc8, 0x8004, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x1) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000400)) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x23a}, 0x100) write$selinux_user(r4, &(0x7f0000000680)={'system_u:object_r:tpm_device_t:s0', 0x20, 'user_u\x00'}, 0x29) gettid() sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000bc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)="5968d7e4b807295e86e37c80719b9241c9d6c30ea4a307d7c866929d6862f1c8c4164e51166445b4836494c6112ba69b475f9cce1bed498e963801bfc9e2b9eb4de9eab1eefe5a90d2c8f1cd9d", 0x4d}], 0x1, 0x0, 0x0, 0x24004005}, 0x11) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$unix(0x1, 0x0, 0x0) fcntl$getown(r0, 0x9) fsync(0xffffffffffffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000000509240, 0x0) 18:50:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffd) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffc) [ 307.641760] binder: 8855:8860 ioctl c0306201 20000000 returned -14 [ 307.654959] binder: 8855:8860 got reply transaction with bad transaction stack, transaction 208 has target 8855:0 [ 307.675619] binder: 8855:8860 transaction failed 29201/-71, size 0-0 line 2935 [ 307.689788] binder_alloc: binder_alloc_mmap_handler: 8855 20003000-20005000 already mapped failed -16 [ 307.705888] binder: BINDER_SET_CONTEXT_MGR already set [ 307.712843] EXT4-fs: 6 callbacks suppressed [ 307.712864] EXT4-fs (sda1): re-mounted. Opts: [ 307.717807] binder: 8855:8860 ioctl 40046207 0 returned -16 [ 307.727918] binder_alloc: 8855: binder_alloc_buf, no vma 18:50:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000080)=@caif, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="4f5bf05989cfad9e0d8b375f70a72bd73a"}, {&(0x7f00000001c0)="219b1856dc77689f39dfa063eecc9c99bef4aea5ec0fc6da23"}, {&(0x7f0000000200)="9150efc2aa2518d2641cef5372594a32ad568f9bbb26d1c313fbe53ebfe6984bc6b24eb89121da62acb701d3e41f5ea9cf890516b68c2db8a22a5a5adc8114"}, {&(0x7f0000000240)="4c86c7163488fe6cee3e1fdf82a91b4c2fc03facd2d0f5d6ba774790f82663a6fadde412f902d7af28c4af607c4b7c2dfc4a357e1f87427f553914b46bbfb2985183cb5c251b13f64d6a12c4dc82477e0890ccbf30a29709fdebd7d6a61fadc0bf1354fe63dc19d7e11590cabf1c2e61b1861e0938a4a744e59d0d923b509c55743d3a0acd68ffff038a82d81b9f68ed916255efbe9e8cc5885af1a458f26569c65137d78ba02ce0ce1a5a7fcd004c70562fecccfe61c15c5e2c2a21506fed720698f63b657ded2673da5264f0d7dca4389802ad7c8b7f64294e8dd086a28232c212a65e12d75ebe8cd1"}, {&(0x7f0000000740)="1b5153cd38295d10d3fa23aae827659b80e2b006199427c82ce23d10424b46c34161086f2738ef25666905217da1cb4e70fa1933027044b6c03a47ec412abf6eaa8513e0f375d9d6fcc1ec91dbb3ebe42fcfa231173eaac582895448e1bde6ff1e380ab0f5fe4dbc79ac18eb69973b03c8ab870196cc"}, {&(0x7f00000003c0)="c128d399a7b7ce0df1aa3d4f62b413d477371e5a889649fb8c"}], 0x0, &(0x7f0000000480)}, 0x1}], 0xcc, 0x8000000004) 18:50:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') write$binfmt_aout(r0, &(0x7f0000000140)={{0x0, 0x74e, 0x10001, 0x166, 0x123, 0x1, 0xdb}, "59e01550aa4744a70150d9fb0ae639f193676f64358e988b1dc79a9d72eda4a9a176b1abe2b975c55f9e9f786eb5df65641db2e16553edcd0cdc0c3d68712e3639eb7e3f760099972e38b6902c356a267b11e81782487a5aa15ca1a72da9718c45963c0315a3e0eaa8f2e966f3f49043346624cdf08cbb7a258731f6a288eccef2df84ccc06ecef571f0a01180dbb9e58cd55771c26e47250523bcc37f8d0ef5f3bc11f1a90df3a797", [[], [], [], [], [], []]}, 0x6c9) [ 307.735328] binder: 8855:8876 transaction failed 29189/-3, size 0-0 line 3135 [ 307.751157] binder: 8855:8860 got reply transaction with no transaction stack [ 307.754139] binder: 8855:8876 ioctl c0306201 20000000 returned -14 [ 307.758447] binder: 8855:8860 transaction failed 29201/-71, size 0-0 line 2920 [ 307.759113] binder: send failed reply for transaction 208 to 8855:8860 18:50:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="006340404764a33a7b0b36b268c9fbf528ddb5b7c6ef120cccda2b13c56bb8bd6c9dc9eb8a9c571d2373586d5578cd9fa2d78b3efa475fa0e8c63d4834d66199524fb16a1a8dbe7a8ea740436ce5eea5e12cad8636bf3719b2cd11cba1892a298e176c2a8067b66ae1eb4986a6d6680c832a768f4babe02a13876469c39bdd52dd05aac0325cbe35dc62fdea8a3ef8f9318f42650c6f8bcd45a995b310a33afc67e4520f6f1b2f884123d42c74fc4dccd62bf35dd97f985bcd8d2b34f787dcbef191a397361ff858b8d161f314c1550146ad2e8e946177c108b19b8770eb7d0d57908b72a41b371f34bb5fd56f0a5dec6af540a48e8d2064deda1740d616b305160c599fa6c08ef6ae71c9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10200, 0x88) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000200)=""/118, &(0x7f0000000280)=0x76) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 307.798803] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.836107] binder: undelivered TRANSACTION_ERROR: 29189 18:50:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4000000000006, @ipv4={[], [], @multicast1}, 0x25}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 307.850838] binder: undelivered TRANSACTION_COMPLETE 18:50:10 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r0, 0x8000000000003, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010000900000000000000000000000000cec851f717adbbd308b5cb0e5fc4aa9486f3e47bb26ddda823d53e4504d8f0c89a0b4b7b46194ec5575e543fbaefaac854f2b2f361114cad7e9dee84d2c5db7c99130f5b62cbb7b6cd93d4d5777570ad2c198d0320f53ffa8ca15e1f3dc362550688edf4f1c701bdeb6deb86277954db473a5aeab8acd000a6000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r1, r2) [ 307.873984] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.881734] binder: 8898:8902 got transaction to invalid handle [ 307.887828] binder: 8898:8902 transaction failed 29201/-22, size 7879174142738013322-4506932945580030037 line 3012 [ 307.899438] binder: undelivered TRANSACTION_ERROR: 29189 [ 307.924689] binder_alloc: binder_alloc_mmap_handler: 8898 20003000-20005000 already mapped failed -16 [ 307.934379] binder: BINDER_SET_CONTEXT_MGR already set [ 307.939670] binder: 8898:8902 ioctl 40046207 0 returned -16 [ 307.952463] binder: 8898:8910 got transaction to invalid handle [ 307.958554] binder: 8898:8910 transaction failed 29201/-22, size 7879174142738013322-4506932945580030037 line 3012 18:50:10 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x0) r2 = mmap$binder(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2, 0x81010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000080)=[@increfs, @acquire, @acquire_done={0x40106309, r1, 0x1}, @acquire_done={0x40106309, r2, 0x1}, @register_looper, @clear_death={0x400c630f, 0x2, 0x4}], 0x79, 0x0, &(0x7f00000002c0)="2ee973c93cdb76fe0066c70f582f7eb7b25c2d1ec65806d7b42f79fcd6d723c0ac96700cc8bee0ab210e7daf8a989c67c3c9ccb79b8a92509399de6be62e15a5d0ccb63614fb0a51706bdeafec2d4262b0d5ddb6ddbf48b2f5738223d651f97a8cd26fa4602fd9aac9b96fcde154ccc981077e7360d8d16a90"}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xac, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="3fc5e990efa936178a0cc80d61d5b2e8abc5eca2ea0b927ae44c2dfced71bc060e1ba13218ffef235a6667c80bf44c3069ec0d8494ef259ba0e84c60b002ff90d7f623667fadfda9045ebe272346aaa6842b9b04dfd8e08825440624ec5abafd1d278fca807476a40750300dc175608f6347675450806b20c618ba3e519f86f5cf5f2d72687853488532e944e8d55d1ebf97aa19c434d4efa4d17ccb4cdccc8a6d01c9fd7735fb32600138b1"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4f, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0x1a3, 0x0, 0x0}) 18:50:10 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x48a00, 0x0) write$P9_RLINK(r0, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @empty}, {0x6}, 0x32, {0x2, 0x4e22, @rand_addr=0x3}, 'bond_slave_1\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) [ 307.969911] binder: 8898:8913 got reply transaction with no transaction stack [ 307.976246] EXT4-fs (sda1): re-mounted. Opts: [ 307.978313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 307.990906] binder: 8898:8913 transaction failed 29201/-71, size 0-0 line 2920 [ 307.998946] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.008253] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.018100] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.069686] EXT4-fs (sda1): re-mounted. Opts: [ 308.081193] binder: 8926:8930 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 308.088900] binder: 8926:8930 Acquire 1 refcount change on invalid ref 0 ret -22 [ 308.099247] binder: 8926:8930 BC_ACQUIRE_DONE u0000000000000000 no match [ 308.106617] binder: 8926:8930 BC_ACQUIRE_DONE u0000000000000000 no match 18:50:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) [ 308.114351] binder: 8926:8930 ERROR: BC_REGISTER_LOOPER called without request [ 308.138752] binder: 8926:8932 unknown command -1863727809 [ 308.144717] binder: 8926:8930 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 308.151780] binder: 8926:8932 ioctl c0306201 20000380 returned -22 [ 308.161355] binder: 8926:8930 unknown command 0 [ 308.176361] binder: 8926:8930 ioctl c0306201 200003c0 returned -22 [ 308.189465] binder: 8926:8932 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 308.201395] binder: 8926:8932 Acquire 1 refcount change on invalid ref 0 ret -22 [ 308.209271] binder: 8926:8930 unknown command -1863727809 [ 308.218852] binder: 8926:8935 unknown command 0 [ 308.226522] binder: 8926:8930 ioctl c0306201 20000380 returned -22 [ 308.236404] binder: 8926:8935 ioctl c0306201 200003c0 returned -22 [ 308.245200] binder: 8926:8932 BC_ACQUIRE_DONE u0000000000000000 no match [ 308.256599] binder: 8926:8932 BC_ACQUIRE_DONE u0000000000000000 no match [ 308.264099] binder: 8926:8932 ERROR: BC_REGISTER_LOOPER called without request [ 308.271976] binder: 8926:8932 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 308.286389] EXT4-fs (sda1): re-mounted. Opts: [ 308.315677] audit: type=1400 audit(1556823011.253:47): avc: denied { create } for pid=8936 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 [ 308.375224] EXT4-fs (sda1): re-mounted. Opts: 18:50:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)={0x14, 0x1, 0x2, 0x40000800000001}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0xd6}) 18:50:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="66a31263"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='logfs\x00', 0x808, &(0x7f00000001c0)=')vboxnet0:}vboxnet1}\x00') syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) 18:50:11 executing program 3: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ptrace$cont(0x1f, r0, 0x3, 0x8) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x10000, 0x0) tkill(r0, 0xb) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400280, 0x14) ioctl$KDADDIO(r1, 0x4b34, 0x20) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xfc}) ptrace$setregs(0xd, r0, 0xced1, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) 18:50:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) get_robust_list(0x0, 0x0, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000500)) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r2, 0x8, r4) 18:50:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffb) r2 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f00000001c0), 0x0, 0xfffffffffffffffa) keyctl$unlink(0x9, r1, r2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:11 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004cc0)={0x44, 0x0, &(0x7f0000003c00)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 308.529531] binder: 8964:8968 unknown command 1662165862 [ 308.542167] binder: 8964:8968 ioctl c0306201 20000000 returned -22 [ 308.556576] binder: 8964:8968 got reply transaction with no transaction stack [ 308.564630] binder: 8964:8968 transaction failed 29201/-71, size 0-0 line 2920 [ 308.595543] EXT4-fs (sda1): re-mounted. Opts: [ 308.609683] binder_alloc: binder_alloc_mmap_handler: 8964 20003000-20005000 already mapped failed -16 [ 308.643303] binder: 8964:8992 unknown command 1662165862 [ 308.643337] binder: BINDER_SET_CONTEXT_MGR already set [ 308.657238] binder: 8964:8992 ioctl c0306201 20000000 returned -22 [ 308.671772] binder: 8964:8968 ioctl 40046207 0 returned -16 [ 308.689615] binder: undelivered TRANSACTION_ERROR: 29201 [ 308.759723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 18:50:11 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) write(r0, &(0x7f0000000480)="220000001e00070700be5bcea13e07010af000a3baf9d825d08ced685bf41e0058c9", 0x22) 18:50:11 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x48000, 0x80) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x6, 0x400, 0x5, 0x8, 0x16, 0x8e4c, 0xffffffffffffffff, 0x3, 0x80000001, 0x100000000, 0x7ff, 0x4}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x183, 0x400000000000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 18:50:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) fchdir(r1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:11 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x9, 0xa, 0xa0, 0xa0, 0x21, r1, r2}, {0x4, 0xe00000000000, 0x80000001, 0x6, 0x3, 0x2, 0x10d, 0x1f}, {0xffffffff, 0x3, 0x7b4, 0x5}, 0x6, 0x6e6bbf, 0x0, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in=@multicast2, 0x3507, 0x3, 0x1, 0x101, 0xb6f, 0x1f, 0x1}}, 0xe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:11 executing program 5: dup(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4e23, @multicast1}}) r2 = getpgid(0x0) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/pid_for_children\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000040, 0x0, 0x0, 0xfffffffffffffffe}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x4000000000003c4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 308.863054] binder: 9008:9013 got reply transaction with bad transaction stack, transaction 219 has target 9008:0 [ 308.875544] binder: 9008:9013 transaction failed 29201/-71, size 0-0 line 2935 [ 308.892819] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'. [ 308.903740] binder_alloc: binder_alloc_mmap_handler: 9008 20003000-20005000 already mapped failed -16 18:50:11 executing program 4: lookup_dcookie(0x4, &(0x7f0000000600)=""/4096, 0x1000) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) r2 = inotify_init() socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = socket(0x13, 0x7, 0x6) r5 = perf_event_open$cgroup(&(0x7f0000000300)={0x3, 0x70, 0x1, 0x6, 0x0, 0xdfda, 0x0, 0x1, 0x0, 0x1, 0x9, 0x1, 0x8001, 0xe8, 0xf59, 0x7, 0x5, 0x1, 0x401, 0x3f, 0x5, 0x4, 0x81, 0x10000, 0x100, 0x7fff, 0x9, 0xfffffffffffffff9, 0x2, 0x100000001, 0xffc000000, 0x9, 0x81, 0xe42, 0x7, 0x8, 0xe8a, 0x81, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000002c0), 0x7}, 0x8000, 0xffffffffffff7fff, 0xa0, 0x5, 0x1, 0x5, 0x10001}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001600)={0x81, 0x101, 0x7, 0x0, 0x0, [{r1, 0x0, 0x6}, {r2, 0x0, 0x7f}, {r3, 0x0, 0x4a0}, {r4, 0x0, 0x1}, {r5}, {r6, 0x0, 0x9}, {r7, 0x0, 0x7f}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0x10000, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000c86f88)={0x800000000002, 0x70, 0xca80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x1000f4) r11 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8000fffffffe) unshare(0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getsockopt(r9, 0x9, 0x90, &(0x7f0000000080)=""/165, &(0x7f0000000000)=0xa5) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0), 0x2a8, &(0x7f00000005c0)=[@rights={0x18, 0x1, 0x1, [r8]}], 0x18}, 0x0) fcntl$setstatus(r1, 0x4, 0x46000) [ 308.913907] EXT4-fs (sda1): re-mounted. Opts: [ 308.923326] binder: BINDER_SET_CONTEXT_MGR already set [ 308.941855] binder: 9008:9020 ioctl 40046207 0 returned -16 [ 308.949343] binder_alloc: 9008: binder_alloc_buf, no vma 18:50:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) socketpair(0x1b, 0x80000, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x202, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48044}, 0x4000) [ 308.957285] binder: 9008:9013 transaction failed 29189/-3, size 0-0 line 3135 [ 308.967995] binder: 9008:9020 got reply transaction with no transaction stack [ 308.991081] binder: 9008:9020 transaction failed 29201/-71, size 0-0 line 2920 [ 309.001072] binder: send failed reply for transaction 219 to 9008:9013 18:50:11 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) times(&(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x6, 0x200000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 309.017392] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.036931] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.046187] binder: undelivered TRANSACTION_COMPLETE [ 309.053183] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.063781] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.130214] binder: 9038:9042 transaction failed 29189/-22, size 0-0 line 3012 [ 309.144497] binder_alloc: 9038: binder_alloc_buf, no vma [ 309.152767] binder: 9038:9044 transaction failed 29189/-3, size 0-0 line 3135 [ 309.161807] binder: 9038:9042 got reply transaction with no transaction stack [ 309.170184] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.179549] EXT4-fs (sda1): re-mounted. Opts: [ 309.185793] binder: 9038:9042 transaction failed 29201/-71, size 0-0 line 2920 [ 