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", &(0x7f0000001280)=""/61)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:42 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  858.360134] binder: release 29906:29918 transaction 2138 out, still active
[  858.368525] binder: undelivered TRANSACTION_COMPLETE
03:20:42 executing program 3:
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x24)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = dup(r0)
getpeername$unix(r1, &(0x7f0000001000), &(0x7f0000001080)=0x6e)
openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x8000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x4}, 0x1c)
r2 = dup2(r1, 0xffffffffffffffff)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
r3 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/relabel\x00', 0x2, 0x0)
sendfile64(r1, r3, &(0x7f0000001040)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x312)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  858.406088] binder: release 29906:29946 transaction 2137 out, still active
[  858.439202] binder: undelivered TRANSACTION_COMPLETE
03:20:42 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x4405, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000001040)='veth0\x00')
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001000)='trusted.overlay.upper\x00', &(0x7f0000001280)={0x0, 0xfb, 0xe8, 0x4, 0x2, "67dd856c9f6d5269a49a9d6f44997fd6", "55621bc9060ae3223262b8f7c9d4b544d0bf9ad52917e77edcf341d6f80e0db6ee4d7f70f568b1fdff0d9f749ea13e7809cdc0691d0d3f6ca2718a89d01b8439330b4ed0c51b9c103c027029223a98e5026af52da4ac7b8cd4e8cf7b6d14aaf17bedcb6caeee2ff8aeb5a3ae09af479b120be1ce2c28ca5da5ff689c96313d10fd90ef8658af53649864c93647d68dd30f65c91eea0a470e97d6657eb37842da37f331acec63d5e0e0f92b1bce6e28ca4bf6c7ce2a25c9cac32f73ecc03a1f4d7965ea79c82de74d1e7a069decc96a2acf12bd"}, 0xe8, 0x1)

[  858.460418] binder: release 29906:29918 transaction 2137 in, still active
[  858.476184] binder: send failed reply for transaction 2137, target dead
[  858.499569] binder: send failed reply for transaction 2138, target dead
[  858.531162] binder_alloc: 29954: binder_alloc_buf size 2334107846935104584 failed, no address space
[  858.543681] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  858.559994] binder: undelivered TRANSACTION_ERROR: 29189
[  858.571938] binder: undelivered TRANSACTION_ERROR: 29189
[  858.576396] binder: 29954:29967 transaction failed 29201/-28, size 0-0 line 3137
03:20:42 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x69, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="116348b3cf7180cc8f3d9e1755ea6ebc38802240f9a8acd8070a0d1d0349828f4dd237804902df3ea9b1468c230972d379de0355b41ca13cc08c1534fe8b364ad297551aa2be0c9863c9c137cbf1505166594941cf674ca0e727453f313f1be20c96b55a382065cb0da6d84338e61f53c809a552ad1ff030fe810c06ee1bc8f4e2c3968128a2c5839c0e9eaafdd4513a0d5f38994089eeaee695fc7e2f55a03e918f3aafa812583b327340597614e02374eeb9a9899feba2c98ac0a003b4e07f8eafa1fec7a35dad917afb682104a0434e1d2185bccc258d7717d0f2d4e61c"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendfile(r4, r5, &(0x7f0000000000)=0x757, 0x200)
ioctl$TIOCSBRK(r3, 0x5427)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:42 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x8000, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000001000)={0xc, 0x2, 0x5})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r2 = accept4(r1, &(0x7f0000001040)=@tipc, &(0x7f0000001100)=0x80, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r7})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r7, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f0000003980)=ANY=[@ANYBLOB="30100000070100000400000055535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041dd2a73bae3bd7b9edc35b08c75b61a4eebe36bbb04443557345"], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001140)={r7, @multicast1, @empty}, 0xc)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001000)=""/4)