309.201906] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.208103] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.243582] EXT4-fs (sda1): re-mounted. Opts: 18:50:12 executing program 3: setpriority(0x0, 0x0, 0x0) rt_sigaction(0x21, 0x0, &(0x7f0000000440)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x24100, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xb1d8627a3b5069c1, r3, 0x0, &(0x7f0000000100)="4407ab28f1fb79da7a3b90dbc4c6b495e4c6b8638538f22e5394ae6d557b307022299608fc527b68964ef37ccfe617d38931f8d6112abc4b790cd8060d4412e1aaf3be1340e626099eade363250787b02e82e7c2d5aacf3ba1832164c53966dd03") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') pause() write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getuid() write(r0, &(0x7f0000000340)="58242f01d407000000f450d472b643664204acac13c451400cb8d5e4915cd44af8679df3e5051e9aa822acc560e74ee181f861a090d2a203d0e9669b51cd08f7db9a0eff1f4cc6903c8698e825b335252e038206e594333f50d76895b8faadf635cde54269f184989534949d49fa8c5f997cc7ce0d95b578dee7276fbfc422aed872b2e4591d75e64f3619af4e228c51942ab75bd191c33d18962b6d5bfe4e5798a155b2cae0496a77b3ad7629a59ad09cae277163dfe5a600", 0xb9) gettid() creat(&(0x7f0000000040)='./file0\x00', 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x4) 18:50:12 executing program 0: socketpair(0xa, 0x805, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000001}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb8, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:12 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x1f) r2 = dup2(r1, r1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={r3, @local, @broadcast}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x5, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x100) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 309.541827] binder: 9069:9073 got transaction to context manager from process owning it [ 309.550792] binder: 9069:9073 transaction failed 29201/-22, size 0-0 line 3003 [ 309.562967] binder_alloc: binder_alloc_mmap_handler: 9069 20003000-20005000 already mapped failed -16 [ 309.577987] binder: BINDER_SET_CONTEXT_MGR already set [ 309.584042] binder: 9069:9073 ioctl 40046207 0 returned -16 18:50:12 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) clone(0x8002102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8000000000000014) wait4(0x0, 0x0, 0x0, 0x0) [ 309.590751] binder_alloc: 9069: binder_alloc_buf, no vma [ 309.602574] binder: 9069:9077 transaction failed 29189/-3, size 0-0 line 3135 [ 309.610277] binder: 9069:9073 got reply transaction with no transaction stack [ 309.618184] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.630946] binder: 9069:9073 transaction failed 29201/-71, size 0-0 line 2920 18:50:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 309.649718] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.656764] binder: undelivered TRANSACTION_ERROR: 29189 18:50:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x27, &(0x7f0000000180)={0x0, 0x5, 0xffffffffffffffdc}) 18:50:12 executing program 3: setpriority(0x0, 0x0, 0x0) rt_sigaction(0x21, 0x0, &(0x7f0000000440)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x24100, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xb1d8627a3b5069c1, r3, 0x0, &(0x7f0000000100)="4407ab28f1fb79da7a3b90dbc4c6b495e4c6b8638538f22e5394ae6d557b307022299608fc527b68964ef37ccfe617d38931f8d6112abc4b790cd8060d4412e1aaf3be1340e626099eade363250787b02e82e7c2d5aacf3ba1832164c53966dd03") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') pause() write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getuid() write(r0, &(0x7f0000000340)="58242f01d407000000f450d472b643664204acac13c451400cb8d5e4915cd44af8679df3e5051e9aa822acc560e74ee181f861a090d2a203d0e9669b51cd08f7db9a0eff1f4cc6903c8698e825b335252e038206e594333f50d76895b8faadf635cde54269f184989534949d49fa8c5f997cc7ce0d95b578dee7276fbfc422aed872b2e4591d75e64f3619af4e228c51942ab75bd191c33d18962b6d5bfe4e5798a155b2cae0496a77b3ad7629a59ad09cae277163dfe5a600", 0xb9) gettid() creat(&(0x7f0000000040)='./file0\x00', 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x4) [ 309.774528] binder: 9102:9112 got reply transaction with bad transaction stack, transaction 232 has target 9102:0 [ 309.785878] binder: 9102:9112 transaction failed 29201/-71, size 0-0 line 2935 [ 309.795965] binder_alloc: binder_alloc_mmap_handler: 9102 20003000-20005000 already mapped failed -16 [ 309.806717] binder: BINDER_SET_CONTEXT_MGR already set [ 309.813099] binder: 9102:9112 ioctl 40046207 0 returned -16 18:50:12 executing program 5: setpriority(0x0, 0x0, 0x0) rt_sigaction(0x21, 0x0, &(0x7f0000000440)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x24100, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregs(0xb1d8627a3b5069c1, r3, 0x0, &(0x7f0000000100)="4407ab28f1fb79da7a3b90dbc4c6b495e4c6b8638538f22e5394ae6d557b307022299608fc527b68964ef37ccfe617d38931f8d6112abc4b790cd8060d4412e1aaf3be1340e626099eade363250787b02e82e7c2d5aacf3ba1832164c53966dd03") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001200)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5t\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv\x03Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\xcd\xca\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\xc0\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1\x0fy\x12\x181\xa5|8\xc8\xe7\x9f@\xeb:\nJA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\x02\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f') pause() write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) getuid() write(r0, &(0x7f0000000340)="58242f01d407000000f450d472b643664204acac13c451400cb8d5e4915cd44af8679df3e5051e9aa822acc560e74ee181f861a090d2a203d0e9669b51cd08f7db9a0eff1f4cc6903c8698e825b335252e038206e594333f50d76895b8faadf635cde54269f184989534949d49fa8c5f997cc7ce0d95b578dee7276fbfc422aed872b2e4591d75e64f3619af4e228c51942ab75bd191c33d18962b6d5bfe4e5798a155b2cae0496a77b3ad7629a59ad09cae277163dfe5a600", 0xb9) gettid() creat(&(0x7f0000000040)='./file0\x00', 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlockall(0x4) 18:50:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) r1 = dup(r0) ioctl$KDSETMODE(r1, 0x4b3a, 0x5) [ 309.819654] binder_alloc: 9102: binder_alloc_buf, no vma [ 309.826957] binder: 9102:9114 transaction failed 29189/-3, size 0-0 line 3135 [ 309.835934] binder: 9102:9112 got reply transaction with no transaction stack [ 309.844360] binder: send failed reply for transaction 232 to 9102:9112 [ 309.846986] binder: 9102:9112 transaction failed 29201/-71, size 0-0 line 2920 [ 309.851310] EXT4-fs (sda1): re-mounted. Opts: [ 309.863775] binder: undelivered TRANSACTION_COMPLETE 18:50:12 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000002000)='/dev/zero\x00', 0xe0c0, 0x0) bind$unix(r2, &(0x7f0000002040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) fsetxattr(r1, &(0x7f0000000080)=@random={'user.', '/dev/binder#\x00'}, &(0x7f00000000c0)='/dev/binder#\x00', 0xd, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 309.871372] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.887537] binder: undelivered TRANSACTION_ERROR: 29189 [ 309.895581] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.907395] binder: undelivered TRANSACTION_ERROR: 29189 18:50:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xfffffd60, 0x0, 0x40030, 0x0) 18:50:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)=':\x00', 0xffffffffffffffff}, 0x30) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:50:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8100, 0x104) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x1, 0x1, {0x10, 0x20, 0x16, 0x1f, 0x4, 0x4, 0x0, 0xe8}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xffffffffffffff9c}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200201, 0xc) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3ff, 0x8a, 0x7fffffff, 0x4}]}) 18:50:12 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3e) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e22, @loopback}}) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) r3 = dup2(r1, r2) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x16) [ 309.987561] binder: 9134:9136 got reply transaction with bad transaction stack, transaction 237 has target 9134:0 [ 310.020130] binder: 9134:9136 transaction failed 29201/-71, size 0-0 line 2935 [ 310.030732] binder_alloc: binder_alloc_mmap_handler: 9134 20003000-20005000 already mapped failed -16 18:50:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000040)=0x41b02dbc3d3c4d7f) [ 310.077116] binder: BINDER_SET_CONTEXT_MGR already set [ 310.082760] binder: 9134:9136 ioctl 40046207 0 returned -16 [ 310.086142] binder_alloc: 9134: binder_alloc_buf, no vma [ 310.101402] binder: 9134:9153 transaction failed 29189/-3, size 0-0 line 3135 [ 310.123350] binder: undelivered TRANSACTION_ERROR: 29189 [ 310.128978] binder: send failed reply for transaction 237 to 9134:9136 [ 310.146505] binder: undelivered TRANSACTION_COMPLETE [ 310.153851] binder: undelivered TRANSACTION_ERROR: 29201 [ 310.162680] binder: undelivered TRANSACTION_ERROR: 29189 18:50:15 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='projid_map\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="96758f1c", @ANYRES16=r1, @ANYBLOB="010828bd7000ffdbdf2511000000140003000800080008000000080007004e2400005400020014000100e00000010000000000000000000000000800070009000000080009003d3a0000080008004c03000014000100fe880000000000000000000000000001080007000500000008000800080000000800040000000000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000011) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040", @ANYRES64=r3, @ANYBLOB="002008369a0000083cd1e2b714405e9955206c02d54cbc80b2e08fc4926c0251bdb5638fa187eaebd79791a53f56f06a1905c01aa0695d245d174607250892968a67a4e2a5b7b487696019b6215c"], 0xd1, 0x0, &(0x7f0000000100)="d27e01678c0a534bc8017371503e23477dac6885d42bf1c8f9482c8a0b05b10b22406a3b0bd20d0895e04c2a740ed130f19a5292117e196a4249b6c404fbf84fd72b5047a14022e00dc1d8e6c2292b9d7456ec474b96e7de9513fc70dc1220cc7f08e8dc71b710d17271e2cd4b6a83ac892e2e4dfc48d1c982c49e059902050f7c98e0c113329e5038f400cbc19994ca717bb5aa51570c13d3fe058770a76016ae19ae0e019c77097035e96e59d69814cd697057e0324c4500860f70d4c38967a7abff6b948160983e328fd2fa9d8f463d"}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0), 0xfffffcfd, 0x0, 0x0}) 18:50:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}) write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:shell_exec_t:s0', 0x20, 'root\x00'}, 0x27) 18:50:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x4e21, @local}}) 18:50:15 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockname(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x204, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/227) 18:50:15 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="3900000007000000a0020000d8000000800000002c000000000000000000000006000000f3a77752"]}) 18:50:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000001040)="c3", 0x1, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x1, 0x100, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x70, 0x7, 0x1000}, 0x4) 18:50:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1, &(0x7f0000000240)}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/174, 0xae}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/46, 0x2e}, {&(0x7f0000000580)=""/126, 0x7e}], 0x6, &(0x7f0000000680)=""/225, 0xe1}, 0x9fb3}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/16, 0x10}], 0x2}, 0x5}, {{&(0x7f0000001800)=@isdn, 0x80, &(0x7f0000001900)=[{&(0x7f0000001880)=""/121, 0x79}], 0x1, &(0x7f0000001940)=""/55, 0x37}, 0x80000000}], 0x4, 0x2000, &(0x7f0000001a80)={0x77359400}) recvfrom(r0, &(0x7f0000001c00)=""/222, 0xde, 0x101, &(0x7f0000001d00)=@nl=@unspec, 0x80) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001b40)={0xffffffffffffff3e, {{0xa, 0x4e23, 0xe0f, @dev={0xfe, 0x80, [], 0x1}, 0x1}}}, 0x88) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000001d80)='trusted.overlay.redirect\x00', &(0x7f0000001dc0)='./file0\x00', 0x8, 0x0) recvfrom(r0, &(0x7f0000000000)=""/172, 0xac, 0x2, &(0x7f0000001ac0)=@xdp={0x2c, 0x4, r1, 0x15}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:15 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe(0x0) setuid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r0, &(0x7f0000000000), 0xb35) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a71e65f1751251"], 0x1) fallocate(r2, 0x0, 0x40000, 0xfff) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) [ 312.681699] binder: 9170:9179 BC_ACQUIRE_DONE u0000000000000000 no match 18:50:15 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffff74) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x4, 0x7, 0x4}, 0xc) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={0x0}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) [ 312.728046] binder: 9170:9195 transaction failed 29189/-22, size 0-0 line 3012 [ 312.759157] EXT4-fs: 2 callbacks suppressed [ 312.759166] EXT4-fs (sda1): re-mounted. Opts: 18:50:15 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x11, "c9d8da2577d0672f34e5ea9b130aa25427"}, &(0x7f0000000080)=0x35) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r2, 0x5411, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000540)) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000780)=""/202) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000400)=""/228, 0xe4}], 0x4, 0x0) pipe(&(0x7f0000000000)) [ 312.784500] audit: type=1400 audit(1556823015.723:48): avc: denied { map } for pid=9198 comm="syz-executor4" path="/dev/full" dev="devtmpfs" ino=1031 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 18:50:15 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pipe(0x0) setuid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) sendfile(r0, r0, &(0x7f0000000000), 0xb35) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a71e65f1751251"], 0x1) fallocate(r2, 0x0, 0x40000, 0xfff) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) 18:50:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x81003, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x80, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000880), 0x80000) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0/file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) r12 = getegid() setxattr$system_posix_acl(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x7}, [{0x2, 0x3, r3}], {0x4, 0x1}, [{0x8, 0x1, r4}, {0x8, 0x0, r5}, {0x8, 0x7, r6}, {0x8, 0x4, r7}, {0x8, 0x3, r8}, {0x8, 0x4, r9}, {0x8, 0x7, r10}, {0x8, 0x1, r11}, {0x8, 0x4, r12}], {0x10, 0x2}, {0x20, 0x2}}, 0x74, 0x1) [ 313.006615] EXT4-fs (sda1): re-mounted. Opts: [ 313.064324] EXT4-fs (sda1): re-mounted. Opts: 18:50:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x100000000000000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) alarm(0x100000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffff800, 0x20000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x3fe, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:16 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x82100, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, 0xa0, "b7f8b397819042e42c2bccb052c487ee795408af9b19e99e1e2d87676197faab18980ce99a5777bcb211814c139df4e7576b0f40fb47aa42e1d923847fdb6675288e083873d4a34ba1f2919ecd4c11a617a8991711e990348a8e57c64d004113a2e8783096d507a7da4731ce2ad4a3a81497c6ffaaa8a9947373c724bc00997821570bb7195dd80edc8184bdd70f00a655742821ebd3bf2075d0cffad8df86ad"}, 0xa6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 18:50:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) 18:50:16 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0x1c, [], 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}], &(0x7f0000000240)=""/28}, &(0x7f0000000300)=0x78) openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x404000, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 313.471506] binder: 9170:9237 BC_ACQUIRE_DONE u0000000000000000 no match [ 313.475711] binder: 9170:9195 transaction failed 29189/-22, size 0-0 line 3012 [ 313.486149] binder: undelivered TRANSACTION_ERROR: 29189 [ 313.491760] binder: undelivered TRANSACTION_ERROR: 29189 18:50:16 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) close(r0) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x1000000000000006, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6, 0xfffffffffffffffe}, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 313.521770] input: syz1 as /devices/virtual/input/input8 [ 313.531692] EXT4-fs (sda1): re-mounted. Opts: [ 313.542626] input: syz1 as /devices/virtual/input/input9 18:50:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:run_init_exec_t:s0\x00', 0x25, 0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:16 executing program 0: r0 = socket$inet6(0xa, 0x1, 0xe70) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) clone(0x0, &(0x7f00000001c0)="093fbc093e4c60ce0dc4f41fabd8e807aa579f787028909e63cfa5e3104ec018014e9bcc7f52a993164d9debbb4a1927a7a3e73bae4e38c77ec9c232e5519e06a2989e4183c1a2ba2554ba97f955e6d95de81f6c6d80cc75476cd5fdb254c695c8ffd324015fcd25c5086c7834eec0b7df83457aa00e19d0e6ca2c441c474d6f86cc0bdf4504b29d8dd2a0508f6c476843d8ba27b775f91821e999b757ced9ccd24ceb06a2667a5b9fd2fedf49f9345f058efca38de23f2727158b83ce0a29f33a385d1911329b9a6c03bfe4d3ad90c3c13e8a22ea8548947ccc5ca298cf0982bd48726c30194ef5f85f179241579c19094991", &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="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") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @local, @rand_addr="5696c2d71b5089f83221f4e011624c66", 0x80000000, 0x1ff, 0xd8, 0x400, 0x399, 0x1fb58df1f81f9da0, r1}) 18:50:16 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffefffffffffffd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) pread64(r1, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r0, r1) [ 313.602607] binder: 9255:9257 got reply transaction with bad transaction stack, transaction 243 has target 9255:0 [ 313.619699] binder: 9255:9257 transaction failed 29201/-71, size 0-0 line 2935 [ 313.635528] binder_alloc: binder_alloc_mmap_handler: 9255 20003000-20005000 already mapped failed -16 18:50:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) [ 313.651102] binder: BINDER_SET_CONTEXT_MGR already set [ 313.654076] binder: 9255:9263 got reply transaction with no transaction stack [ 313.656543] binder: 9255:9257 ioctl 40046207 0 returned -16 [ 313.664407] binder_alloc: 9255: binder_alloc_buf, no vma [ 313.677567] binder: 9255:9261 transaction failed 29189/-3, size 0-0 line 3135 [ 313.685498] binder: 9255:9263 transaction failed 29201/-71, size 0-0 line 2920 18:50:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt(r0, 0xffffffff, 0x3, &(0x7f0000000240)="bdf4b292344d331b7610b0439ff01314f9a12566a9d0e1db3e2eabbaf5682bccab5fd2927f2a1975dbc8efb94400d3cd451fa06501d781f91edc9d75acef7a1b38974346dfcd18cdd85b2d4c85906e069d4fb2ae840cc2a7c56d44801700443ae302151992ff24720bd09ded23ec99c7d1dfb92e", 0x74) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x4010, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x0, 0x2, 0xa}], &(0x7f0000000180)=[0x0]}, 0xffffffffffff8001}}, @acquire_done={0x40106309, r3, 0x3}, @exit_looper, @request_death, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x4, 0x4}], 0xfffffffffffffe06, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x1f) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) pipe2(&(0x7f00000000c0), 0x800) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) [ 313.698326] binder: undelivered TRANSACTION_ERROR: 29189 [ 313.704410] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.731400] binder: send failed reply for transaction 243 to 9255:9257 [ 313.749954] binder: undelivered TRANSACTION_COMPLETE [ 313.763150] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.774195] binder: undelivered TRANSACTION_ERROR: 29189 [ 313.791450] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 18:50:16 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0xe20596adf6c08091, 0x4) [ 313.805148] EXT4-fs (sda1): re-mounted. Opts: [ 313.820183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 18:50:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x202000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f00000000c0)=0x400, 0x98) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000140)) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 313.849580] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.864518] binder: 9287:9294 ioctl c0306201 200003c0 returned -14 [ 313.879594] binder_alloc: binder_alloc_mmap_handler: 9287 20003000-20005000 already mapped failed -16 [ 313.890878] binder: BINDER_SET_CONTEXT_MGR already set 18:50:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @local}, 0x0, {0x2, 0x0, @multicast1}, 'teql0\x00'}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 18:50:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000080)}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file1\x00', 0xffffffffffffffff, 0xba, 0x0, 0x224000, 0x0) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0403a74f2de995a00a1dafb557ef3423fdf71b458a1aefd66d62979833faff7f0000000000007cb08e525ee5436dd53d953e39666377277038a758bd21d8ed75ed8a6145c8c1a72ee3076715c625b1be4a84a1f843c3d6e4be4224585dfe3523c21d8174744f22acc5175bad9d7bbae67038ccf58f9dd990a037f9b1634bf1eb4fab86c92f179735bc6bbbd538b6ff218de7b08cfc3ccb7a329c4ee66adf9f19c9b0d2c2379d50e3ef25346c7aea43bf53103b38634a2716d46b69fe835ec2781932be759f43a3cff0f0dbdbeee1eac9f413421ec2f375b766e0f2ea0806bb7452d99c000084000000000000"], 0xe, 0x3) [ 313.900129] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 313.907965] binder: 9287:9294 ioctl 40046207 0 returned -16 [ 313.915632] binder_alloc: 9287: binder_alloc_buf, no vma [ 313.927152] binder: 9287:9298 transaction failed 29189/-3, size 0-0 line 3135 [ 313.936091] binder: 9287:9298 ioctl c0306201 200003c0 returned -14 18:50:16 executing program 3: socketpair$unix(0x1, 0x20000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xfffffffffffffd6b}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 18:50:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x8, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1263484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088a0000000000000000000000000000000000000000000000000000004a0f37c5a60e697358d63a4038e285b0232e02e8cae478f8a9b3a77b549a861673ad5658251b38dfdfd0f6cf2a5814fe4fa7dab2a78082190c423ab35bca02a79ca3ece8f85e09a143c1b81bc261d1f9486cf96cd7018645626822d4d84d963a7d2024cbac1b500634090a18d414428ec3ce2df9214654b34d701218967524e1cdfc44280970655cc22f2c9d7bcfbf5542df52596ecaae32b92379748466274424f6ab53bd49ec70621d025d0b87ee1608e4278c1496154233b59550f3ed0754dcf1f05113594a85b9fda2603017e4fa20bdaa0c239c736d38da93c3fc2e"], 0x0, 0x0, 0x0}) [ 313.945195] binder: undelivered TRANSACTION_ERROR: 29189 [ 313.956711] binder: send failed reply for transaction 248 to 9287:9294 [ 313.977634] binder: undelivered TRANSACTION_COMPLETE [ 313.989998] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.038830] binder: 9313:9320 unknown command 0 18:50:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0xfffffffffffff70e) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) signalfd4(r0, &(0x7f0000000040)={0xff}, 0x8, 0x80000) write$binfmt_elf32(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8c7) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) setsockopt(r0, 0x7fff, 0x1, &(0x7f00000001c0)="494348452f1c3873b790b759e290ba782e0fab1d76e60d9fb0c450c8d0291f5c1f0723589fc541f6988127c94da5e7025703ee7e2770c119690d8fed15b3b63dc6f1e7a445403f104ae78591ae89b49166c8a4b4a53cd336e5b68c359dfce16ee930fe74798483648208a1f3d5e1a747e6c7611aa20e270a489e1361e312597d05fcb7f6d9d5fac83aae3b683cad1bb7a37bb11e54a58bd62c20628fd4cc664487e3939546", 0xa5) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x100000000, 0x236, 0x6, 0x4}) 18:50:17 executing program 5: r0 = socket(0xb, 0x2, 0xfffffffffffffffe) write(r0, &(0x7f0000000340)="2400000052001f0014f974070109041e020007f607000100010000080800000000000000", 0x24) 18:50:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x8c1, 0xd7d}, {0x666, 0x7}]}, 0x14, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 314.061808] binder: 9313:9320 ioctl c0306201 20000000 returned -22 [ 314.083630] binder: 9313:9320 got reply transaction with no transaction stack [ 314.093582] binder: 9313:9320 transaction failed 29201/-71, size 0-592839704576 line 2920 [ 314.109902] binder: BINDER_SET_CONTEXT_MGR already set [ 314.117890] binder: 9313:9320 ioctl 40046207 0 returned -16 [ 314.124560] binder: 9313:9327 unknown command 0 [ 314.129824] binder: 9313:9327 ioctl c0306201 20000000 returned -22 [ 314.150159] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 18:50:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c748) r0 = open(0x0, 0x0, 0x0) mkdir(0x0, 0x0) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64\x00', &(0x7f0000000380)='\x00', 0x1, 0x2) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') write$P9_RWRITE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) mknod$loop(0x0, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2021, 0x1) [ 314.159447] binder: 9313:9332 got reply transaction with no transaction stack [ 314.179440] binder: 9313:9332 transaction failed 29201/-71, size 0-592839704576 line 2920 [ 314.194121] binder: undelivered TRANSACTION_ERROR: 29201 18:50:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr="18d0083dcd284bc257ad29a546e15a5c", 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) sendto(r0, &(0x7f0000000000)="5bab596e6c6fb825137e7fd704b0200626ef48b67f8459464655f8acf93481e8715db28eae2feb103cdd3f9515931b59abd893886ba6852b4329b1946e09dd8889d6db5a2ddcec7caede67894d44f5b27141a29ad0816d7fee9aabcb68613eae96484aacb03637319090652472bd762f12a82bddc926f26f9416896b97400f306f9ad75c7a70a84599da76b93761923ad983cf8c6e70d3ac81f1ed266b4e4fce325be530e7ee5c178351d62e3e6d99954f074b284d39", 0xb6, 0x800, &(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x80) 18:50:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634005"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x2b}, 0x28, 0x2) 18:50:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) socket(0x0, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000006c0)) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xcd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000080000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r0, &(0x7f0000000880)=@abs, &(0x7f0000000780)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) ppoll(&(0x7f00000005c0)=[{r3, 0x42}, {r4}, {r0, 0x4080}, {r0, 0x2240}], 0x4, &(0x7f0000000600)={0x0, 0x989680}, &(0x7f0000000640)={0x50}, 0x8) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r1, 0x44, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) [ 314.232054] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.253093] EXT4-fs (sda1): re-mounted. Opts: [ 314.339556] binder: 9351:9358 unknown command 88105728 [ 314.349921] binder: 9351:9358 ioctl c0306201 20000000 returned -22 [ 314.369253] binder: 9351:9358 got reply transaction with no transaction stack [ 314.383222] audit: type=1400 audit(1556823017.323:49): avc: denied { map } for pid=9347 comm="syz-executor3" path="/root/syzkaller-testdir568090847/syzkaller.OWiLS3/144/file0/bus" dev="ramfs" ino=23878 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 314.417899] binder: 9351:9358 transaction failed 29201/-71, size 0-0 line 2920 [ 314.432251] binder: BINDER_SET_CONTEXT_MGR already set [ 314.446388] binder_alloc: binder_alloc_mmap_handler: 9351 20003000-20005000 already mapped failed -16 [ 314.470164] binder: 9356:9365 ioctl 40046207 0 returned -16 [ 314.478593] binder: BINDER_SET_CONTEXT_MGR already set [ 314.484075] binder: 9351:9358 ioctl 40046207 0 returned -16 [ 314.490140] binder_alloc: 9351: binder_alloc_buf, no vma [ 314.490187] binder: 9351:9364 unknown command 88105728 [ 314.495611] binder: 9356:9365 transaction failed 29189/-3, size 24-8 line 3135 [ 314.500152] binder: 9356:9365 unknown command 262144 [ 314.511600] binder: 9351:9364 ioctl c0306201 20000000 returned -22 [ 314.521457] binder: 9351:9358 got reply transaction with no transaction stack [ 314.529511] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.536661] binder: 9351:9358 transaction failed 29201/-71, size 0-0 line 2920 18:50:17 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000180)=""/129) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x0, 0x10000101) fallocate(r1, 0x0, 0x0, 0x4003ff) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000640)={{{@in=@remote, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) dup2(r0, r4) geteuid() ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='./cgroup.net/syz0\x00') 18:50:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000340)=0xe8) r6 = getpgrp(r4) fstat(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, &(0x7f0000000d00)=0xc) r9 = fcntl$getown(r1, 0x9) r10 = getuid() getresgid(&(0x7f0000000d40)=0x0, &(0x7f0000000d80), &(0x7f0000000dc0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000e00)=0x0) lstat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000f80)=0x0) lstat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001080)=[0xee00, 0xee00, 0x0]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000010c0)={0x0}, &(0x7f0000001100)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0}, &(0x7f0000001180)=0xc) fstat(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000001340)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x1001000}, 0xc, &(0x7f0000000c00)=[{&(0x7f0000000180)={0x20, 0x38, 0x600, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x8d, @fd=r1}, @typed={0x8, 0x67, @u32=0x8001}]}, 0x20}, {&(0x7f0000000380)={0x450, 0x11, 0x800, 0x70bd25, 0x25dfdbfb, "", [@nested={0x204, 0x70, [@generic="435429f2667d2fd1de326bdf900c8dd98178b8572c1050d1d8a5901be25eac4a6038e12be48989bea47edb4e1c9e6496f9d7445689f48c232353bdc1023a654f65e5071ac0fc584635553b520ea6b54fee1721f69b378716248e140defe50d16571a51301bdc91933eef7d1a1cd0fd6083e5cd48398aa6f1971b97de5cb32f582a78f24f9660d3682e5ef527abef7aad4b40f1dada8590b5a4914fc4eed2351f93e4294bfd1aaeadfb7956ca740303c4a70016b6d259b2c1e133a7316ed6686a905ff263a9fc233dde778eed51cb37da3e6ba1fc90683fc8a8f76f5733bd0fe9ef28e71ad0a40228fc3b46577c6077916d0220fdf32e4984", @typed={0x4, 0x89}, @typed={0x8, 0x69, @u32=0x9}, @typed={0x8, 0x90, @str='\xf5\x00'}, @typed={0x8, 0x6, @ipv4=@loopback}, @typed={0xc, 0x36, @str='+ppp1\x00'}, @typed={0x8, 0x92, @pid=r3}, @generic="5de454b513492b6df2ded569ecb3de3392b65ea2db1156a7577247e0936c971f126d029619bc187fa3f6d384f9b24ff78d374d78fb8933b24bbe551618839b2bc774efd97698d7fbd2dd2edc7753318ccefeb4f33a90fe303745c3c2f18edc09e57513131126bfba653eedb4977ded24e5cd53343042dfcb0e681b9def0bb8bdf8d7c41ebaddb244bfa55956fe42c8240774cfc9cec06a0ac08477059d4d9ba082b5ddd550e3a8e24579e2c7e8da50d8b180ecba0deb35e8a240032851814cd34697027d5a", @generic="8bbb4957df11f7b71af9", @typed={0x8, 0x1d, @ipv4=@local}]}, @nested={0x15c, 0x27, [@typed={0x8, 0x27, @pid=r4}, @generic="15baa9b36bcf11762eed90d8bc76fd3c2e30438cb633e87f28bb7a80b856e2a50b0a44e38736486c2d380603bca81975987ca99b2ca714f40b341d088ccc5c3e09d9eb1a5b70cbb84b36edb10ebafb1f9d5b2720bb252fb1ebe6a2872c1cf3984acdc35515d8814e9eed15445b1adc42bef7e6770852028e40db8a639f719965c527af8bbeea50c8213c7f3ec14615e15a4f1ecb40f27caf055e343952a596f01da2aa982a745a1e8559dcf6a40ae9c79998ba3063d84ea7ad1de5", @generic="c7ff9022326342cdeeb51da3bf0baa948744e5f5d069d5e0f5e80861d6c29687c3810d871f59c14f7a26ec1bb453e9ab8a76b2c5a23a6779993a73145b344e1f2032e22b1fa8d85ff7d8758bea3bdd155a2f582ac41eb86483df67e8891e4dca8eaf63511a1f7e7ab151cbd6be6f93f14f759121abf477fcdedeee25f65491f2d2466a067ff5186003f9", @typed={0x8, 0x53, @uid=r5}]}, @typed={0xe0, 0x82, @binary="8421f8f0ead7f5f55f5d25ef877362d164e80d210f1a0de4d15ee89924e95c535ffc03b974847b6dfbd454dac9b10c22c40da5b78a54aad73b6215caf9c87ceba15e8b6404584ebc9ea0b99599c5d07e0dce4374fe0e61125bd3fdd507b52375ef85977310ce812b0cdba99a9f3f02ddcd94888fbda72dc707301994ca8ba615fcef229010e530ad9f2c5987f92516347b7f0fb85c421db98e3dfb36f9700a93ab0b63e64b2cc118cced632f96a6029fc2c69c127f92eaf2a4d2762ddc85667d4ac1a33410994710d67ad1228a4573c86128536b1876d9aae2a771a3"}]}, 0x450}, {&(0x7f0000000800)={0x3f4, 0x30, 0x8, 0x70bd26, 0x25dfdbfe, "", [@nested={0x174, 0x39, [@generic="d3bfdbdc10bf0c57415d170ffcf91b053e651ff00b6c909022151a4f2aec5e2a44d72dc2476dba6dcf72bfba691e098e50fa670c34427f32d469753a4c5f687f096243953f41b6370cb2a3466401fabb95d858bdb6f6152045023fe9ec75fb45973bcdddd201ae70e73c320b006ace22bf7cf98f20a90e87053fc30661015ad5b084e72d50ad27647dae963f0da44437434e92bed064de585e60095f0201ccc8c3368a923cf6edd9519b68d080237682ea747c9cd30897a691fb87f3c0b53b5939aee90d86d60c111e5bfdb5fb", @generic="5c983c0a1503c8a1eda58c8a34df30c692d6b83456723303a944c221b09791ec275cf37b0423", @typed={0x4, 0x67}, @generic="10480571610f1a6dd409f16d1d4850fc8705370835204b3c06508b0ed785d0266f0085f1941cc5668bef603d64cb3328cca2ddd6894f7994b489772b8515e0624db0184ea02e8853fec450824fdb2f201a613aa722e4a899a5c126e942093a29229f04372f601023bb4a5d94698097203ccf0568e46b"]}, @nested={0xc8, 0x30, [@typed={0x14, 0x11, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="5ddad0081f11cb9ea853576cc21bbbd6fea2cf7959ff82c28d60ea201c93dd5bcd11212a775a6a6790276439284ffaf0ced024c455ff0a76f99c22048caa5527bd472082ae7186951380fd2fc2451872da67c002e04bdf61d5194ed505daee9dfbc083ce5f923dcbbf7959404bebd7c92c285daa6c3ec0d1ec3a82fb572b444fdb13f762bb195db058a221abf9f61fadc22fe4e1bc998113b2f03e2ae1211962bc8ed7b40c38d741cd5e69d3be11"]}, @typed={0x48, 0x3a, @binary="60d79d374522b17b9124412ab740e026b97b0439f4a592c1c7654e62f94696b330264d49b03b101975a26b9743df8ef73cd4daa32621bd10630fa4537dbd5ed260232e86"}, @typed={0x8, 0x54, @fd=r1}, @generic="463e0c1c6254d869f3b229c6d607e1bfee569656ae91b61b95dd9d562c013132759c1c2b1dfeac7d8c8d1bba980378ee9567273f8a5054c67f550cf2a6ad32da764bb844994f995e0095b2407fd665ed72e0078ec547e43a9d9d4a951c42cd3b26b5b6a685fe6520e635ff6a339ad5715175e1330ba0122365d747b8f314cde30b957fb0528f047637ac346dd11c26514647ae362dd54f7454059d15120cb4165b34014c91b9aa4fe3ebca2f115b3f1a7abf6206b5c73ded43d54a201b52f0b5c2e7b7a5192ba2e9af6d91273f45172fef9b5076faf61dcf9fea1f8969471ca4c44212b03b2a70", @generic="9ec00f816ccec6245438dbaa353ce82484b6ca6e77210152b7da92fb4a2c93fcb63328a24f2b092ae7a5c2237bc1acfded52e8760b19ee4e67ba11f9ef4a851675bd93fc069916e054bc32f1bd556afc16360dc6523e00ef51c2814e687895f856e0c056e6be434d490a2148ad73"]}, 0x3f4}], 0x3, &(0x7f0000001240)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r1, r0, r0, r0]}], 0xe8, 0x40000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) 18:50:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 314.540165] binder: 9356:9365 ioctl c0306201 200002c0 returned -22 [ 314.544539] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.556231] binder: 9356:9367 Release 1 refcount change on invalid ref 1 ret -22 [ 314.654884] EXT4-fs (sda1): re-mounted. Opts: 18:50:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x10001001, 0x0, &(0x7f0000000280)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='.