pipe(&(0x7f00000025c0))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:42 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:42 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000340)=[@register_looper, @increfs={0x40046304, 0x2}, @register_looper], 0xfce1, 0x0, &(0x7f0000000700)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a30cd92bd966aea3e7e027d8c37cc3a61eac4a9ebfe72a9b2d2d918bbc472bcef81e930ee2393e2839095a25c79c2551e2ddc37a1a620bc21b7529bd429c4ab8626cc87822f84b59dff6e2d8e181e71d9be4a8c605671afca281a6d77eb8ace55"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  858.637796] binder: release 29931:29944 transaction 2142 out, still active
[  858.694132] binder: undelivered TRANSACTION_COMPLETE
03:20:42 executing program 3:
syz_open_procfs(0x0, &(0x7f0000001000)='fdinfo/3\x00')
r0 = syz_open_dev$mice(&(0x7f0000001080)='/dev/input/mice\x00', 0x0, 0x10000)
write$P9_RLOCK(r0, &(0x7f0000001040)={0x8, 0x35, 0x2, 0x3}, 0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000001380)=""/122, 0x7a}], 0x1)

[  858.732234] binder: release 29931:29972 transaction 2142 in, still active
03:20:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000001080)={0xa, 0x5e22, 0x0, @mcast2, 0xfffffffd}, 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001040)=<r4=>0x0)
getpgid(r4)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x200)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$getownex(r1, 0x10, &(0x7f0000001000)={0x0, <r5=>0x0})
sched_getscheduler(r5)

[  858.784642] binder: BINDER_SET_CONTEXT_MGR already set
03:20:42 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)

[  858.814208] binder: 29984:29999 unknown command -1287101679
[  858.815642] binder: send failed reply for transaction 2142, target dead
[  858.835798] binder: 29984:29999 ioctl c0306201 20000600 returned -22
[  858.840411] binder: undelivered TRANSACTION_ERROR: 29201
[  858.840561] binder: 29990:29995 ioctl 40046207 0 returned -16
[  858.854064] binder: 29990:30002 transaction failed 29189/-22, size 0-0 line 3014
03:20:42 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:42 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xffeb)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001000)='bcsh0\x00', 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
socket(0x11, 0x6, 0x2)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000007300)='/selinux/enforce\x00', 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001100)=@get={0x1, &(0x7f0000001040)=""/109, 0x3})
ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000007340))
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)

03:20:42 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/uts\x00')
ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001040)=0x5)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:42 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001280)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080100000004000000000000000500400000000000b3000000000000000300000000000000000000000000000000000000000000000000000000000000ffffff7f010000000900000000000000ff010000000000000700000000000000ff7f00000000000000000000000000000000000000000000000000000a259916018efb7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b70854b989f3933b63e800"/320])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f0000001000)=""/146, 0xf7}], 0x2000000000000066)

[  859.525053] binder: release 29984:30008 transaction 2145 out, still active
[  859.532332] binder: BINDER_SET_CONTEXT_MGR already set
[  859.541999] binder: 29984:29999 ioctl 40046207 0 returned -16
[  859.548496] binder: undelivered TRANSACTION_COMPLETE