\x00', 0x0, 0x2001005, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 314.679863] binder: 9376:9382 got reply transaction with bad transaction stack, transaction 258 has target 9376:0 [ 314.719119] binder: 9376:9382 transaction failed 29201/-71, size 0-0 line 2935 [ 314.758689] binder_alloc: binder_alloc_mmap_handler: 9376 20003000-20005000 already mapped failed -16 [ 314.794846] binder: BINDER_SET_CONTEXT_MGR already set [ 314.800319] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.819720] binder: 9376:9387 ioctl 40046207 0 returned -16 [ 314.838360] binder_alloc: 9376: binder_alloc_buf, no vma [ 314.844790] binder: 9376:9382 transaction failed 29189/-3, size 0-0 line 3135 [ 314.852947] binder: 9376:9387 got reply transaction with no transaction stack 18:50:17 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)="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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x1ff, 0x209e20, 0x7, 0xfffffffffffffffc}, 0x2c) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = eventfd(0x9) epoll_wait(r0, &(0x7f0000001900)=[{}], 0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001340)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001380)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000001480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@ipv4={[], [], @remote}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000001600)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000001640)={@remote, 0x0}, &(0x7f0000001680)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000018c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f00000016c0)={0x18c, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x12c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xb52b}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x400}}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000051}, 0x80) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000080)="081f22272336beab6b5ab460553f4c3cf19cd149433c796cc215d8fb7d5e26bcbba13dd5c1d35dac7b5bc40689531e444b83186e17b21e98abb5ca903b3f3468a9c1ca99f5220eb3c96e141feacd8e3e2e97a4f591d5d50a9d0379b6e7c52fec99ba90b7d81163107c9d19706ed523f7440a0fe6cfd928cd57c0e10bfecb95f262f0129c80a4f774c1793fc5d918a647b3030a24ff01e9df3118859d0a6f0ebecb28020faf4ee63699315d50c251846a88149932df", 0xb5, 0x0, 0x0, 0x1, r3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000180)="b72375ae41acc303f2a0ad026cc56404f85277f9f228857151c712d87695479fc3c9ff4f5df6a333bfde032384f096d90cd55606e08153eaac3e51324e743440028e34fec39e05e45a792112c810745f0567e9a4cf01a906", 0x58, 0x0, 0x0, 0x3, r4}]) [ 314.869713] binder: 9376:9387 transaction failed 29201/-71, size 0-0 line 2920 [ 314.889835] binder: send failed reply for transaction 258 to 9376:9382 [ 314.905561] binder: undelivered TRANSACTION_COMPLETE 18:50:17 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001d80)={0x0, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f0000000600)='vmnet1wlan0md5sum\x00'}, 0x30) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/full\x00', 0x800, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002740)={0xffffffffffffffff, 0x50, &(0x7f0000003b00)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003080)={r2, r3, 0x0, 0x6, &(0x7f0000002680)=']ppp0\x00', r4}, 0x30) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000003bc0)={@in6={{0xa, 0x4e22, 0x1, @local, 0x8000}}, 0x0, 0x800, 0x0, "cb16a967d30babb42436b80c78a4ec1527649767a7c8be79eaccd332264c92857a82c83bbabbca95478d70507a1ec36f1a85c09c0eafa4de7a699497dc1f1e872b5866afefb1ae85dab61e09512258bf"}, 0xd8) write$cgroup_subtree(r3, &(0x7f0000003b80)={[{0x0, 'pids'}, {0x2f, 'rdma'}]}, 0xc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000003b80)) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f00000001c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24, 0x1}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)="22c8acddbfd739b75698e5caca7cc703949676c97922c32d33548b424f0d87d98fb589373a9e13a90020a840993b02d7cc0bc655b3b1472b121462b704a7f6df", 0x40}, {&(0x7f0000000280)="01f2d7e18468e320d31f4e4a679bedf4", 0x10}, {&(0x7f00000002c0)="46e99352b7a2aa257b5c37f56caa13451fd81dfba15aff6fc772b0add4d8", 0x1e}, {&(0x7f0000000300)="f4b6a62b599d25a5f838ff98a70f2e48b9c72252c612aaa959f16caf91cfe1b31aab365458e6cc9d", 0x28}, {&(0x7f0000000340)="7809426c8babec5bf77ddf968996695aab34321ef2f9bb69d523869813d5a372a424981f4027212d2f0a7fc47199c932f7cb47f231b0211aea8cdb97229b5372712027be3b26b1fa8d20222b105f2c7a1b917d8ab11a718c6798c2fd315563290592375d18a2aad09bee1c3a50a633d92358362d43a96f7cab6349a18077249bbd65", 0x82}, {&(0x7f0000000400)="4887799ae03afb06bc5b7727e6e9c94d4395105d857f2e5195f325b69ee93b1ceeb13d588c69991600bc583ee7dc4d05bd71e592ff3aa99c8e5d4d5e35424ceec8571241524e758edd9ae68cb5f5bff6560f4f8b32bf24e285e8e0c07d04ddea4ee6253a42e209bde507696f327f6ba9b8610cbc2c3ccce20bec2b4633605c5024ee58b845460d37eb0441b4d3ee72547a0704de48530dd5f62fffa9b27f5b6b2b59", 0xa2}, {&(0x7f00000004c0)="89b9e26fb89bbe8cf7f21fa2f6d04ef83ef61a8b9731a96f9453e1ebee7c4cd68bc6952cd9638645c664d2a16c237e9563f3343c2fde9e9f791d91bc55286465e3217197c77b3c379fac1f7337507ecf61840cda5b822703dcd4c1e4121fb336915dd5", 0x63}, {&(0x7f0000000540)="129ae7bdb312410784f6e85d5a598c2a9d036f5ef4f84fd0151b9659d8b1ed6eeb9577ef285fc5d47d2d2571d939c86935fdbf16055c5557af5c7b01ad3025d316d8580579221de255905fd64e1d92241ec7530869f677b88f256dc2fbae90ae36732e4c08fd6349dd3fead8e88c99186a610a60f0129c82dfdb7b86337df8e0cbf851a746e376a6fa626bc1696fe171ecc7180e4a7175a95edeb71b7f85a404d7a9d3a84f22d1852291882fb1", 0xad}, {&(0x7f0000000600)}], 0x9, &(0x7f0000000700)=[{0x1010, 0x10d, 0xbe, "f846c37850486d8c2242d432a3287b08ae516cc8b15210bffd63a15d2bed8a9d97da13d1bd6b164d262a4cebfdf7f6150a6c9fd456e0d341a0675bfe94d31dd50c534d6ff50d84e3fffdab8ecdb4f828de2dcd395922e3640dcf27a722f9bc87d4a8bb1a8d21786685b668d718c8ae3cdbf30122f28f92d22f60c3996876180c12ecc16b2a02c074d801baf8fefc79d1cce2392808fa4e009bb8c2908c6692aa94ba0a0890a04bfe07d43d0f54bf58eed4474d1fae4b3aba3bbbd546d900d9a5e4d70047af0f1d62f72e821a85171590ca57160d44406f9df6b8f849d7fa9f04566e26e2870f645ac001db1d029aa068666482dc86bef736480cc8049b4514b984dd83c23964f80ef28175d32d84f33b383e7a23d5a06d5ce5da881a3fda14804a62255b3b05cc17c3dbabf56b00e3ba9c418d932c299770161a8dd5a4df66afb0c8f997c67582ca11ef609af4af5fb507b6c3e2c2d6f9735f4bd3375463e0d18b6572949e2bc44f888c648b9a5635ec66724835371fddcd8fea1b4cf8896076b8172aa0cf1102c923ae2f241d7450748f3af09e40ece7d3948b374c56d368357ede7d20e5bc0d900820aeaaede6c01fd431bd7a6685999bce1cefd4692c71455dbfddc40fd7aaff8fb8e9fbb8b239a20f1ad4bf5eb46b73b9a68bfd1b32483a64e1306e12be628c7f4b4958202617322874357aebf005dc12502749dffd4831179dd7b0288fbb5a80264bb2dd83d2aed1ef3f8e2329769490d25cf1596002ec1c0337cbca1b84e402e03cf4dca94af5f1372a3e6a857642c022ba6311eb8687bf74ea603b7b4c68f638ac160456fad500f396b5d7725c4713a750028244bb57fcca2f132b30631bb6347e7660d06c8e23f82e24e6afebc1b22ae9907825f4cdc6794306a14e6d03f7dbd51944ef9f6ae357eb8081a252a3317eacc4f83b4a5dc8dca9e5acc4cfe6d0401a05004efc47624c18d642c8211b5f2fc7d1a3a96e94c7904c4b9bdfec1f5237f4089d18694c395ee2cf54a1aada5f52525172d1bf4c8fd185ffc11e294474749e8afa9504141d9d09386961bffe4441dbd5bfb2d0acec337cc61b37ee0cb04f5f7b0837ec1d7864bc86fc6249f616566c25b3b629b786d236ee9d418c6dc312ece2086ef1cc4432107b0b3ab97a9cfb2914ee7cada064181ab24dcfdf37439c3fbcfdb253edec4150701e33b29475be3c475c190f7fb283b6cf1acf814fc9897a7d877680f39676ee04b4988c49f63e4ebe517550b7f148536929b3c7ae9d5d1f55915cdf910e530d6f2f38bf831e85b17af8aa9e4f32dcefb2f6046c64929119a17357f152148bbf6bbca6382f32a4786e69e12088acd5e1b7010618aaa7c4bb6128d995d4060fc5846b79ac7b0a6e83ec92fd8e216363ffb1e1576acd888f776fc6c3464e877f6fc5eba8f2bdd0abc0f45d63ca82f39abeeff477f1c71ef3ecc8bc7fd1a5dea9ade34bb5d2bd28a024c8a8797d49dd5629cc5da761d8af005225d7ed5938d15b9195a309b445144e10081451a955ae74a0233a6ec738c5e553493b06aed515999205a252abf1876ae51fba46e36b8ac3f27800d98d32bac17019ca2ec7e16ef112d9f990641121267ad4de89639df6cd42b820387c8f2933322b689c6b42ef1c86beeea0f588d157c1314017e49e05f8b348eb7ba1b5bbca9bb6d1f37f9e43c992c625534c800be3949be52eafed1c439eea9c20c2ee63b11bd83ed56f4380dbf9c866edc8cad4915534861ca65c4e4a1567d3d87da456e087c7dc316772794fe4805434fa9c4c34536fab10210e2b30651c8abb8fc2fdeab0c1435aaa2dcf0b7000b8169251f7e5c590722a1399352bf549c238d425f41da8c1e011c5b7a8bf257d6d0881c02a0151c4f79739e809565a53b4cc4d28bab3d80b9d1865c6f3b8ad0a84f96c0c7aa1bb12fc0cb39a089260ad3c915f5c41e6e6ed57a6635ccf4749eedb49d0a48927e623d0f4e54eb3a4e0af1b86fe27240d088243d056a7cf06494ef3d9b2198a524821a7153ccf5a09ced38dced739241113bee39405d0e05669d27b9e101673f811f7cfe1723222fa99ac95a6a2150986611b12662146630a4753832869b82db26f6d4d8e8d618cd444237b2d9b6528f4e6e69066aeb5af5bb9459f935b9b2a085b80727a809a4f6801db84c1988d2d65d5c6c79c623599ea9c22c2c2ebc26775581aa263e25703b0c37207d0c03915b347ed6a08fe1aa8fbb060c26fb3df9377093bbf6f33291aa77107d4d8d5094fa17117883de6c068791c46fca6891dd47ba7366e689b5960b1a7a18175c18aff666a7791cdb19144b675ac620f4e88fc66af8e66d5ef40b2f913a7953c227fa5db4dbd112a2db7a9453983b9cfcb137635161dd3ec26041b702984bcba1178ffdd9c832756eb5169ec0e702638c05fa40930cd05c6ff8f93d2cf69ac09d1cad7e412dc2697c3e02434d4933df9b8c43b835a40a575031813a5c3688c00b792ec60ded709b8d07c7e129233c371b56dbce92526fe7405b3ad63a4a5c041481765c5be2c74f219c463e12f262ed041a471c101bbf576897f7838d5384284b14e73834e97ef12a76232fc78295fcf9a94ca6ae7ce0a11654c64be6283393f130abf1a3fe66c26e1ac78ff27c63bcf74223ea3111c28a94b12f1cd96a6028b698707853ceb9018966b65d0b25fb813c6b970c5f6dda1a567e6bd39ff37e4373443a5a528909f2c8c9700d87680af17fd4d80f6a044554a12360e0398ed4f07f886c64e40b43639b219bcc87aae7e28c68b19baef9890daf0f4e3c9994a02859402468af688746923cfd6ddc1aab37cae5af2bd08e3d00ce5778504e4ef193c21dcd143069d10fc1cd31e5df3b7413f1942e5348185ed45882b854ce620019babda7ecfa808bb0345e50a17362043d157bc1076bd8e0de6243bbefc8dc4cdd0e54a2ad2dd132216bced8ac08b5861ac3dde01e2f09c267c7433377620f457fb34c389b1517734b8c615a81e03011694db3e121a9bb161edc030157adaac88d45da187136ad8b98bdfe4fc8eef5869ed4dd0fd609fdf4f7370991b2842ba30784ddc6cb7b261e5a0c00fe16d9ac2a69817c7baafe1e7ffd355a73f72df4b5885204deff20e28813c0b7ab02a4a9494d924cc016e85ae1cd29213cb646afc243fb3c6f283328166416c35aa5976fc59500d9168f5195d5e63a9d5c8ea8557e7d5fc53353f7b190dfdc38fbcbf889dbee54f9711e861d98a3601374348e1af7153b7191f82b8a8dbd897f11793bd0c59c2fa50e3af9dadcfba92d8b7d980e229149b2ea02252e325d0c74870928fcbbe859421ce85128388252fd0924e281858193f293edfbaf955f6f9f246caa9e4650d68f1adaed84fec3a6c74794cc4c4425fac4003d1470fa47ab2241144a1087dc978ce6389cf5f4f430a581cd2c632dd1a3cc1534bf78ef2f6d6a3969452a189cb0c18475386bc724aed24ce43f0d302baa3d6e2fa954d0de17fcea667391b1bcca75ef0000e37d2cc4efc4846d04c20fd602c513d5916c7b33df7e37dc4220febf8248be960d426cd28296eaa905a338d94b2379086b98aeafbaaae3f6a346ee4237d4ad683d1632034d19255add8a4b66b15e6529c97133d50bd00bef760d837dfd1d30f1b4882cccc7bbbb1debf91edc441dbda371116f28969b67883345fd86f8eeca80623ef0b474c4d5481a907e0626664d422237fa5f94d2e86056a57725b255ebf65a73fdd217e3e2deaab8011e7e6c055b79352321f768baf6c08959a1bbcb7c05f54f6c8b670219f096ed96314a2a1419cf1760c309518a82a28de1bf93ea344e81d0b662a0d19b788a99dbe8e95c998cbbb7438609543d2450768ddf9b6f17dacf63bce1195488013c1ef796e2f725ad9c8c2b2b14b8a379f3a3a6ece5e8df01da889374d58202638f49a5cc864dc3d4a4674e6dd0a97096d37f34a554e611877868ce0923b1d8d8ac3ba8f31126f59fe050d6f9be5fbdde941b1c9826c836b00b969a6501c216aba1b9f8cfed1550690828aef0177d431ad38109e7f2d36f4389575c0c851533bd06a0a5c2ca5cd67c21321b29a040cd5f23f8e5677744fc5aead5980dd3d96103676bd0f8b7aa71667417fd7cf3912fc39436e7a61ca955e03864ee50ad64f0c92961c31c9bbdf0aa38525bd112602b06ac8f36e84e227b3c42517a5ddc3e341c083411e45371d5e3e3d14055971d7c39beeb705af3b44a1e8b8f5e0acd9e208978866151efc87388d5071edf223d9e989908a6747d2b842b9280bcd0acd1d51697d54772f22aa857f0f9f5fdae4ed72c8c1bfa7740fb862fabc91620bac4e88dd6ff296213749f66685670cae38a256a8a68f61ee21127e90d1d25b6be32bcc2a0a3f12f6d4aadd82c76ca69d339ae58dca0698b089bbb6dab750b2187021658be1c6a451b6bdbdadc280716b7690be703e4f2dda777b5138263456842d59b9ae97f6f96c5ec6eb5dc1eaaa3eddfb8d700fae9de05e89c35fea0d4c528aeaf0bccb3132bc3ca5cc6f1979d84fc14fd340f26e8bbfb564e52d93906c0a5f7b835a71a856d5e9b74ad644cb11f30b49e8ab17f59c43a3f783057d1b3683979ec16f1bff9eeb7091fb353aea145738884e102d2381d1d5bde68d8318275d13c3e35863f49f0ae813553430343c622275477a48984db5d36692a28b75c96df49b751c65804e3d3ea8831d6ef5f1f74f7e948f464deb4c13b5f5eda15379a1f6b9b618981ffe91617ceb46538383a6f61bcb0764780d7184c4c7850cffbaffbe5ad2da2727cefd8cc705fc4e9d2ebdb07a8e9c7e2c1bf3b2cf35433aa213ac89041b812acd803f49d07a564695cf3b800a43fb60607965efcac6a4c6673ac76048b6a9109bac6f35641a45e9d90fc326bb9829cc6ab05ff330dd62e4da4229a3fd1f3e4a4f9b308d1d26f84e462b7016356dc3e8c820ca24af65f730c5a84e891c805f69268017ebba5fc48554ea6f9694d805dd96606980ce94828320f5eba7441be42c5eec3db0df616bb2402a4e60c42dab4cd27882329cd87b4bd512ff456436cabb66de85d231a4d0b790ce3a45b83764d36a2f8a82e0903b134fa2cada57151cf65b6be8d34c42455e8f469c7be04347a30067d049a3361452218d51c34884485bdba82f1b0944d6246cd99eec3022949acf9cdeb5efc1c28eb0a9da0b3857fe8f154e533ca935baaa46504b4ee0adc2118cbba252c8614b28a201b3674d344d3a73574d0fcd4c8e116d056e6146d581b0a84c362aeb3fd1959cf27fe58c4779ef71bb671db0dea0e35645b9ba616e5e8d772912acde564c2ca4ca58cad0e304bae1347e90100c27e2db04854a178c8f0d0606dfa1af1949d2d2a7755a8750a33610529c0f4d3eaefc5b6fb63b7a840d53b81ea1a1950df4fc1f4b89c9e41e9f53a2a761397d731d465cc81d492e0f4dc058aa817c563722eced1466d9072752637156a01b7e16cb2628a6da532868423f782c41a5bad9c55e85ed5a5f5e38a63b420a4fe49fd766498e83b0c70bc2cde1a9907b96adabd04ceed9ce3a624c8814e90cda87390d30b880a8f9589fc89d4b7b6161093296d70d24e8470505f845e1101d1c1e3e0eb4cfac48f7ce325499c648e4db12d752588ecb6cc3c83320fda87fa6d9fd2fe88d6fc459a2f97429c6a60a646d3752f31842f602cfbdd6e3992b0eb772e326359ce1fce04a630dcc43653347244857b4d38f1ca264cd00c19d2bba763c44bbf40223e296ce31f2b01d0ee76f45cdecb023883e8512b4"}, {0x78, 0x11f, 0x4, "be37a80767736ccc119f75a3e2eeaa523ac98d7974406f963bdb1abd76d65dabfbb10c05e9c4dbd76eb00099eb1b134d1e6e0d95a12cb5dd2107268c0688d34d1e8d098578b3c53decbc1a233b5b8ec914fdd67e33bf2e63ac3b7e63601b291e8671"}, {0x90, 0x11, 0x80000001, "5a4b82516ebcbef8b76335ae4b77f46654c16328484c9b4548e167c0545261d65cfd0c40527baf756e78ffe456ad77c5676a59f4ebc7bbcc455d5cc9bff2773e199e64db5172b8dbf45ea1176c0c9e5f934251af6a98f525e7b0093a45715d3ee2af4797985a07b6bd8157f195e6c640948a03aba381714677f0a028838d8a9f"}, {0xc0, 0x116, 0x40, "8d9479cef8407422b947478502958a1514bb0005805a32a23c62e89cf2fddc1dc6577fe774f46ac7599a807b1f11455525ed8f1e4cb8324b5542153b60ea24ad5efdf55ad24ec8a37c604dc0ce57732efb23ac51129d323d2c5d272015ffba5fd9607f0479d8f8244b96d7dd41abb9e45d6a5175810226aec42a9149e48f0cd1e29b4926359eabb9b0fc3625f909f08711d57a54ae21c161ef87de5098c50697ba9cf05a0dc41703205c59"}, {0xb8, 0x84, 0x67, "bc4074dca4d920e595d6efaaf7e712f603a3efbe343c5667d3ad431ac347db4856a8b07a054304cf4849fa410a87da7d79ec32204f9a98932e44ee7491ac585337cca02af0ec51eed01111fd4ef8b95bf0833e12aaf33786dfe9c4d08b7c9db51757bbe555fef8e5bbbfb2f6b8e150e467ffe5a19630c13b5491f05574214b42f52b648455f6b764cd395849cf25ec7dabe368642a85812ed7d5d0e63c7b6c86aa8273d9"}, {0x60, 0x115, 0x2, "3db3d0d4da4494d194ec269e2f03bc4e2a56b3a2859dbfd646737d87d4a1d441ae207cb432b3adee6c2053400d6bceb65c74540db84e5228ec031a101614185e4ea1cdaecbe6673aa38d"}, {0x38, 0x100, 0x1, "c1ee81531c8869964a2af387158ebdbc16836067201867dbfc0bf76f05426a6365"}, {0x60, 0x114, 0x2, "a1aa6e84aa0490a343f5c2e6aac4249baad09e07941ad0f49ca78fc7997deadcbcb3dcfc064c3fff876c6f4e481aadc2884f16ed5c95ad633c190608954ef2eb882363cece4d20af4de1cd"}], 0x1388}, 0x4}, {{&(0x7f0000001ac0)=@hci={0x1f, r1, 0x2}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001b40)="d13b5730eafe25f7e5779caafb4596e0e75ac4f76031a147f51782f62d791277da646a4ab434bce1a963caba5f52ccf6a234bd8b3ccb97e672103d2d31c391c944658683a3c31fc07afb201e3af658b9d2adc230f28d6753c80975c9e94f5645009e0a612889ab3df78a199b12f64376490c39c16a70ebd30adb280e8750a347e55b813afa70571c460c8458315e34237ba79544fd9691e36adaadf1b104a874acdfa640963ae1151c16bc990d6fa1628cc4", 0xb2}, {&(0x7f0000001c00)="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", 