[  859.554150] binder: release 29984:29992 transaction 2145 in, still active
[  859.561389] binder: send failed reply for transaction 2145, target dead
[  859.568531] binder: undelivered TRANSACTION_ERROR: 29189
[  859.599998] binder: 29984:30008 transaction failed 29189/-22, size 0-0 line 3014
[  859.604286] binder_alloc: 29990: binder_alloc_buf size -26090282341205856 failed, no address space
[  859.604294] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  859.604340] binder: 29990:30028 transaction failed 29201/-28, size 0-0 line 3137
[  859.626564] binder: undelivered TRANSACTION_ERROR: 29201
03:20:43 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = epoll_create1(0x6f6184a97f0119a5)
fcntl$setsig(r1, 0xa, 0x29)
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:43 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$evdev(r1, &(0x7f00000002c0), 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f0000001000), 0x20000000000003bc)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000000)={0x10000, 0x1b, 0x2, 0x2, 0xa, [{0xcc3c, 0x80000000, 0x100000001, 0x0, 0x0, 0x800}, {0x5, 0x8000, 0x7, 0x0, 0x0, 0x4}, {0x100, 0x33a3, 0x100000001, 0x0, 0x0, 0x800}, {0x6, 0x6, 0x2, 0x0, 0x0, 0x500}, {0x9, 0x7, 0x0, 0x0, 0x0, 0x400}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x2000}, {0x6, 0x5, 0x2, 0x0, 0x0, 0x6089}, {0x101, 0x60, 0xffffffffffff8f38, 0x0, 0x0, 0x1801}, {0x8, 0x1f, 0x2, 0x0, 0x0, 0x402}, {0x401, 0x3f0d, 0x4, 0x0, 0x0, 0x1900}]})

03:20:43 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:43 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e21, @rand_addr=0x7}, {0x6, @random="e08a827b1a97"}, 0x12, {0x2, 0x4e23, @multicast2}, 'veth1\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:43 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = perf_event_open(&(0x7f0000001280)={0x4, 0x70, 0x6, 0x1, 0x7f, 0x2, 0x0, 0xa300000000000000, 0x10000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x854d, 0x0, @perf_bp={&(0x7f0000001140), 0x2}, 0x5ef9a8997eda7d3e, 0x0, 0x6, 0x7, 0x3, 0x7, 0xd110}, 0x0, 0x2, 0xffffffffffffffff, 0x2)
r2 = perf_event_open$cgroup(&(0x7f0000001040)={0x23917ff1bd4f6207, 0x70, 0xfb, 0x80, 0x0, 0x6, 0x0, 0x6, 0x2062, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000001000)}, 0x4004, 0x5, 0x1f, 0x5, 0x6, 0x7, 0x192d}, r0, 0x0, r1, 0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00')
mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r8 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r8, &(0x7f0000000280)='./file0\x00')
mkdirat(r8, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r8, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r9 = syz_open_procfs$namespace(0x0, &(0x7f0000001480)='ns/pid\x00')
r10 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r10, &(0x7f0000000280)='./file0\x00')
mkdirat(r10, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r10, &(0x7f00000001c0)='./file0\x00', r10, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r11 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r11, &(0x7f0000000280)='./file0\x00')
mkdirat(r11, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r11, &(0x7f00000001c0)='./file0\x00', r11, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r12 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000013c0)='./file0\x00', r12, &(0x7f0000000280)='./file1\x00')
mkdirat(r12, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r12, &(0x7f00000001c0)='./file0\x00', r12, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r13 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r13, &(0x7f0000000280)='./file0\x00')
mkdirat(r13, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r13, &(0x7f00000001c0)='./file0\x00', r13, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r14 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r14, &(0x7f0000000280)='./file0\x00')