0xfe}, {&(0x7f0000001d00)="8eefce6a68e4851189b278", 0xb}], 0x3, &(0x7f0000001d80)}}, {{&(0x7f0000001dc0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)="cfb645ed1bfb44ad6b30e9e80c72c3a1", 0x10}, {&(0x7f0000001e80)="9b849709c86122b49de175d01544a7c839c6ec3ace96faeb27f50d2f0cceb696", 0x20}], 0x2, &(0x7f0000001f00)}, 0x10000}, {{&(0x7f0000001f40)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001fc0)="9f0a8386451626c18b63b6d44603dd95752cc2ecf411eae5a5d021b265a5f9cae6ea8c88897cbbabd2427fb72257c3f726002ab9279b1961e25892851b397b9876b8b98a25c3bca07526973660804f9604b4d1eb7da1bd333dbba6fd6cbb9385119ff6c2020651f75ead68ba4c6e635b71dc4e8ce870ecb41759868d79d6e649498679e7067adac887d3bfb26147f15574f53060", 0x94}, {&(0x7f0000002080)="691ac5885252cf9f726a139a1ef876ccb23b8bc80646968241f43a90f3deccffec2118109029a2aca4b7a85fdd349206aa2bede7d6b9df927582aa27f25b0c47e680f3d823c31fb8fbb8eca7e86604ecf41783a669d5c59e86a51d46367737a10fbe587e96fa7f96e4ade7d71678a58ea6e8b128e3362dd7dab994dcadd96ae8fc12088825fcbeb7c3374adba6422b09959c9c8fd09b43e94c26aa702f1521c9ef12c33ad7cb11705189f03554e61101185244f7c6", 0xb5}, {&(0x7f0000002140)="666caf1d02aade1cf4282b7bc1accd0dff96ea0d83beda94bc1a98ef62f810aa989afd7e763816f8ac1d51d85f4da24d6e6ea70cbc2b37db6ae2322a0bd4556cf69f09f1dd51d9f95e2b00a70336606533152245a05afde32caa92aea022b720c46c0cf76679971ba76d33a744dc3ab496870a58188f3c9e58d5a430beeec6ae3b948513c7c1b9a3905da3", 0x8b}, {&(0x7f0000002200)="23807ccabaf70e5721e02714510aad52dd6e8589528beb56e41bfc1589853f5586d66d3deb0b6131bbe40c3fa8408a08bd20232dce825cae816eefc89c4e095906431b8281cda29913397ff7fe307e332bcb8579ceba", 0x56}, {&(0x7f0000002280)="fc7f2a2f50035c812679de82f56241f00030d13b3d8345cc5e1f8c7ef883861c90b60a302fb95e3f762b71ef356319d1a0a758dfffc1c58a62832b58d70295a9c0398d3b4a5508f2da9183278508f2f4c2caee9d09fab6119a736f9861345845", 0x60}, {&(0x7f0000002300)="74b8454450eee2af589317a10d796e84c237088386f669e7e70ec242183121e7518f1a5bb53c316362cff96dca8f7a55d6eef4b240962572d69740897bf1b6b15b31a994d510f7c10d6c1a429c812b631c56ef0b4778f472fa1b527d0d8bfbec9da45d7df14fd8992470846223965788dd8fccd5d7c8caa7cedeea2e31a806254f38692db462d7cb8cabb6eeb52c99dcb07208e9eb7cc5c5a97429afe1fab972cf21f39deb26837120b6203605541303d09825c9fa07cc9725b86c99e2ffbf884fd2", 0xc2}, {&(0x7f0000002400)="b00b066495702914c27867331365e7361a30bf4d9c0fcd01ceb2b0e005fc807c4d9acd07fe192d9f3e5cd61c0ce698f13e013bf3569a29bbe4d48d2974d50c27622364a4ed4846595deb03b93b3427d0b65a92cc5b3ef5bd02a29a0084e4d591858c54f56bcd9dd6d54bbad7b3882b064ed72ee1d908106576adcc2e363b9600ae04cd7f92c37764e5d4e9db6705ff00cbaf00b3ebbef43bfaad2c0b208d4f717a8e17b79a75506139368d9a3dc7149db5bce5908bea1c7dcb038b30216c07896d4fd5ffe66d27cd8a7dab550e2630dbf0f75ddf546c6f9146893d6a", 0xdc}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002580)="8f090e0b7d7d73d10b71b0d6fd0c0d055202699c880fedab9f6744b7a287ea287eef3f67c8dadaf623ffdeda89c044f197048b15b63c6d6c2b519cb28def36230680c5b1e15f38274b01c7", 0x4b}, {&(0x7f0000002600)="1779291e698b26206867bf6b1d833055978a2aebb510cbacbaa16a47efa15c287365d60f681b327399739efc274ac82f740f96655a829ac249", 0x39}], 0x2}, 0x397}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002680)}, {&(0x7f00000026c0)="0698d1feb3e9cbfcd22f654ad629ed4d31731d9c2fb3ea081023a849a221ac56ede37b0794ca8dcc6ea97f706313a41445da62752679dd8e818320881cb5997d51ce191fb48af8b4abf820da7924d4ac9dafe0256c406fe918843bd9dcfea3fc40d2b104c9f99609f1bdaaa693598110a45eda419b0f35d9d68a", 0x7a}, {&(0x7f0000002740)}, {&(0x7f0000002780)="20e40ad447816e319ba98b472c55e5c573690e13968db51cd085148f9f32078f59fbcb6a8540aff91d30e03c88be2658e9f0174626b69f171dbff395d2d5fc244ecf73e81ea96f1dce3d2139244ce9626e8b03423c9def7a8ae97405e203ae9651764e5437", 0x65}, {&(0x7f0000002800)="284f779b2f985bcf8ecebb74e6d7fd76dd49163b889642c6bdd2e2b8e34524a0b5b9e67f93ebc5adb907d4c4554d1287e0a7bd8ebfab3515af54d8c28a77fa4465fb266184d6497c0c48764763d2c04ace10447ff448e93599d22f57e1f316b363cd3ef83ba5e0a0cb28fdfaf8bc9b5e2b59c54f11b5bbd45ba17d5fb72fb8d4ceed6d1640e2fea4", 0x88}, {&(0x7f00000028c0)="65f088edd2039fe9b5c621a9f28b337692dc115f97120c1790e977ef981bddca9b5f319decfc9f34bb68995c6f33c23f0ef903b483a64e306a9dc663e27f5058aabff2af4140a76d4ab151ea8fc13071d4fef2012f212bca711346a60895fea570f52caec21f38daaa4911f788cab343a6ca27c56e6ac9503ddfbcf9d2962f50d7157bbee88cb4652dd79c0486212b8149641dfb03f7a2faf79ac0bd8ec8843a6af1fbbf4ebe1f450d9ffb528418d78b041aedd83d7396b7893a794ca05c9ff634eafedcd154cd1658d51e49e77833923e77d8", 0xd3}, {&(0x7f00000029c0)="2993de413eb7214a4bb75b4fe26a73c3c6554324f720e6389c27b0e4c4b96e8e90a39b78fe02ec47793eac13a237c9f777370f38ec38ec8743f7672f7d545b7c820f4dc86a35efcdeea89c0bb99fe11b3395344582f4416634fc7e2658e649e51d79aedf3c46fa1f13e8ab4f69eccd07e1280d6940c2a4b5315422a455fba1feea4d01a433628eee9c710ce433cbd8ba16d77a4c0eabc7eda0d3ecf1645d496baa7f07ff2ed66bf2d9c6d9337f4395f4", 0xb0}, {&(0x7f0000002a80)="70e64c52cd619ad617c475dc196df0eeecfdf5ed773971a8ff033518c3ea37cdcc97e40c5d3b6d591461188e8ce0596959885ec0101b1ac7a209686226e79b998ce9109e17aaf32d013c860420cb6845f130eed8b634a87916744ebf9fc6641b74840474f42d039ba17382202daa45e82eeaa5daed0c617dfef74b99154b1e6246ae13b2401f3bc8240de69dc41dd9bce581694534fe8a5b3af0c8226cc0020495b2a0cfc1fc468a8f226d03af592bd1da2622c069642ff43bc1b612a2aa6c8b649a10a19b9c73a0db083dbbba75f868f067e48a93889645aa9227fe41e79f14224e25eec1642e4e1d43cbdee5d1a7c0", 0xf0}, {&(0x7f0000002b80)="c6a4b73b331e8e5159e9a065e7a05c9e0a2e31e8c0dde703eae425e9f6b7d3c9cca2250c5ac8c705b58386b8a23fd78db61ee80e6f9a013256448e5c4a1373a07a0b02ab6286c22338c6678aa27b5111297454c1e4ef6778d22c77257a5686bba6cd688209a9c02413b886f940e1f5b60f03377d0c96117845629abdffdc3112cdf92e98f49660c2413f73b7e5e4816ebdb179117b6ad634be2fcdd459dc924f7052375425c6", 0xa6}], 0x9}, 0x2}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d00)="79c73c02331c47794c009e43424dd3eb1a7858956cfa9630ca049d50c8fa0c5a5d911413b9f42f44a24545e5896787581bd949864212d13532f285315528536cce8bf0c6c3feeea3815034687f573df3dc6a003a07bd25e7117a06ed42e77d0dfba136628c04d83676634e4524e756bd1d16dd3829cab40acc0c32523679777efdf747b1afc46904a0d1875dd5a2657b5390f4f2a366d9ec6d1b09a859be3a8d1adeef9dc6e30c8fe3456e8ad151bd04023a2df56432fd6c5184679560a3d98908683e99cd1e9c3d80a974e63ed7e32e4974df7d0fcb2a3b309a678a96c13d6f0866", 0xe2}, {&(0x7f0000002e00)="afee4f2199dc116e43427fd9cc40b385d2395aa6cb676142ed31661b466556624c05ff06d32067dfc8071f162140537681dbe73fb01c12c847c2c7181d13f909ee1bc3da0fedcb3a6ed4fa67be0e130b048e4590c1a8", 0x56}, {&(0x7f0000002e80)="1ac77856a16d9429af96530bae6ab2be6e886a58e72ab68c215b638355ca1a1f26fef022f4905c74c0d4403c4be11365a7e7712a95712342167ae1e3eeb3e03589f15a90b6b84067866f80c57422ba1a040b07943df243d7c3aaec3fe6a9abfb9027df82de12366e45bebe14dbfbe5ff85df4556120d2b183df52f492d0fe6705beb36ebfb0bdc671de1913b7a1e682a6f7bae14c20761d3d420c4384b", 0x9d}, {&(0x7f0000002f40)="8d011657e37a7e42216ec98ce57afd363b4972b3c90e6e79e7b5b6ab3b57637f6cb6d39bb12f1afda565d2cb45bde7fe93fecf9d4f0e16865fbd860013025d96d80a56942dd665eec63e81fdaff844da14bbf6b012aa5acb2f5b3792f5d14ca82b8673783a79e93fc3be12651a851fe20d6cffcd7c686e73641a71c9ba899a1ba0e74fa75b1a46fd056d5c02c79817ee0b407748b7608af3a58bd8de8c14db1fc00578853d4e665387b9c027c8771a678da4cba317f9cb129cb86105f6c94b0e87d397f75a00f1327b44fb", 0xcb}], 0x4}, 0x80000000}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)}], 0x1}, 0x8000}, {{&(0x7f0000003100)=@hci={0x1f, r1}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003180)="f63d2d7902132324d59072e9edc48eb198e0a96c73f6c572cccbd874f24b9521572347e1920b4987e1572f8e8ad3353e3938c45627625190f27a09cafa25360da920836ff1019015621769f6ea3960a661", 0x51}, {&(0x7f0000003200)="670e371d2db3c4e067fbe651d941c4217f36113da28f2af7d8e88846ba824a1d227e5d6859491b50f413a363148e280553b42bbf4b239a6a897ac65d72504928b26423deb473736aee91319952a23bb70890fad29c22e4441e78148fdfdab6245e8b42c04fa6b6809bc5aac782b01a27c387994853f598187a68b35b15342f06fb6d11ac227ba8efc40f70a988b996f12c7e21118c128ddfc850ebc2", 0x9c}, {&(0x7f00000032c0)="de8f8770195b902f979384a615838a497dab16eddce1297e309846326e87802f870ab9cc648b5bfff2ae62e648cc9debb000b0e8094a8f75c4b4d8f5401de74a2763701d80f62616eea366ce1a3dbf170aad3a6f7ca8306f381328341d7d050cb95aec0d6d7d80f8fb326458c9d0d03c36b02a1698f001d48918b3afa31d6743da7963b19080c4fef483be63857df6cbbdd1eb8dcbe140fed1fc306a07e28045fba104e445bdf1886c35cf37ae5c064f19c602723a651431f96a01948f2f2aad924c35675fc063606642ce715969f495acd570359c8c7e01ee139097f670ae378d9ffe00828817", 0xe7}, {&(0x7f00000033c0)="95eed23e23a12ed377d57f1f879619b97f990ac429a0e6988799680e9180eae18fe903b190685f2747e8fb0c011b087520988235448fc103e965542f69e23e5760be4dd51424fa2b21b39876281461f8a52c3257537083a85bb1d93bc5d471e55c3df6290c55dd071f57ecdb4c7c4fb4a584b17c4940988565d88280f7", 0x7d}, {&(0x7f0000003440)="a2792b5aab7e0fcd7e11e2fdf069e6bfc016f1a9793db02d769de263c876c6d4aed407c66448d5e5c3ea92e7af5388c7b9fc9dbe414cf31f227b7f46ea0bf9f6323d142766f036fd3219465d26e773a69675996fe4a2b727fd1f9fed2af498f450536dd0f34c2cc85e7309efeb5a394fca142bdbb412b72b32d88ee6a7cff501b7f3ab8598b48a41cabd4ca622813d2544f36023884b5492f6568af292f184abeb18ebacffe1a9769359358af3d69f62f61ec9dd67b4c6", 0xb7}, {&(0x7f0000003500)="37a2c381b6ce1fe7", 0x8}, {&(0x7f0000003540)="6b53499c32b849c8815da70bbcd382051a1f683dced6131f17d971684eb5eced449c01c96c3decc9a59cc2d11fc21e11ebe4647839b37c0ae310d35abb083bc5c7ebae7342baabff287d0eea1001ab", 0x4f}], 0x7, &(0x7f0000003640)=[{0x60, 0x10f, 0x3, "a609e28e952a3d61167fe871d98d2b9ecaeff2ef118cac460243e0b8fe9ef7ef96d43a5cd54bfa2d8f9f23afb6231f212b50bb1934204a230a9f97c756221ad7fe5f4669ac1b53e13d"}, {0x10, 0x196, 0x6}, {0xf8, 0x113, 0x4, "a2b8fdbacfe579cb256cbed62ccb94558f25107a3d2f8fb70c5df2506772a111560531bb9f248b5c863f7a471659912ddfddf31a98eb59186dd44f88bd73138a371f0694b6a3b19446651657c96adc0a51491fbad0fd74fef395defaf62333ee973dbced5da939d1580a7212de8dd3dd239a317acf6db3862cabd5d1538770122c4d7445b4981358316cddf14dca87cad413c771238d3d80ddcd37e615d0845eaa7c3259c5535edbbd75d86035ff18d29812f0bbad464b7287dcc019ff44ef94cc9def1e2c354d529d744750849c6ed1600611201b947edbc19b57aa669843edc834ed"}, {0x60, 0x11, 0x2a054744, "c97f1ffad9188888bc20abbbd61ee9b3887a0bd6a32176a797f44f0ed46f9a90051d3744a5dbde6ffe6380e53c1c019188a96c6ea125a2354d81f662350a29c90f76a51ee694bc80ad"}, {0x68, 0x0, 0x3, "e7e205f224a8e282002a3cd02b3fbc0faeec3c8598b34b3a119bf07df51ed50f96c5dd513a9a43e7f601834278c6e5edc8af804e2ee4bc70f51f12bf364a717dcfbc6ea50c167d4b74b238084d5a7c348516"}, {0x30, 0x10c, 0xffffffff, "d06606cc113aa5ebe48b99a0b9eb30f0ed9b78524578dd2dcf430b2bc44e"}], 0x260}, 0x6}], 0x9, 0x8000) 18:50:17 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) getsockname$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) r3 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x130132, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, r3, 0x4}, @register_looper, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x58, 0x18]}, 0x39a0}}, @exit_looper, @free_buffer={0x40086303, r4}], 0xdd, 0x0, &(0x7f0000000400)="18fd5a20b913168fa5cf1ddaa3ca4727f8c3cc49cdbdcca5480c19b282bce69ec7fe9cd259e1e3e861f951bfbf5c5607d57b9e2c84ae5de1e8361fe52f47363d7434a81bf4aa8a74a2f02458578068ee464017fc0c66c076f91cb2542780aeeaa718df27f89fef6c6a7363890c40b641be8d23ed0c4f5c2d430033c939fdaf052d9c45029d92e915306047df9342f35e01207096fc28aae783d1fd999c7b009ec72b998e7b7274c01d841a6ff042e1a40b7d764ea5267a4007752a0912bd170944bb2a2b8b4de252c5b4624d70b9eef78ec989d7acd8f6bffb3d431089"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 314.923772] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.942624] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.949210] binder: undelivered TRANSACTION_ERROR: 29189 [ 314.955450] binder: undelivered TRANSACTION_ERROR: 29201 18:50:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x5, &(0x7f0000000480)=[{&(0x7f0000000180), 0xfffffffffffffecc, 0x80}, {&(0x7f00000001c0)="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", 0xfa, 0x8}, {&(0x7f00000002c0)="29dab386d2ffc8750326130857960d06f8f91099812b794e6b80b9e5654ac805e1fbf0d44f55665ba1a61591ad4d2bf118233f24f7cc861d125ed4eb836ad9699eab18d55ae3e1740bbe3976f7bebb7261f753905a0bf31f63cc9c5165383b8c2ca68cf8887bc075e6a2dfbf7d34562b684e90df8495e77f17201f7efb1c9995371fbdfc4e7458c91a0be5d84e04a96ae3dae4cfe6fcc850c23ba2070c71e8a2dc7512235999acb1d8b43aafd77a2b75b925838f99e02f6e28e9b344d1200b1652105abf6360fded231274c6e33aacf07f9511a28a77712db0bbbbcc6e", 0xdd}, {&(0x7f00000003c0)="04ba186272ba3601594b2eb18b592b58e22c9378e736d27e87cdee28b93226f811333e7b770972fc00ee252b236707b0d63caa276fb6c738612722d8f4d5662076b77d2e4f235c1d8dd36e134ef240ba17c144af8b00fe19ed7892883ea2e4a321c1f408a1d54d0c409f3dcd5ee2", 0x6e, 0x6}, {&(0x7f0000000440)="e50c1ac0f19836caff99dbe75edb2e523e1af0d0", 0x14, 0xe21}], 0x406, &(0x7f0000000580)=ANY=[@ANYBLOB="626172726965723d3095f63030303030303030303030303030382c6e6f696e69745f697461626c652c7375626a5f757365723d5b7d7365637572a190354211021b1b4e6974792c736d61636b6673666c6f6f723d5e76626f786e6574636545df656d302c00"]) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 315.037153] binder: 9400:9406 BC_ACQUIRE_DONE u0000000020002000 no match [ 315.062745] binder: 9400:9406 ERROR: BC_REGISTER_LOOPER called without request [ 315.081227] binder: 9400:9406 got transaction to invalid handle [ 315.089362] binder_alloc: 9400: binder_alloc_buf, no vma [ 315.096909] binder: 9400:9406 transaction failed 29201/-22, size 0-16 line 3012 [ 315.099974] binder: 9400:9414 transaction failed 29189/-3, size 0-0 line 3135 [ 315.124499] binder: 9400:9406 got reply transaction with no transaction stack [ 315.131911] binder: 9400:9406 transaction failed 29201/-71, size 0-0 line 2920 18:50:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x10c, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x167}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x891) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = dup(r1) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x17, 0x5f, &(0x7f0000000000)="4cdd783aa76f37afa7d11f8043743c2a2a6156e22ffb024c5552a0ebac1b0898b3805190832f4686adb0d498b6bae36cca6bfeee67a6e98902a7724475d7c562846ebd4ebfb3e621d955ce9146f1377180cb2cb3387d656b515d2695863441"}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000400)=ANY=[@ANYBLOB="00000004e00000010100000009000000ac1414aaac1e0001ffffffffe0000002e05672b72508df00000200000000e0000002ff91fa9f8e535056bbff25dce4433e55776834a315afa1dd19090000002ae6d4379598eeb7f5b1c3af04bb371c5bd51875b39cadc98abf627760204b0e7f1135bbb6581b1c33159a5525b5cbe0"], 0x34) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3ea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000280)='./file0\x00', 0x141042, 0x0) write$P9_RSTAT(r5, &(0x7f0000000640)={0x41, 0x7d, 0x2, {0x0, 0x3a, 0x1, 0x2, {0x84, 0x0, 0x8}, 0x100000, 0x8, 0x54, 0x7f, 0x1, '%', 0x3, '\\+*', 0x0, '', 0x3, 'dh\x00'}}, 0x41) r6 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f00000002c0)="80da6eb63f7f634038688868bdc03a513957f42b266737183e4038e443dd0675dc3b2fc17d65255567dae35ef161293b80c950a4d6217a57538019266cfd84999d339bd5c4b03638a911c6497759285a0bd4812eafebb2096d3b506d40b395c63379", 0x62, 0xffffffffffffffff) keyctl$get_security(0x11, r6, &(0x7f0000000340)=""/131, 0x83) [ 315.140532] binder_alloc: binder_alloc_mmap_handler: 9400 20003000-20005000 already mapped failed -16 [ 315.150487] binder: BINDER_SET_CONTEXT_MGR already set [ 315.155926] binder: 9400:9406 ioctl 40046207 0 returned -16 [ 315.161810] binder: 9400:9416 BC_ACQUIRE_DONE u0000000020002000 no match [ 315.176055] binder: 9400:9416 ERROR: BC_REGISTER_LOOPER called without request [ 315.184554] binder: 9400:9416 got transaction to invalid handle [ 315.191152] binder: 9400:9416 transaction failed 29201/-22, size 0-16 line 3012 [ 315.207099] binder_alloc: 9400: binder_alloc_buf, no vma [ 315.212703] binder: 9400:9414 got reply transaction with no transaction stack [ 315.221534] binder: 9400:9414 transaction failed 29201/-71, size 0-0 line 2920 [ 315.229459] binder: 9400:9406 transaction failed 29189/-3, size 0-0 line 3135 [ 315.237296] binder: BINDER_SET_CONTEXT_MGR already set [ 315.239550] binder: 9356:9426 unknown command 262144 [ 315.244127] binder: 9356:9365 ioctl 40046207 0 returned -16 [ 315.247986] binder_alloc: 9400: binder_alloc_buf, no vma [ 315.254411] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.261021] binder: 9356:9424 transaction failed 29189/-3, size 24-8 line 3135 [ 315.271732] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.284453] binder: 9356:9426 ioctl c0306201 200002c0 returned -22 [ 315.288546] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.296642] binder: 9356:9365 Release 1 refcount change on invalid ref 1 ret -22 [ 315.311168] binder: undelivered TRANSACTION_ERROR: 29201 18:50:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) getsockname$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) r3 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x130132, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, r3, 0x4}, @register_looper, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x58, 0x18]}, 0x39a0}}, @exit_looper, @free_buffer={0x40086303, r4}], 0xdd, 0x0, &(0x7f0000000400)="18fd5a20b913168fa5cf1ddaa3ca4727f8c3cc49cdbdcca5480c19b282bce69ec7fe9cd259e1e3e861f951bfbf5c5607d57b9e2c84ae5de1e8361fe52f47363d7434a81bf4aa8a74a2f02458578068ee464017fc0c66c076f91cb2542780aeeaa718df27f89fef6c6a7363890c40b641be8d23ed0c4f5c2d430033c939fdaf052d9c45029d92e915306047df9342f35e01207096fc28aae783d1fd999c7b009ec72b998e7b7274c01d841a6ff042e1a40b7d764ea5267a4007752a0912bd170944bb2a2b8b4de252c5b4624d70b9eef78ec989d7acd8f6bffb3d431089"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) [ 315.338255] EXT4-fs (sda1): re-mounted. Opts: [ 315.403922] binder: 9437:9440 BC_ACQUIRE_DONE u0000000020002000 no match [ 315.422454] binder: 9437:9440 ERROR: BC_REGISTER_LOOPER called without request [ 315.441842] binder: 9437:9440 got transaction to invalid handle [ 315.456524] binder_alloc: 9437: binder_alloc_buf, no vma [ 315.456952] binder: 9437:9440 transaction failed 29201/-22, size 0-16 line 3012 [ 315.466102] binder: 9437:9444 transaction failed 29189/-3, size 0-0 line 3135 [ 315.483161] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 315.510131] binder: 9437:9440 got reply transaction with no transaction stack [ 315.518537] binder: 9437:9440 transaction failed 29201/-71, size 0-0 line 2920 [ 315.532785] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.538575] binder: undelivered TRANSACTION_ERROR: 29189 18:50:18 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffeef, 0x0, &(0x7f00000004c0)=ANY=[], 0x2b, 0x0, 0x0}) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x39, 0x1, @thr={&(0x7f0000000080)="ca0f6b1da3178a93b92e2fc34a69243970d2ee82ef8ab0686f23179df74945adc6b133f9c6ccb285ce3416df8a964ffc134156fa1f41ccb86718c24e35b32086", &(0x7f00000000c0)="8d4388445aac117ddcfd1a62771e823f42fa5bbfc6a71ee6a810a0c0bba10a6142fdeee5b02666b393fa056b2c8441e6eae0fa1f44395fcf07d3ecb727172401753ef715e3441fe73cecc7940d709887b21b827bfdc3e42a0bc31f29dd0bcefd27ee248f3e9b0effbb306417815244a4e5d200e6d960455f14f323763ee5f02aef2b1dfeda18062d357e6611b9cf6b06c59d72272a14f0e57b4720e1d81e39065620356f82bbb9197bb475c748bf405df502bd591351fec37f9b1fc20e61d824df4fb4c69bd58b357d882bed73da0dc9"}}, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) fsetxattr$security_capability(r2, &(0x7f0000000280)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x7ff, 0x4}, {0xffffffff, 0x2}], r3}, 0x18, 0x1) 18:50:18 executing program 3: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x16, 0x8, 0x4, 0x1e, 0x0, 0xffffffffffffff9c, 0xd20}, 0x2c) fcntl$setflags(r1, 0x2, 0x1) ptrace$setopts(0x4200, r0, 0x100, 0x10) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r2, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x40000002, &(0x7f0000000000)) tkill(r0, 0x17) 18:50:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) getsockname$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast1}, &(0x7f0000000280)=0x10) r3 = mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x130132, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x74, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, r3, 0x4}, @register_looper, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x58, 0x18]}, 0x39a0}}, @exit_looper, @free_buffer={0x40086303, r4}], 0xdd, 0x0, &(0x7f0000000400)="18fd5a20b913168fa5cf1ddaa3ca4727f8c3cc49cdbdcca5480c19b282bce69ec7fe9cd259e1e3e861f951bfbf5c5607d57b9e2c84ae5de1e8361fe52f47363d7434a81bf4aa8a74a2f02458578068ee464017fc0c66c076f91cb2542780aeeaa718df27f89fef6c6a7363890c40b641be8d23ed0c4f5c2d430033c939fdaf052d9c45029d92e915306047df9342f35e01207096fc28aae783d1fd999c7b009ec72b998e7b7274c01d841a6ff042e1a40b7d764ea5267a4007752a0912bd170944bb2a2b8b4de252c5b4624d70b9eef78ec989d7acd8f6bffb3d431089"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12634840000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 18:50:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x16, 0x3, 0x209e20, 0x8000000000, 0x7, 0x1, 0xfffffffffffffffd}, 0x2c) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80000, 0x7fff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1, @in=@remote}}, {{@in=@local}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4004100}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00002dbd700000000000d5b60581a181fe92418170f46b2d5f2bc9b7003d9f6844bfd28c9c470000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000500)={0x5, 0x4, 0x0, 0x1000}) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000640)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000002080)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002040)={&(0x7f0000000700)={0x1904, 0xf, 0x7, 0x100, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@nested={0x1324, 0x84, [@generic="c7774b1bedb3eb65a2633191998d14ad91ff2846a2d40d625063d566c2d6a04f10736a0ededb260141859148272b39aab43e958c63c68eec72a7d23995eed1e67307b69e8cff3ef9c2af6b06f12f2156a942eddd1c8a0d0cb005194fc43349a9f6ac7c1671cce16bdeb87575fc8ad4600144cf09164277691d88c2a51b5b7329e5c0c05b80fd5d19e894f62cb72426214d00c6cde7f9fae32025b448ca77c5ee871ac165a3fb7c2d6d20f1cf33a24cc26afc589cd204463a018b9ab51a49b17f41afa46187911b3393a2b233cacdad7091", @generic="3002575a53f071cce2e69898ed0c2efbd16e941c605780c6d00df7d6ea0b0a06462deafd624bf7a61f90917f817f099204093126c0267b25b8377f3ac15303efe5ddc1ae3820d75d37f7421444c48d45e124904c82eee7c10c3fb78fa08ca148d60428c5a5b87b77be04b4a9ec0a01e146f60a799376e603ecb0d889f82de2564d0760dfe58a2b673b5227", @typed={0xc, 0x58, @str='$nodev!\x00'}, @generic="b180d64efa2eb42101f8c8ea81c51f871cf273309eb4019b5b4bbed1f5730de84b526c67e7fd4745aad3edbf1ab309b368be4df372b3936e77d18a85eb4f73e278a1f703daa26ce609db2469c5c93c269f827313c93aa1864c3b54bd4ca66d9516bfc4a85e9d60875581a3ce247e2a8a67e9bfeb038480f5d6e77305a16df390ac51ea2c28d4c57ced380c714cf97b75893db20d6787cc3dcb82f5c55d931087eb33150cb75fde138324724943e56dd59a1b3b7b5e4f72a69f075688c3569a34fe87ebea72f0df349c0ef305fee92ab176003c35ea192d6b7143ed03737b26cd47c3a4da624582a0014448d00a386c0343161cc5f44fffb88739c8fd3ace551aa02f9ccbf536b65af9b28c42875317703e42c9fe7a33d8685f97852cb10fb1912fee2c081e709a74a211e94bd1346cd097b7595d970953f08797b10a4a27c0bab8820e1127bc5c891af3e8fc52cdba529aed17f38dae036e2ad8e43bab3d3359af62278f6e3d6387470d97d5bbaabf552a0ceb7ccc85beae881b4f8ac71f614aaf1b318963c872080f984d16011e9b60b09d211dcf7597307945d5df7593337d0123f2cc5719070eec6fe37d5778c7a42a9d67e0da65cf6f613aafa34b9a40c1c60ce71d62f6e85fb2ce0327f75772fa8c7e4dbcf76ac6ca3fa6143a32e8e78cfc6ea65bc57c98afeb7ad6f20da5a1e7f4c3e85c12e18043f404342daecbe7a5231a7453bc3764447c147ea921ca1ad80987f1a90aacc657e69bfa6246af18bd29b9ba88022edcc5736078cb22bb89450715f219b9f7f993a2856737523214515bc31e94b0be906472e2fd71fd14641af0c1a0a4797142a5077e9f151380856bd3713c112142cf0466f3c36500cbc44f4c2393c6436fd8bed205df8c48c9930ba89674d37914ca688176db693ed0d2c909fc0fa43cf637ead99a1d396575001302a7a0fbc03b5ba00b9dae9ba9b2b9d3ff7436bc06f99f544a402d3023c50ede63ee46c57d3aec24f10408d4217624a7aa85f8eba2e3ebbe4725d3a595ebe71e4c76ab7691bde7b4034c176033ae5e70caae7b0ee392b96431e14034861d2c8d1a09cfa0bcf0f40368674d77131ba182c15e96d2a32edd044cd29d42ffbcff195ff471639aeae16265daa0f94c71618fbd65efa5a2309a4e096164ec464889d009acf0545e3b98fbd8ea557270bf355768778813e4b077179d3be0383f522f044a8d8d96db2fcb3c5793c026682af1c4ae9d6fb644faaa2f9bec1f7475b15df33e782bb137dde47bd0bc51b0c1b4992ac201f40bdccd04520033802590fe8a8b4c170e3660998052dec196700620c79b00199b2eaac3aa8679f0d85ad8dc0b69352703a4f96a80e761e116e8dbe31a38ea4f6a124b3be97440408fd0f483c1d3c2dc0f5cb415ebfb56943cd5c3304c97bc6d947aeb28ed60f9d82c8df3672c5f93bd7ad327eaa0a5d4155e98ac4ec2562b81e9a9058b60563e180a991153dd678ea87cf8c98b8e8fd250fa959972b78b98adb169ce60b420097914d3e233fd5dfd64c0b5213bdf85c9e0547191e82f7d93f1090235de7f8c000c18033e57655972ddcb444a48f5f42c1ce502035a2a388b3b369742a187b2d852f607d681e81a7d692571e521bf1e8f14b74130fef765093091e5a93071860038f3a3e2d506f4ede196a4ca6d317735fea47d39f5197b4decbb87a7a33e88d07dd6aaf18c8c9a0c3d2abc717ac811793c56d9269d2c578cc8ee4614d22853ed406e5eb16eeec3cf5e22e42716a46aea1ba9cea1c74dcad0d1814c52ebffc49674cda24ac4434e3f5d6954b647c8f8fea873d63fad3b2bd4c97981ccc73febe60145815dbb2c2545714767e4f2b0525a47ec2c1035fa87ec87931edbb54ad5b5a6f58f818191030243234226b515b76d21da488141a3c80b7972a347da9f11660914da8fbd764a876392c5f32ae2e8f44e832b1fdfd926b808b06e73274d41c7c95ee5be02738a2dfd9fd0822303ec8c794c42783711a67f6d0fc7a17f6fc97ff300fe8abacf0011fa85f021422c497056aa6463182c6f6c76f47a554185ceb21537e3d068f96408da8297b773e0961b91a33fd5e2503b377cf36fb71ba963fd99b1cb8b83916ad0b87a2524f84df90f3ef12f134b99b0c5c36affb12b68a59e6b413acd2c5299e1de08e1e5d33ddd862de4d4c311604467da8b131860cd41e9d7034bb24a167053d86e73eb4dafa0cdfce9216477f41674b08492a2cd67f192ea18e1b0d109bd64fbe34733c6b1a169f27cb9c0cd194d7096be0e6a14150f909aaecdb0ada13785864c9a8ee87f7327c5a1c0285113a1cc710c975054802100fee8957ffc4668cf34007afa01b61f92c15ff857758e0b37de666d3137440d66a14c2f7676940f0a3f223002810538a9d36592e7ba3863f21afdbbcfa1cf2c568859e8bbc8719e4d38bb3ec34a36b2ea97173a3efba1859f3e72c5383e25b9e812997ac1bdfdcea55deed990773a3978b4dae2ca82e99b9b629e2456967f4e3103e2d3041a4087915b68356ce3a29da342e97b2fe7a79f869d66b085245b0e5a5dd7d5604fac6d819297fc8ee072477e3fb029e9dea2a339421f834514a09ce03b5a9b8f523bc3759794aba84638520c3cb9b9a8fd9bd98fe5473633328b47153794c67e041c58aadaea7555330d14b70470ed7bebd97601ff071862cdd366746d47fe7c5577591213d8f08a01a6db69ed2bf8cb798432ef6253db2f44d76cc68851e079e879904f5a218d2247efb22e40eace70193ea0887de36a0ba2936c42bdaef54f5d04bfc684e0f1e5b189c37bd9b479c795ef29a6fda72e65108cfd7b497cd63db185ce833f0ff4e93c2bb232355511b2d2637c3bb4258f580040b92c79b3659c9a83fa952052c06683dfefa4dc6745ec3189acfd85d5be77f2b154b3da26bae3294baf7909341e2466ba77a0fe9cacb8b18be4e975024e1838436fe02f0b3bad7a48735cb467447b930db0dbd16b6ee729030087e09646d611ecd6be4e7686e5fa977db897c72d0971101175fa0b57d8de49833336ee03d62375f6ebba4f2238925c2d4e7072f265116da0625e8eab76706ceb0996a67bbef1f239c581cedbc9d437e82ed2aa87a2e1e5415e424112ae9335ea260d698ca138567f4ddc0e9a7c1151c326d51871528b15ba31e37ed74763fed031d21c314565d389c1636f33760dfdbe5ea777a1301c301ebedb41d34ccbbcbcade9ac412b2e4991547f64cb8847e16ebc5ee528115e38ea8d920b9a1fd4fd751592dc216135b03678fdc4230e5dd0d6e4b8c49808ada49ceccb1564b584afebeeecce6c5d491fa38939785e6ab57f3041d74f92c65371bc24bb11d5be9615e4d5fad9bedafbe13fb4bda5708827b0955bf015032979af8f18a7c9a66d8d9a1d1a1f484c51657f6a6f4cd06ca7844bcb16ca337ce3486af3359be43801db35966f6df3b80706ad4edcbdfa1efeb134e2839d414ec2f644ff757f3a76d965aec6ce7608deba2e29fb78f309c016caebe0c41182bec0af4c0d83bdc98986568752c32eee7a3e26f18a2778e2fa2cbebc11e40ac3a732ec413c77ed5b3aadfa40ed21b283a7e50788f6a610bbbbbcc55c0b17ce77ce881ae077d13f4dd5e4c7e76aec9fc8f0caa4ca7aa73b875af72394c3faf584c1d3ebf82b0f2c778cb9fd8777d48be729a895aa20e668a152153a53322afee0b8a888fc51d8df4b2b30cd32bbe46767a892070c9d35d720ae6f4191aa0528ba3f41baea851b1b0392a112d3ae1b30ae8cf5dbcd626a3f61adcfb93c14264f3d6cb20bdc20690bf9891d3268354018194cb427b74b2341d791b34a4e924bd7b16f4c14b6891f472be14702b2bbc21ae41860aecc024dec05207170e3675e95a3114fca409ef6844be19e5f4e1f16b21458e135a537c8d3e0021be283d6c23521548bacc754e9b524596a98aac5a78a858199242507bd45c9250fe4e36ebfcb3a2588cb49e739e8226a4ff2af8319805b1907df9a2d54dfdacae6368b0e3f04111a7be05efc5e2512cebef6f4c5961726c927a675ba8e7e5fed9ab6bbe61e4b2c1746d8b469fb273cee1ed2f7001cd6400ce6f21951d03daad372113cee1ac98f7806cbf1992f41713f826db7a63de14a1c75f1f06383e03f12ef72e9b867dfc9b6399a78ba2d7fa317317ea42a00f5bb9ab6d2af6659e269633e9d63aa0c90abdf9f25e3dc0635169528c82e248c24968c6a2d546a47c5b7b308f8970dabd81d0d910f3ee5aa169273ad0b8efe86a7e2f577cf35afebc7f1f365ea2a64e9492ff7a04c29dbd3ad0ce1dd5179f344b6ee285a39faa311e3d4230b9e7a2d63e9d94877dd249b86f8bba28bbdabb1e5c7a9f453b2c6c2da42a839343bd274949c3f1bc853ec1eeb1e6860206e884e3d2d7e50416d6a857541203f8d7a07d8d059be59b668e3eca7e9b90ce7daa3dd99a1f3121fcecf5b79b7e3f9b47ade0fcf93a5c927c76aeb901e128f9b597c288ee2ba591dd14698d5b79c69631630b29cc1a31e076e1c008ffb6df81077e9bd444e09724ce4ba5e23cfd2b95285b1ce28e1ad6423b3238745a50d9a307159471174383ee7abc319b326e386d7b973344d4764d84655b370864b5759c5dca7b33e596513e95f71a8240bc3612ce91fb44dc413950153ef9ebbe4500f25ce1f6b7d0295e31e58974c1caa3ebf2c2ce3c4cbf6253a3d11c21aeb3cc51b25bd5a3d47480139f644df71878c182d136e24094789d9f9bf9350bd4626234798825ae826a9f521506e8bb5f1cb208443a4454b835e820afc08c1543b999b8bd83740af6356db577edc70a031710fc8f1cb4963a8d3c77bdd69b609439c2132eb64fdf88f2bacaca8c2f5becb6be8f9c52668bb2da0fd363a7bcda5bee8855a5f57dcc6c9c38bcac47c28ab7fefe807afcc5e080971664f4b004db6865fbef08c4a86cda468ee93573c04f4c5ef787fac6d5f7311a0ed3e09d845f35a256565f38f60b0159863d9c937b83750c65d47cbaf950f9208109fad61199f28c723f5e0d01420a9095fca67b0ba488025478fac89792cfb28e2340902349d82334067875b516fe962828f68917c09dfa2f0ce14bdcb0616655593483429898819ffc638a16cabb02a7e51c8f4433b8437198931c3e7433255a1966d7a495e62fdadfdd5bd9889017286dc43f6abd2380fbca62a5365a4983c9e5334a277f698ed139a869c7d2e2b52c81b2ea42b914becd5566dbed89294cf46740095e0e0dc33cb09684d74a5e9abf03ea3a50142e7df2713d56630ac20881c4233a768d09538fcd0e253a9f7aafc83861e1a5bc76e6959726a6b5956604931165ac1289512d77e14d92896ee56ccfa0a0f50711aaaf78ec87c2441fc72b8b66a48e6374832bebf6ebfb56cd95d9b7a5d8368bf3c6efa81757b919f3d02576e827d8b37ffed8dbf780006d08aa03367c9e0cd1ce8c466b91820fa8f9eb64d3ac9e51b02035437fcb6abbc700a607b793ef2b9dd4d954c7b2cb05856ba70c4c07fa4b793fe1fd4473f58512e6446c839c0ee05c76609a1bdda2ab881637f26acc4ee0610960ffd2be2648490adec9a7694971414fe82b11a2608aba6c5b7054b87af7e6171b76f346ed8c7a7ff3b89f097e38b4ad1acfcb80fadad99f8036bb6ec4664f93ddc826aff4a16169402fcdf9a1ea3489941a401ed9b2bb652ca727861efd4249f648f9c45d66863e9810df6d9d84f7ff300fbd1433a41e4c38e53023586ddf630033051ed2059ea0bc0fd837be67191b6371ac56e3a1dbd76", @generic="c55dd11e459c2cea0dbf015f43a6f0eac5bf827ffdef660c6be56079e22b8d7271a226c0770d2acbada780aba437192703009d5253c9b27fc76540cb0212701a269f0c590515b9415cfdc47900c3cf8e272f5e0013236764f3c8d17d2a8d28fc43c323a349994a0845357b286ac501b615566a10f039ffcc409f2f8aa612422dbec9c19e9c18827852c8755656ef3656147cf2bae5a9d1f96631bf0bd954dd1f5e112ceaadcf59fa8dcc45369a6a8a48f9e3f237314c99299452b0baafd0a14f143d959ae186553e8789195ae2a4938da6051a66708c3ae60a03aefaf8b8c782f66fb8305b27cc043991", @generic="6f7f92a5da8820dd0f2a43275451060b93dc3fb6234f4226ef33eba7c2e3156772cd4b09e0b8998caff69e55781957bf8dd8064586e71792d46e7be6947b4fcfaf269881c113416b6e9cf348d1e97d1e5ded846fea38e6851188203e7cd219299e8ccd9e8f5f48c7ff962ebdee9c027b5731520cb3675eeea1e2df65fa995c1d5df4f1dd10df0c67af53632940c51adfb8ffcb9b30586d652835b677fc0f3aea228c812078a60e34e893af28ab1e2fc71bafb5fbcb0ff1dabaf01051b7602451a18e9d0e63d893f44f8d332446"]}, @nested={0x268, 0x92, [@generic="2f787b8d19e35da7494635e72951941c93a07c47322fde12e7f01a3d25678c1edfc0a8bed1aaad3681a85f6582b98adc57dfdbb2e62ba6ea39256bd80ad4c5fc60792a8e3d6a", @typed={0x8, 0x12, @u32=0x6330}, @typed={0x14, 0x76, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, @generic="188da5b2b527783ede23b15b1e5fb743449bc08a13a1bcf43d1ce0696ae07cef1ea0d6f75b5c3a4863ed89522b70aea5e5f4eaa4eebe4de0a86b41f7128e33644d55ae4ec4c5737c88abcf659403d1561a917b000baaec6a51f9df03cb3983ab3717a7fd1bb7c7124c5b3db2212cd1ab24ed2af0aded241ef297aad7e559cc2314411fe4d823348ab2799ed2603206222c3f58d269a06eb96fb7782ca4a110e5c246fcb81abda48970e97705ffa8c7eead9f0bf344bd8886cd483e049630df4d36efd826d97edc830213a10670916d675a35526da8f71cc5117581", @typed={0x114, 0x58, @str='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00'}, @typed={0x8, 0x96, @u32=0x7fffffff}, @typed={0x8, 0x41, @pid=r6}]}, @generic, @nested={0x98, 0x16, [@typed={0x4, 0x2c}, @generic="7eb93e71a1ba31399232e4093b54db933f1d07160c6d8072867dfaa6c539bcd094e34015432bae435127a7443cc4b684c4d1f4280ac73f7d4eee042009bdbf38e57aedd1f1b0d829db42807599abbb1be7de49efa07524e9b68b4cb8bac4f72084de727f52e7a66b7be23f3f6ed280a281122eba4e716f82145dfd0e750df8fc73b429f78facfc6a987ea5", @typed={0x4, 0x6a}]}, @generic="d0a521ba0727ff2ade39a22d2591b1b06a492561b6e76977b3f6a1d28728c3b81f435489358a101727609c9f63fddf3eb1068811e0105552a9", @generic="42cb8da5b69ce36254a4dfc127e8d1ed5663ffb4fdda22a1b9e1c044c56e0bf97fd3c98e610a6c7cf5cc986d24494ab0cffb91baf2f8a2a66ecf731251327451", @nested={0x1ec, 0x69, [@generic="08fcf90aeed9f132511b83d5bf53df6e85bc5b7ff367", @generic="b0deeb88d8844198668ee96526a8a8e82f6af33ea993b79342b43634de3a2b544cf0255b8d95600aa62b29970cb71bfc45beb0060f7346e54a52ee07fdb70cff7fb49659004d80ad2bfe980c4750734e4ee1a9458db4f5182b7c3c44eae9af8bc44f", @typed={0x8, 0x1800000000000000, @ipv4=@multicast1}, @generic="36fb260cd84d12c355a7c46312e2716c51a10eb9d31722b01189005468592f2817cf32422bd4cbea0c88db02dfe779f436b1ec04990f32604c8981d024d596ea19512dcbb93f046cd301f76a6f466a427cd70b4f693ce2341c6e01f21859a4107e117edb15ac1c62005a278346aee746127f78461eb27f8d4fc5e33796cab4ab203e5bf6552bb4cec58e286c53e9e0e5d7a4e5beb2e9cba22d511c33410a30733ef7b86c1ffd0e557180823f35a2510dd291341270d2b356f16618cd5d38552b7a3621d57d11bc3897", @generic="99f6ec83eac2df0729265f9619b6410833a7c3f15a10841252a25309604cc49f61526eea6605c59a6f05fc6ded1c14c5f10c3ae8fc9705ea10451064f6", @generic="e02f", @typed={0xc, 0x25, @u64}, @generic="5221df3ed14390cc02d27021800b14b26668a5350fcca5f755cc5b9609f37380849e75cc77001fa3fcfc8302ca87baa0caf750f2415157a9f3e2329264b2a8d4b96bccf86341", @typed={0xc, 