mkdirat(r14, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r14, &(0x7f00000001c0)='./file0\x00', r14, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r15 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r15, &(0x7f0000000280)='./file0\x00')
mkdirat(r15, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r15, &(0x7f00000001c0)='./file0\x00', r15, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r16 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r16, &(0x7f0000000280)='./file0\x00')
mkdirat(r16, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r16, &(0x7f00000001c0)='./file0\x00', r16, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r17 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r17, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r17, &(0x7f00000001c0)='./file0\x00', r17, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r18 = dup3(0xffffffffffffffff, r1, 0x180000)
r19 = gettid()
r20 = gettid()
rt_tgsigqueueinfo(0x0, r20, 0x0, 0x0)
r21 = gettid()
rt_tgsigqueueinfo(0x0, r21, 0x0, 0x0)
rt_tgsigqueueinfo(0x0, r21, 0x29, 0x0)
r22 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r23=>0x0}, 0x0)
r24 = getegid()
setregid(r23, r24)
r25 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r25, &(0x7f0000000280)='./file0\x00')
mkdirat(r25, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r25, &(0x7f00000001c0)='./file0\x00', r25, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r26 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r26, &(0x7f0000000280)='./file0\x00')
mkdirat(r26, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r26, &(0x7f00000001c0)='./file0\x00', r26, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r27 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r27, &(0x7f0000000280)='./file0\x00')
mkdirat(r27, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r27, &(0x7f00000001c0)='./file0\x00', r27, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r28 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r28, &(0x7f0000000280)='./file0\x00')
mkdirat(r28, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r28, &(0x7f00000001c0)='./file0\x00', r28, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r29 = syz_open_dev$evdev(&(0x7f0000002680)='/dev/input/event#\x00', 0x1, 0x50b001)
r30 = openat$tun(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/net/tun\x00', 0x1080, 0x0)
r31 = getpgid(0xffffffffffffffff)
r32 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r32, &(0x7f0000000280)='./file0\x00')
mkdirat(r32, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r32, &(0x7f00000001c0)='./file0\x00', r32, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fstat(r32, &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, <r33=>0x0})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000003cc0)=<r34=>0x0)
r35 = geteuid()
r36 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r35, r36)
getresgid(&(0x7f0000003d00), &(0x7f0000003d40), &(0x7f0000003d80)=<r37=>0x0)
r38 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r38, &(0x7f0000000280)='./file0\x00')
mkdirat(r38, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r38, &(0x7f00000001c0)='./file0\x00', r38, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r39 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r39, &(0x7f0000000280)='./file0\x00')
mkdirat(r39, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r39, &(0x7f00000001c0)='./file0\x00', r39, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r40 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000003dc0)='/selinux/relabel\x00', 0x2, 0x0)
r41 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r41, &(0x7f0000000280)='./file0\x00')
mkdirat(r41, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r41, &(0x7f00000001c0)='./file0\x00', r41, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r42 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r42, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e00000010000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400"/268], 0xffeb)
ioctl$sock_SIOCGPGRP(r42, 0x8904, &(0x7f00000042c0)=<r43=>0x0)
r44 = geteuid()
r45 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r44, r45)
r46 = gettid()
rt_tgsigqueueinfo(0x0, r46, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004540)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r47=>0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000004640)=0xe8)
r48 = getgid()
sendmmsg$unix(r2, &(0x7f0000006c00)=[{&(0x7f0000001300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000001180)="f4", 0x1}], 0x1, &(0x7f00000014c0)=[@rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, r2, r7, r8]}}, @rights={{0x20, 0x1, 0x1, [r9, r2, r10, r1, r11]}}, @rights={{0x28, 0x1, 0x1, [r12, r0, r13, 0xffffffffffffffff, r14, r2, r15]}}, @rights={{0x20, 0x1, 0x1, [r16, r17, 0xffffffffffffffff, r18, r2]}}, @cred={{0x18, 0x1, 0x2, {r19, 0xffffffffffffffff, r24}}}], 0xb0, 0x10}, {&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, &(0x7f0000002700)=[@rights={{0x1c, 0x1, 0x1, [r2, r25, r26, r27]}}, @rights={{0x24, 0x1, 0x1, [r28, r29, r2, r30, 0xffffffffffffffff, r2]}}], 0x40, 0x8000}, {&(0x7f0000002740)=@file={0x9f80d68d8420b69d, './file0\x00'}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)="db9a08eae42e87b9b1c50608846285bc46066c86520160504f98a53a81dfacff47cb21589540456e083961f6e9c8479ba3ed872edd2242fe2ad4b98340aa3eab10d63739ad2ed1531a4565d82b47912a7b6f1d5be67786d919ff664f9ed166c26028a48962d0b9481bbc4f5842bb72ad5d94e601e95ed1197d555fa3715f77aa76fb46ea919c6abb24145d34494658a6c645a7d794321b4da0624363cf45390c397a36f5d0170f95f883f952b4b2745670d38b78988276b6a9f629cb42dc968eebdfa0b932e4e7d9b5bcfc6db17ccd3cf321f8e38269c13ddcb1a8940056ced8f457555cbcc31b63f4ae5df1d6ed4faeac60f6", 0xf3}], 0x1, 0x0, 0x0, 0x80}, {&(0x7f0000002900)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002980)="6ad8a05fc6f5808b9e2da072f828a519ddcaf698838efcb96f2cecfb5b03eb2b8f9e6c1a2f2bd845edceb2182b0f7a5965e639ef314a9cbc629df55baf5f999a2f9c7de5f3e045b1c997ee85d73b99eeb60cfee06a68d8e5b013eba8013253781621787133684d27438540d5f14aa796c6bfa3df7add2878fee2fa6e8736c068595258fc27dd149ce80568de24fac5e30d4dcafc11786fa8b18900dfaf4aaf86f7b3314abab88785957b6128d7408c1a7f673edd5b1cdb1d3f56eec7f1329798656c2caecf25642687a06835a2988d44b8400799247ac1dc", 0xd8}, {&(0x7f0000002a80)="1d1e0f84b84c0911516e20a927fd06e2aa81f0519cc34eacba81272cb614a290123c1b66bd151ce8784c1b1525c38d3d93f3e2fc4d2aa9153a61ed20f46b74", 0x3f}, {&(0x7f0000002ac0)="d66a6c708a983784b1b51d31904b9d3490e77c67191e79a71647fa5a41b903f97db1c44e5b9571b8b2e284b1499b8216e459b54c9e6e70c08de83095f81ea7379c41a1721892ba2670d55e38b1733cf799d88ef9f5cd77b9fe89a5bc83caaedd2aab9e7f8e063e826765575620", 0x6d}, {&(0x7f0000002b40)="5cf044a80491030cfe144d4916d6bbf869609d0f54dff4778095cb8e2910d9f9afb0fe25c819f4aae35c11e86534a944938fe55d3ad9ec3bf003dc069e28084446913a09c5e3d625cb6c4fb7240a245ab7f5c28eff98ae5f6922987167978cbd8052e88892431e8ae9579ff8141677a204e9a35175c3032a55b3a44e971946bc334531fff1b277642bbbce57a7751748b0df69ffa676522d", 0x98}, {&(0x7f0000002c00)="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", 0x1000}], 0x5, &(0x7f0000003e00)=[@cred={{0x18, 0x1, 0x2, {r31, r33, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r34, r35, r37}}}, @rights={{0x14, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r38, r0]}}, @rights={{0x14, 0x1, 0x1, [r39, r1]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x20, 0x1, 0x1, [r40, 0xffffffffffffffff, r41, 0xffffffffffffffff, r2]}}], 0x9c, 