0x1, @str='self\"(\x00'}]}, @generic="354d37f82723d5caf0f831c0d01b5388ee33ad17ffc41e1c1e3dfda224298edd6a2e0b829fb964298421f5c421001bab954c76ac690b9025916848bf256d123c322e44f87ba1044663a34705d297c78c3e94745c831b4d29d1771bab12894bcf591dcbabd7"]}, 0x1904}, 0x1, 0x0, 0x0, 0x8885}, 0x40) signalfd(r3, &(0x7f00000005c0)={0x51a}, 0x8) renameat2(r3, &(0x7f0000000540)='./file0\x00', r4, &(0x7f0000000580)='./file0\x00', 0x5) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0xfffffffffffffe01, 0x0, 0x4}, 0xc) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000020c0)={0x2, 0xfffffffffffff800, {0x55, 0x8, 0x5, {0xfffffffffffffffd, 0x2}, {0x3, 0xffff}, @ramp={0x0, 0xfffffffffffff801, {0x0, 0x4, 0x8, 0x3}}}, {0x57, 0x3, 0x1f, {0xfffffffffffffffa, 0x8001}, {0x400, 0x60b416db}, @const={0x10000, {0x4, 0x37a6, 0xc9f, 0x5}}}}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000002140)={'netdevsim0\x00', {0x2, 0x4e24, @broadcast}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x90251b4cba3769b1) ioctl$FICLONE(r4, 0x40049409, 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local={0x12, 0x80, 0xc2, 0x0, 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 315.618728] binder: 9452:9456 ioctl c0306201 20000000 returned -14 [ 315.626673] binder: BINDER_SET_CONTEXT_MGR already set [ 315.626835] binder: 9452:9456 got reply transaction with no transaction stack [ 315.634370] binder: 9454:9455 ioctl 40046207 0 returned -16 [ 315.639956] binder: 9452:9456 transaction failed 29201/-71, size 0-0 line 2920 [ 315.655902] binder: BINDER_SET_CONTEXT_MGR already set 18:50:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000040)='./file1\x00', 0x0, 0x2a08a0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) [ 315.670240] binder: 9452:9456 ioctl 40046207 0 returned -16 [ 315.678372] binder: 9454:9455 BC_ACQUIRE_DONE u0000000020002000 no match [ 315.685517] binder: 9454:9455 ERROR: BC_REGISTER_LOOPER called without request [ 315.686754] binder: BINDER_SET_CONTEXT_MGR already set [ 315.692974] binder: 9454:9455 got transaction to invalid handle [ 315.692989] binder: 9454:9455 transaction failed 29201/-22, size 0-16 line 3012 [ 315.713668] binder: 9452:9460 ioctl 40046207 0 returned -16 [ 315.713721] binder_alloc: 9452: binder_alloc_buf, no vma [ 315.719798] binder: 9452:9456 ioctl c0306201 20000000 returned -14 [ 315.730235] binder: 9454:9455 transaction failed 29189/-3, size 0-0 line 3135 [ 315.732014] binder: 9452:9460 got reply transaction with no transaction stack [ 315.746519] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.746545] binder: BINDER_SET_CONTEXT_MGR already set [ 315.757604] binder: 9452:9464 ioctl 40046207 0 returned -16 18:50:18 executing program 5: close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x15, 0x6ca, 0x77fffb, 0x4, 0x820004, r0}, 0x2c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x18, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x0) r4 = dup3(r1, r0, 0x80000) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000040)=0x82) bpf$OBJ_GET_PROG(0x7, 0x0, 0xffffffffffffff7d) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000080)=""/34) 18:50:18 executing program 4: socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f00000029010005000000000400000000000000000000000600000000000000fa05002e2f6275730100000000070000000000000001000000000000000105002e2f6275730004000000010000000000000007000000000000000605002e2f627573b0e8ffffff010000000000000007002000000000000105002e2f627573"], 0x7f) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000240)='/', 0x1}], 0x1) 18:50:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) prctl$PR_SET_DUMPABLE(0x4, 0x2) [ 315.764014] binder: 9452:9460 transaction failed 29201/-71, size 0-0 line 2920 [ 315.773134] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.779070] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.842424] binder: 9476:9480 got reply transaction with bad transaction stack, transaction 280 has target 9476:0 [ 315.856219] binder: 9476:9480 transaction failed 29201/-71, size 0-0 line 2935 [ 315.866385] binder_alloc: binder_alloc_mmap_handler: 9476 20003000-20005000 already mapped failed -16 [ 315.877680] binder: BINDER_SET_CONTEXT_MGR already set [ 315.883288] binder: 9476:9480 ioctl 40046207 0 returned -16 [ 315.889246] binder_alloc: 9476: binder_alloc_buf, no vma [ 315.917919] binder: 9476:9485 transaction failed 29189/-3, size 0-0 line 3135 [ 315.925653] binder: 9476:9480 got reply transaction with no transaction stack [ 315.930407] binder: send failed reply for transaction 280 to 9476:9480 [ 315.940254] binder: undelivered TRANSACTION_COMPLETE [ 315.941453] binder: 9476:9480 transaction failed 29201/-71, size 0-0 line 2920 [ 315.959076] binder: undelivered TRANSACTION_ERROR: 29201 18:50:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) 18:50:18 executing program 4: mknod$loop(0x0, 0x0, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0xffffffffffffffbd) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) signalfd(0xffffffffffffffff, &(0x7f0000000340)={0x6}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x4, 0x4) socket$inet(0x2, 0x2, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000000c0)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001b00)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd677336f84285b6a}, 0x90) ioctl$TUNGETIFF(r2, 0x800454d2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0x0) fcntl$dupfd(r2, 0x406, r2) io_submit(0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) 18:50:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='limits\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x0, 0x8000, 0x2, 0x7}, 0x40, 0x2, 'id0\x00', 'timer0\x00', 0x0, 0xffffffffffffffc1, 0xfffffffffffffffc, 0x7ff, 0xffffffffffff8000}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:18 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, 0x5, 0x8, 0x2}, 0xa) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, "f098c4d2183a382407d77ee003adffd10f2e45ba69c17fcb48ea1ae3bb53f58e"}) 18:50:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00cB@@'], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8, 0x50, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffffc4, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0}) [ 315.977323] binder: undelivered TRANSACTION_ERROR: 29189 [ 315.989600] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.999641] binder: undelivered TRANSACTION_ERROR: 29189 [ 316.060871] EXT4-fs (sda1): re-mounted. Opts: [ 316.075211] binder: 9507:9514 unknown command 1078092544 [ 316.091620] binder: 9507:9514 ioctl c0306201 20000000 returned -22 [ 316.118682] EXT4-fs (sda1): re-mounted. Opts: [ 316.127708] binder: BINDER_SET_CONTEXT_MGR already set [ 316.139855] binder: 9507:9523 ioctl 40046207 0 returned -16 [ 316.148580] binder: 9507:9514 unknown command 1078092544 [ 316.171620] binder: 9507:9514 ioctl c0306201 20000000 returned -22 [ 318.160145] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 18:50:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000000040)) 18:50:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x3) 18:50:21 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) dup(r0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) add_key(0x0, &(0x7f0000001a40)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) io_setup(0x3, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x0) 18:50:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="cdf89130db4f1a0760ad47af0c24803b98571c633faffd647bbbdc412ac7ebcebd8bcb71addab28abc92bf3545a7fcc8ea0cf0e35ddcc36194311188f1704106a8405f6769b519f1c2d723b2d230ae2d952f5653ed6754d0c809363b0585fc59ffc06eacdd0474a310ba907c47dbf2a9ee1ba30b6512ef048d0b2b0e01f39d536e3311c300cdc775ec955330250b52f8e5a9d038aeb76c17939ecd9bd9a3dbb181ac6d2aed72f20a5044369cdbab46e409", 0xb1}, {&(0x7f00000006c0)="9079be4e19606dd5f59513325fcd00f58237390000000035bdf983f992a233ceb86aa5dcaf4f7084089bb99825a45fe7908afd936c8e4d5c888f511f22aa0acf5e1ca71adfeca4bc8ec35f6f3dff92ee3e4eb711f5324c5300", 0x59}, {&(0x7f0000000240)="975c8375649a2d23bfa1a0ceb0c23e3f7982945848604f8bd4a6ed6797fbc5d2848efc6a0b2ab153a9aca50ea4fac7bfa92b47dd4043b5636045ca6e5551fb737fc533948352e79c06b86ad2132c6f7200ef45f6950b30339fdf0b1500459c77ccf02a62ccc2000067fc7e3102fd7cb40c631d6c798616960b4d2f25689c3ae850e62c4cf6a5ec94fb2660aa74e4c5ab0957c3255849e16b52df493682e69c7f35d2cb31791b65f522930a400403bf00682cc4921bfe4c70b8dff9921afb9b2d83ac6c93926900", 0xc7}, {&(0x7f0000000740)="ba79e220af00601b7c8824445adc6047e99bd6fc5b7e67fb7b1d7b44f58aee553dc7e1365192d2950f64883ff1f04c2a0e4340baacd3a120b6b4d14c8c4d3153dfc52a4ddeb1115bdd52a55d4d0b411f12357d10570aa7f384c06eadac5c6bf956e908b992d3d04e6196ca5921a4273811d7290bd3dd25cfe058a7927736b5fd7e949beaaadd7feab7d1c1b8ec5e196d607c3a16faca96a3706de4f9bdfe2b3010e7641b4dfd25149f37864dfd98578460bee1ff61f770e9a548336454d321d7bedcff1a26f77a0f1c71f3f26dd7a0eb09be87384559dd1ae0b496994f8aabb246b3eb9bd75e5659849d622848fb2479e7f8a858d3", 0xf5}, {&(0x7f0000000440)="68ca1718574b31278cd7968e9fabe81429b46e8412efe8f3001f8bd1253c0c8c297d7bc198c90f720aea699d714814bb2ba129cd3cdb33bf8deb7f4e4ee4309f31e80763f1729dba54fcb532c4fd18d8bd925f1831955f94956f3fe99cf8127e30d3e8b890acd8de14956db6e75e03c12842b9f1a73ffe9ec70f54ae96414341d26a3284f24648871fa162279e406c732c69e7f9b29ae1bfccdc57dab242", 0x9e}, {&(0x7f0000000640)="1c6cefdbacffb93c113e7955734c2afcb9cd338591a51897a7e32aeed28c217eab6138a0a645fd9204b8a8be0b22b8c6e58be8c8b419ec45142efb8ea6bcaea49fc3db8f748f0bbd1deaf6ab4649231176c0c7ccee69b6c747f98813a44f81bb", 0x60}], 0x6, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000600)={0x0, r0, 0x25, 0x80000000, 0x4, 0x9}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x414400, 0x0) 18:50:21 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000180)="670179a5bfca04d9d3518422", 0xc, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x81) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x6, 0x7f, 0x2, 0x3, 0x0, 0x81, 0x800, 0x0, 0x0, 0x1, 0xa970, 0x3fc, 0x3, 0x2, 0x8, 0x3c3e, 0x0, 0x4, 0x4, 0x2705, 0x4, 0xfffffffffffffffa, 0x0, 0x7fff, 0x9f, 0x47, 0x9, 0xfffffffffffffffb, 0x8, 0x0, 0xf800000000000000, 0x7, 0x0, 0x3, 0x3, 0x100000000, 0x0, 0x1380, 0x0, @perf_config_ext={0x7, 0x2}, 0x0, 0x4, 0x100, 0x6, 0x7fff, 0x81, 0x9}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="162fc4db27"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:21 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x400, 0x0) r2 = dup2(r0, r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r3, &(0x7f0000000040)="bc", 0x1) r4 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x101, 0x2, 0x7, 0x447, 0x0, 0x0, 0x10000, 0x8, 0x5, 0xfff, 0x1, 0x80000000, 0x4, 0x8, 0x1, 0x3f3, 0x9, 0x8, 0x4, 0x9, 0x8, 0x3ff, 0xffffffff, 0x1f, 0x8, 0x6, 0x4, 0x100, 0x7, 0xfff, 0x4, 0xdcc2, 0x0, 0x401, 0x5, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0xcc6b, 0x9}, 0x8000, 0x200, 0x100000001, 0x7, 0x3ff, 0x0, 0x3}, r4, 0x8, 0xffffffffffffffff, 0x8) sendfile(r3, r3, &(0x7f0000001000), 0x10002) [ 318.645745] binder: 9543:9553 unknown command -607899882 [ 318.652375] binder: 9543:9553 ioctl c0306201 20000000 returned -22 [ 318.673347] binder: 9543:9553 got reply transaction with no transaction stack [ 318.674308] EXT4-fs (sda1): re-mounted. Opts: [ 318.696287] binder: 9543:9553 transaction failed 29201/-71, size 0-0 line 2920 [ 318.716386] binder_alloc: binder_alloc_mmap_handler: 9543 20003000-20005000 already mapped failed -16 [ 318.729077] binder: BINDER_SET_CONTEXT_MGR already set [ 318.735663] binder: 9543:9553 ioctl 40046207 0 returned -16 18:50:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000140)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=00000000000000000000001,smackfsfloor=.posix_acl_access:+\'vboxnet0}wlan0,subj_role=,fscontext=root,uid>', @ANYRESDEC=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) getsockname$inet6(r0, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) 18:50:21 executing program 3: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat(0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000600)) futex(&(0x7f0000000080)=0x2, 0x85, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffffc, 0x2) getgroups(0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) clock_adjtime(0x7, &(0x7f0000000200)={0x80000001, 0x0, 0x8, 0x4, 0x7, 0x9a, 0x1, 0x8, 0xffff, 0xfffffffffffffffb, 0x523, 0xaa4b, 0x0, 0x1, 0x2c, 0x9, 0x8}) r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x5) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = dup2(r2, r2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RSTAT(r3, &(0x7f0000000540)={0x61, 0x7d, 0x2, {0x0, 0x5a, 0xffffffff7fffffff, 0x5, {0x20, 0x4, 0x6}, 0x0, 0x80000001, 0x1a7b, 0x8, 0x14, 'selfposix_acl_access', 0xa, 'vmnet0\'GPL', 0x1, '}', 0x8, 'syz_tun\x00'}}, 0x61) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xf1}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d3, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) dup3(r1, r3, 0x0) 18:50:21 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500001c00000000006c907800000000e090050a4059b8fb31e05228690ac80000018800907800000000"], 0x0) [ 318.754398] binder: 9543:9566 unknown command -607899882 [ 318.766530] EXT4-fs (sda1): re-mounted. Opts: [ 318.775626] binder: undelivered TRANSACTION_ERROR: 29201 [ 318.782951] binder: 9543:9566 ioctl c0306201 20000000 returned -22 18:50:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x101000, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x7fff, 0x101, 0x3, 0x0, 0x4, 0x40, 0x0, 0x81, 0x9, 0x10000, 0x7, 0x9, 0xa2e6, 0x7fffffff, 0x9, 0x493b, 0xcc, 0x1, 0x4, 0xa8, 0x5, 0x7fff, 0x23, 0x9, 0x7, 0x7, 0x40, 0x7fff, 0x1, 0xfffffffffffffffd, 0x2, 0x60a, 0x9, 0x3, 0x400, 0x0, 0x2, 0x7, @perf_config_ext={0x9, 0x9}, 0x8, 0x0, 0xffffffffffffffff, 0x4, 0xfff, 0x2000000000000000, 0x2}, 0x0, 0xb, r0, 0x1) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x140) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x105180, 0x0) read$eventfd(r2, &(0x7f0000000080), 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = accept(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000140)={0x53da, 0x9, 0x37, 0x8}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:21 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffd) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) 18:50:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x401, 0x0, 0x1, 0xc, 0x2, 0xfffffffffffffffa}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x400, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80000000002, 0x4) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmmsg(r2, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) fsetxattr$security_evm(r1, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "a7d1484c49254d4bceb523dd8216851f"}, 0x11, 0x0) [ 318.963830] binder: 9589:9594 got reply transaction with bad transaction stack, transaction 288 has target 9589:0 [ 318.999377] binder: 9589:9594 transaction failed 29201/-71, size 0-0 line 2935 18:50:21 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000280)=0x1ff, 0x4) [ 319.013999] EXT4-fs (sda1): re-mounted. Opts: [ 319.025666] binder_alloc: binder_alloc_mmap_handler: 9589 20003000-20005000 already mapped failed -16 [ 319.053999] binder: BINDER_SET_CONTEXT_MGR already set 18:50:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') io_setup(0x1, &(0x7f00000000c0)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r1, 0x10000, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000200)={r2, r3+10000000}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x3001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xa7, 0x0, 0x4000000000040030, 0x0) [ 319.059518] binder: 9589:9594 ioctl 40046207 0 returned -16 [ 319.065748] binder_alloc: 9589: binder_alloc_buf, no vma [ 319.084859] binder: 9589:9603 transaction failed 29189/-3, size 0-0 line 3135 [ 319.099699] binder: send failed reply for transaction 288 to 9589:9594 18:50:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f00000000c0)=0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write(r0, &(0x7f0000000600)="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", 0x1f0) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="2bda52005c07da616e0fed7f852ca8eb396bfc3a8436369863ca0ba469e13ad01d8efdf9318655669031e6a476"], 0x0}, 0x48) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r3, 0x0, 0x80000000000004, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00'}, 0x3be) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x856, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x3, 0x9) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, {0x100}}, {{@in6}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x14, &(0x7f0000788ffc), 0xfdf6) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x1) setuid(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x5}, 0x48) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) [ 319.110908] binder: undelivered TRANSACTION_COMPLETE [ 319.127906] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.147636] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.161188] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.251102] binder: 9613:9617 got reply transaction with bad transaction stack, transaction 292 has target 9613:0 [ 319.276242] binder: 9613:9617 transaction failed 29201/-71, size 0-0 line 2935 [ 319.297345] binder_alloc: binder_alloc_mmap_handler: 9613 20003000-20005000 already mapped failed -16 [ 319.309783] binder: BINDER_SET_CONTEXT_MGR already set [ 319.315601] binder: 9613:9617 ioctl 40046207 0 returned -16 [ 319.320174] binder_alloc: 9613: binder_alloc_buf, no vma [ 319.326934] binder: 9613:9621 transaction failed 29189/-3, size 0-0 line 3135 [ 319.335057] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.340614] binder: send failed reply for transaction 292 to 9613:9617 [ 319.347401] binder: undelivered TRANSACTION_COMPLETE [ 319.361910] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.367585] binder: undelivered TRANSACTION_ERROR: 29189 18:50:22 executing program 4: openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x304}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004890}, 0x4000) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) r5 = socket$packet(0x11, 0x0, 0x300) truncate(&(0x7f0000000280)='./file0\x00', 0xffff) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) dup2(0xffffffffffffffff, r5) accept4$packet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x14, 0x80000) 18:50:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x7ff, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) 18:50:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) 18:50:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x5, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000400)="4975466b44f14a1a5d712bb7b6dde2cf67e1b29030f616e2cc67511eb52928688043350fd93c4840f6fca5eb92d270323c46da2cb980ca1f6114148a511259b85e71a755268d86792fbefd1ddc600bf255a164c701e73b9f0641788e4a816ac1c5942ab6d4b6d4b795449f170ea2ed46d2db9eec5ea6cd801e7203b2a5a3a2235ac7b926da0f4b9474ccdec9be7beb6a2d64022c83be0e7759e204f139a824926edd23a50af059dd1ae6c297555106b92508c241a26a910255be77fbd5920de2e913b82e3fb96323f77ef97798ec31bbc4ac9fd3") mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r3 = gettid() r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r4, 0x0, 0xd, &(0x7f00000001c0)='/dev/binder#\x00'}, 0x30) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:22 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000e06000/0x4000)=nil, 0x4000) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) prctl$PR_SET_UNALIGN(0x6, 0x2) mremap(&(0x7f0000e08000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) 18:50:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) write(r0, &(0x7f0000000600)="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", 0xffffffc4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nr0\x00', r2}) sendfile(r0, r1, 0x0, 0x10000) 18:50:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000300)=r4) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000340)=0xfffffffe) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0xfffffffffffffc43) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r5, 0x41, 0x0, 0x10000101) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) [ 319.608185] binder: 9631:9637 got reply transaction with bad transaction stack, transaction 296 has target 9631:0 [ 319.631342] binder: 9631:9637 transaction failed 29201/-71, size 0-0 line 2935 [ 319.641385] EXT4-fs (sda1): re-mounted. Opts: [ 319.659776] binder: BINDER_SET_CONTEXT_MGR already set [ 319.674920] binder: 9631:9646 ioctl 40046207 0 returned -16 [ 319.690499] binder: 9631:9646 got reply transaction with no transaction stack [ 319.701701] binder: 9631:9646 transaction failed 29201/-71, size 0-0 line 2920 18:50:22 executing program 1: r0 = socket(0x5, 0xe, 0xdfa2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0xe5a, 0x7fffffff, 0x7fff, 0x6}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f0000000080)=""/68, 0x44, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 319.718017] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.723893] binder: send failed reply for transaction 296 to 9631:9637 [ 319.742205] binder: undelivered TRANSACTION_COMPLETE [ 319.752958] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.758722] binder: undelivered TRANSACTION_ERROR: 29189 18:50:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 319.864368] binder: 9656:9660 got reply transaction with bad transaction stack, transaction 300 has target 9656:0 [ 319.884204] binder: 9656:9660 transaction failed 29201/-71, size 0-0 line 2935 [ 319.897071] binder_alloc: binder_alloc_mmap_handler: 9656 20003000-20005000 already mapped failed -16 [ 319.907475] binder: BINDER_SET_CONTEXT_MGR already set [ 319.913912] binder: 9656:9660 ioctl 40046207 0 returned -16 [ 319.919920] binder_alloc: 9656: binder_alloc_buf, no vma [ 319.926380] binder: 9656:9661 transaction failed 29189/-3, size 0-0 line 3135 [ 319.936148] binder: undelivered TRANSACTION_ERROR: 29189 [ 319.942483] binder: send failed reply for transaction 300 to 9656:9660 18:50:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xffffff56, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 18:50:22 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000300)=r4) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000340)=0xfffffffe) ioctl$KDGKBDIACR(r2, 0x4b4a, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0), 0xfffffffffffffc43) getpgrp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r5, 0x41, 0x0, 0x10000101) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/load\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) [ 319.970370] binder: undelivered TRANSACTION_COMPLETE [ 319.985985] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.998613] binder: undelivered TRANSACTION_ERROR: 29189 [ 320.089899] binder: 9663:9667 unknown command 3 [ 320.118785] binder: 9663:9667 ioctl c0306201 20000080 returned -22 [ 320.140779] binder: 9663:9670 got reply transaction with no transaction stack [ 320.157592] binder: 9663:9670 transaction failed 29201/-71, size 0-0 line 2920 [ 320.187345] binder_alloc: binder_alloc_mmap_handler: 9663 20003000-20005000 already mapped failed -16 [ 320.216524] binder: BINDER_SET_CONTEXT_MGR already set [ 320.223216] binder: 9663:9667 ioctl 40046207 0 returned -16 [ 320.229856] binder: 9663:9670 unknown command 5 18:50:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4000000000000ce, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x100, 0x4) [ 320.247407] binder: 9663:9670 ioctl c0306201 20000080 returned -22 [ 320.254370] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.444372] EXT4-fs (sda1): re-mounted. Opts: [ 320.463120] ================================================================== [ 320.470607] BUG: KASAN: use-after-free in ip_check_defrag+0x4f5/0x523 [ 320.477192] Write of size 4 at addr ffff8881cab1c09c by task syz-executor4/9682 [ 320.484633] [ 320.486277] CPU: 0 PID: 9682 Comm: syz-executor4 Not tainted 4.14.97+ #4 [ 320.493115] Call Trace: [ 320.495714] dump_stack+0xb9/0x10e [ 320.499260] ? ip_check_defrag+0x4f5/0x523 [ 320.503521] print_address_description+0x60/0x226 [ 320.508371] ? ip_check_defrag+0x4f5/0x523 [ 320.512607] kasan_report.cold+0x88/0x2a5 [ 320.516761] ? ip_check_defrag+0x4f5/0x523 [ 320.521001] ? ip_defrag+0x3b50/0x3b50 [ 320.524897] ? mark_held_locks+0xa6/0xf0 [ 320.528964] ? check_preemption_disabled+0x35/0x1f0 [ 320.533992] ? packet_rcv_fanout+0x4d1/0x5e0 [ 320.538398] ? fanout_demux_rollover+0x4d0/0x4d0 [ 320.543162] ? dev_queue_xmit_nit+0x21a/0x960 [ 320.547678] ? dev_hard_start_xmit+0xa3/0x890 [ 320.552179] ? validate_xmit_skb_list+0xd2/0x110 [ 320.556943] ? sch_direct_xmit+0x27a/0x520 [ 320.561183] ? dev_deactivate_queue.constprop.0+0x150/0x150 [ 320.566893] ? lock_acquire+0x10f/0x380 [ 320.570865] ? ip_finish_output2+0x9fe/0x12f0 [ 320.575372] ? __dev_queue_xmit+0x1565/0x1cd0 [ 320.579877] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 320.584809] ? netdev_pick_tx+0x2e0/0x2e0 [ 320.588964] ? ip_do_fragment+0x180c/0x1ee0 [ 320.593308] ? mark_held_locks+0xa6/0xf0 [ 320.597370] ? ip_finish_output2+0xd92/0x12f0 [ 320.601869] ? ip_finish_output2+0x9fe/0x12f0 [ 320.606383] ? ip_copy_addrs+0xd0/0xd0 [ 320.610282] ? perf_trace_lock+0x11e/0x4e0 [ 320.614522] ? check_preemption_disabled+0x35/0x1f0 [ 320.619550] ? ip_do_fragment+0x180c/0x1ee0 [ 320.623869] ? ip_do_fragment+0x180c/0x1ee0 [ 320.628204] ? ip_copy_addrs+0xd0/0xd0 [ 320.632105] ? ip_fragment.constprop.0+0x146/0x200 [ 320.637043] ? ip_finish_output+0x7a7/0xc70 [ 320.641372] ? ip_mc_output+0x231/0xbe0 [ 320.645352] ? ip_queue_xmit+0x1a70/0x1a70 [ 320.649587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 320.655047] ? ip_fragment.constprop.0+0x200/0x200 [ 320.659975] ? dst_release+0xc/0x80 [ 320.663629] ? __ip_make_skb+0xe30/0x1690 [ 320.667789] ? ip_local_out+0x98/0x170 [ 320.671682] ? ip_send_skb+0x3a/0xc0 [ 320.675394] ? ip_push_pending_frames+0x5f/0x80 [ 320.680067] ? raw_sendmsg+0x19de/0x2270 [ 320.684146] ? raw_seq_next+0x80/0x80 [ 320.687951] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 320.692630] ? _raw_spin_unlock_irq+0x35/0x50 [ 320.697130] ? finish_task_switch+0x1e2/0x620 [ 320.701625] ? finish_task_switch+0x1b7/0x620 [ 320.706121] ? __switch_to_asm+0x34/0x70 [ 320.710182] ? __switch_to_asm+0x40/0x70 [ 320.714255] ? __schedule+0x924/0x1f30 [ 320.718158] ? sock_has_perm+0x1d3/0x260 [ 320.722213] ? __lock_acquire+0x56a/0x3fa0 [ 320.726426] ? ___preempt_schedule+0x16/0x18 [ 320.730818] ? inet_sendmsg+0x14a/0x510 [ 320.734772] ? inet_recvmsg+0x540/0x540 [ 320.738724] ? sock_sendmsg+0xb7/0x100 [ 320.742594] ? sock_no_sendpage+0x132/0x1a0 [ 320.746896] ? sock_rfree+0x140/0x140 [ 320.750679] ? migrate_swap_stop+0x810/0x810 [ 320.755065] ? plist_check_list+0x70/0xa0 [ 320.759206] ? inet_sendpage+0x1bb/0x5c0 [ 320.763252] ? inet_getname+0x390/0x390 [ 320.767207] ? kernel_sendpage+0x84/0xd0 [ 320.771373] ? sock_sendpage+0x84/0xa0 [ 320.775244] ? pipe_to_sendpage+0x23d/0x300 [ 320.779549] ? kernel_sendpage+0xd0/0xd0 [ 320.783591] ? direct_splice_actor+0x160/0x160 [ 320.788198] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 320.793544] ? __splice_from_pipe+0x331/0x740 [ 320.798020] ? direct_splice_actor+0x160/0x160 [ 320.802580] ? direct_splice_actor+0x160/0x160 [ 320.807156] ? splice_from_pipe+0xd9/0x140 [ 320.811374] ? splice_shrink_spd+0xb0/0xb0 [ 320.815594] ? security_file_permission+0x88/0x1e0 [ 320.820687] ? splice_from_pipe+0x140/0x140 [ 320.825003] ? SyS_splice+0xd1c/0x12d0 [ 320.828878] ? compat_SyS_vmsplice+0x150/0x150 [ 320.833438] ? do_clock_gettime+0xd0/0xd0 [ 320.837568] ? do_syscall_64+0x43/0x4b0 [ 320.841522] ? compat_SyS_vmsplice+0x150/0x150 [ 320.846083] ? do_syscall_64+0x19b/0x4b0 [ 320.850128] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.855474] [ 320.857080] Allocated by task 9682: [ 320.860689] kasan_kmalloc.part.0+0x4f/0xd0 [ 320.864989] kmem_cache_alloc+0xd2/0x2d0 [ 320.869025] skb_clone+0x126/0x310 [ 320.872544] ip_check_defrag+0x2bc/0x523 [ 320.876580] packet_rcv_fanout+0x4d1/0x5e0 [ 320.880789] dev_queue_xmit_nit+0x21a/0x960 [ 320.885086] [ 320.886687] Freed by task 9682: [ 320.889944] kasan_slab_free+0xb0/0x190 [ 320.893894] kmem_cache_free+0xc4/0x330 [ 320.897848] kfree_skbmem+0xa0/0x100 [ 320.901536] kfree_skb+0xcd/0x350 [ 320.904966] ip_defrag+0x5f4/0x3b50 [ 320.908566] ip_check_defrag+0x39b/0x523 [ 320.912605] packet_rcv_fanout+0x4d1/0x5e0 [ 320.916820] dev_queue_xmit_nit+0x21a/0x960 [ 320.921112] [ 320.922717] The buggy address belongs to the object at ffff8881cab1c000 [ 320.922717] which belongs to the cache skbuff_head_cache of size 224 [ 320.935889] The buggy address is located 156 bytes inside of [ 320.935889] 224-byte region [ffff8881cab1c000, ffff8881cab1c0e0) [ 320.947739] The buggy address belongs to the page: [ 320.952661] page:ffffea00072ac700 count:1 mapcount:0 mapping: (null) index:0x0 [ 320.960781] flags: 0x4000000000000100(slab) [ 320.965085] raw: 4000000000000100 0000000000000000 0000000000000000 00000001800c000c [ 320.972943] raw: ffffea00072353c0 0000000b0000000b ffff8881dab58200 0000000000000000 [ 320.980796] page dumped because: kasan: bad access detected [ 320.986479] [ 320.988080] Memory state around the buggy address: [ 320.992987] ffff8881cab1bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.000324] ffff8881cab1c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 321.007656] >ffff8881cab1c080: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 321.014992] ^ [ 321.019120] ffff8881cab1c100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 321.026459] ffff8881cab1c180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.033806] ================================================================== [ 321.041141] Disabling lock debugging due to kernel taint [ 321.055737] Kernel panic - not syncing: panic_on_warn set ... [ 321.055737] [ 321.063118] CPU: 0 PID: 9682 Comm: syz-executor4 Tainted: G B 4.14.97+ #4 [ 321.071158] Call Trace: [ 321.073745] dump_stack+0xb9/0x10e [ 321.077291] panic+0x1d9/0x3c2 [ 321.080490] ? add_taint.cold+0x16/0x16 [ 321.084461] ? retint_kernel+0x2d/0x2d [ 321.088358] ? ip_check_defrag+0x4f5/0x523 [ 321.092586] kasan_end_report+0x43/0x49 [ 321.096557] kasan_report.cold+0xa4/0x2a5 [ 321.100703] ? ip_check_defrag+0x4f5/0x523 [ 321.104956] ? ip_defrag+0x3b50/0x3b50 [ 321.108843] ? mark_held_locks+0xa6/0xf0 [ 321.112901] ? check_preemption_disabled+0x35/0x1f0 [ 321.117917] ? packet_rcv_fanout+0x4d1/0x5e0 [ 321.122327] ? fanout_demux_rollover+0x4d0/0x4d0 [ 321.127077] ? dev_queue_xmit_nit+0x21a/0x960 [ 321.131577] ? dev_hard_start_xmit+0xa3/0x890 [ 321.136070] ? validate_xmit_skb_list+0xd2/0x110 [ 321.140822] ? sch_direct_xmit+0x27a/0x520 [ 321.145053] ? dev_deactivate_queue.constprop.0+0x150/0x150 [ 321.150755] ? lock_acquire+0x10f/0x380 [ 321.154728] ? ip_finish_output2+0x9fe/0x12f0 [ 321.159227] ? __dev_queue_xmit+0x1565/0x1cd0 [ 321.163726] ? perf_trace_lock_acquire+0x4e0/0x4e0 [ 321.168648] ? netdev_pick_tx+0x2e0/0x2e0 [ 321.172791] ? ip_do_fragment+0x180c/0x1ee0 [ 321.177115] ? mark_held_locks+0xa6/0xf0 [ 321.181171] ? ip_finish_output2+0xd92/0x12f0 [ 321.185665] ? ip_finish_output2+0x9fe/0x12f0 [ 321.190166] ? ip_copy_addrs+0xd0/0xd0 [ 321.194049] ? perf_trace_lock+0x11e/0x4e0 [ 321.198288] ? check_preemption_disabled+0x35/0x1f0 [ 321.203314] ? ip_do_fragment+0x180c/0x1ee0 [ 321.207634] ? ip_do_fragment+0x180c/0x1ee0 [ 321.211955] ? ip_copy_addrs+0xd0/0xd0 [ 321.215841] ? ip_fragment.constprop.0+0x146/0x200 [ 321.220768] ? ip_finish_output+0x7a7/0xc70 [ 321.225086] ? ip_mc_output+0x231/0xbe0 [ 321.229058] ? ip_queue_xmit+0x1a70/0x1a70 [ 321.233304] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 321.238750] ? ip_fragment.constprop.0+0x200/0x200 [ 321.243674] ? dst_release+0xc/0x80 [ 321.247296] ? __ip_make_skb+0xe30/0x1690 [ 321.251448] ? ip_local_out+0x98/0x170 [ 321.255331] ? ip_send_skb+0x3a/0xc0 [ 321.259038] ? ip_push_pending_frames+0x5f/0x80 [ 321.263706] ? raw_sendmsg+0x19de/0x2270 [ 321.267767] ? raw_seq_next+0x80/0x80 [ 321.271565] ? avc_has_perm_noaudit+0x2d0/0x2d0 [ 321.276236] ? _raw_spin_unlock_irq+0x35/0x50 [ 321.280732] ? finish_task_switch+0x1e2/0x620 [ 321.285218] ? finish_task_switch+0x1b7/0x620 [ 321.289708] ? __switch_to_asm+0x34/0x70 [ 321.293763] ? __switch_to_asm+0x40/0x70 [ 321.297820] ? __schedule+0x924/0x1f30 [ 321.301709] ? sock_has_perm+0x1d3/0x260 [ 321.305776] ? __lock_acquire+0x56a/0x3fa0 [ 321.310008] ? ___preempt_schedule+0x16/0x18 [ 321.314422] ? inet_sendmsg+0x14a/0x510 [ 321.318396] ? inet_recvmsg+0x540/0x540 [ 321.322370] ? sock_sendmsg+0xb7/0x100 [ 321.326253] ? sock_no_sendpage+0x132/0x1a0 [ 321.330579] ? sock_rfree+0x140/0x140 [ 321.334372] ? migrate_swap_stop+0x810/0x810 [ 321.338774] ? plist_check_list+0x70/0xa0 [ 321.342933] ? inet_sendpage+0x1bb/0x5c0 [ 321.346996] ? inet_getname+0x390/0x390 [ 321.350961] ? kernel_sendpage+0x84/0xd0 [ 321.355019] ? sock_sendpage+0x84/0xa0 [ 321.358913] ? pipe_to_sendpage+0x23d/0x300 [ 321.363235] ? kernel_sendpage+0xd0/0xd0 [ 321.367312] ? direct_splice_actor+0x160/0x160 [ 321.371897] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 321.377275] ? __splice_from_pipe+0x331/0x740 [ 321.381783] ? direct_splice_actor+0x160/0x160 [ 321.386375] ? direct_splice_actor+0x160/0x160 [ 321.390959] ? splice_from_pipe+0xd9/0x140 [ 321.395193] ? splice_shrink_spd+0xb0/0xb0 [ 321.399435] ? security_file_permission+0x88/0x1e0 [ 321.404371] ? splice_from_pipe+0x140/0x140 [ 321.408695] ? SyS_splice+0xd1c/0x12d0 [ 321.412596] ? compat_SyS_vmsplice+0x150/0x150 [ 321.417184] ? do_clock_gettime+0xd0/0xd0 [ 321.421338] ? do_syscall_64+0x43/0x4b0 [ 321.425316] ? compat_SyS_vmsplice+0x150/0x150 [ 321.429905] ? do_syscall_64+0x19b/0x4b0 [ 321.433973] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.439665] Kernel Offset: 0x5e00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 321.450491] Rebooting in 86400 seconds..