0x44}, {&(0x7f0000003ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003f40)="9a4cde7f6d07b049e9bf8e791d8ef3e62db030eaceaeb8620db511", 0x1b}, {&(0x7f0000003f80)="0b49503f10a2579e10dc820aa2136c59241c9b9fabbd5a4ab7ac4e8f1cb0f14e0cae52f3f43d8473a8bd902827cda16851dbddfb3d33772b5e14e836b90b4964b1dd251c38e67f8dbcd840289d21120f27d09a9befaa39fb7d7dd853be0522a6276044dfb9f2b1bd8a83328ea7866b7331b153d35c4c01254e5cb951222eb32cf60254dbfb2dd4940167c5ce6be63d21e6649bccacd151ae19b2a21d933d89de176333a2ee80ed4b19def8df63c989336413e639882938233c3612337e59fe8e5082bdacb6656b0457", 0xc9}, {&(0x7f0000004080)="ccb4b76209432d110155e3e09f4bbd5a7f0b392e50cbaa03abbfd9008774c26298649bfb82b98764694fdd69bcce22afa1e75da8034244ac12e66e5e815022307e26fff867a264fe9b422ca227b20d055a68fde870c2d3543e781aa5af88a3a1e85a17b4660c0ca587c0fd821c93dc02e15f", 0x72}, {&(0x7f0000004100)="1a1ba5d13cc3a047a00932c76added7edba60c7738854552b42afdb9f5edb89e59ff472c59cb2941615baf0e41480593ea8f77f32d6b6cac37832f79b2ed458491addc2acaaa5ab1832e7ed1c1ac2fa7befaab39e61f11bc24a258022de8709cc4c0b45c4cee4c19ab75cdf12eb52a03e0e58257e63b1bfcd65549c301d18735734e9a92112cb9366bbfb4f90eb6aee905d39bc5203214497f5d07e29586c766975f37ca6a2469e37cf5278a14a2bed0b956d4e98e8dd67a4ef95826e432037a6a6a670404ae8046a2567be1c74606571f4ed75a2a8e47baded22f883c88d6ec4b9722959c4f56cfa0cd62243a", 0xed}, {&(0x7f0000004200)="48fdfb1a76fb865f9ba6a6f94af190cf0159ea24f5c8aecc06536a7bfeed87291bcb4b90a0eb7b0254551b4be334e836ce1ab7aecfd69621d4becc11254e12d539f8ab0586a482d68ff17860ff9054b3e5de83b577a1142a3d5faafc1a1a3e", 0x5f}], 0x5, &(0x7f0000004300)=[@cred={{0x18, 0x1, 0x2, {r43, r44, 0xffffffffffffffff}}}], 0x18, 0x40}, {&(0x7f0000004340)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004500)=[{&(0x7f00000043c0)="7d3918e899af5f674be94334d308ef96b5f4e328297e089ca9ce323c6bd371249cf992a458a4eb54ac45c5e82ce0ecf28c3bd2db142d5a1277a815450dec4d6c47cce8530a7aa7526312e91eeb3a7ef955fed996254169ec5ae4996cf4546d99733d15ee77c6bb5d887bf121cf612d124a25b48c2a32237fb6cc32b49d1648a08ce4d2bf701c2f1109a1922d19ab9e6453d0093097fe76e1019436df9a9c9de459b66f24ea", 0xa5}, {&(0x7f0000004480)="6425944755b86a7cec06f300976a7771ed49e6e5f6039cb59c64e668647e2e6b6bd35d", 0x23}, {&(0x7f00000044c0)="e4d10b94c651e255a9dadd", 0xb}], 0x3, &(0x7f0000004680)=[@cred={{0x18, 0x1, 0x2, {r46, r47, r48}}}], 0x18, 0x4000000}, {&(0x7f00000046c0)=@abs={0x3, 0x0, 0x4e24}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000004740)="a285d653ce2d5a0993812777d62b234e21b2f5ea8ad2d47384bf71878b413a60f59043f0481570f7afbb8cc51d6399f07ab11b1a2d6ce53e5b5cabc74ff68af5a89c1018bbaaccad32671ae211b6f57029210c56bba6a86352ea8ff4decab5dbd9497ea8407d31044dd5b9312d65ec0e409f302ab6a8805d21e23435faa414dd0e5b5574c111e30c240f030ea2a2eb26d060aa1e9cddf76b670872c124e98e110b8d7297faa75be560a2a11e55c767436256aeeaf59ee20b1ddd0b2693b0d2aa64d5b1233415d6b982396812039cc4c0bd38505d", 0xd4}, {&(0x7f0000004840)="78ec1e37bce98c688958b2eaed535b5bc95b594a6a670a14a7bd61bb3c605dc2083cb97aeead9c6760b6d035eddb0f762208de30", 0x34}, {&(0x7f0000004880)="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", 0x1000}], 0x3, 0x0, 0x0, 0x400}, {&(0x7f00000058c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000005940)="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", 0x1000}, {&(0x7f0000006940)="1fe30d02e863b3a28b1940c8bab886075ca4751289ce7163306e2e036865013740d6fc7ac2222cb414b8b4ed39f822befbc8cffb160c09054452167d9b3ba0fa16239c119ddae765e56cd1cb3d318403837efd928ebd038c4c55b67daefd547d44b5b53a7d8bc30391e17889", 0x6c}, {&(0x7f00000069c0)="1afd3099918e5dc4d4a3dd7e0d9103fccb216feb5f13349d1b9a44f2696f13c11a87a3d590dd86dfa2c648fb3369eeb430ded20e9e25c6efef216e4aae61b68b8ece94fd9cd2d3ef52f5eef1600ad3f7667c50ce2ccd8bd55af1a0baf781525f0a44f9ead0e742d7e87f5879f5dc009dc9735b2a1e522ffd7b7dd74ece165b1ff9ff2f0a8ea85a24ef2684acd244", 0x8e}, {&(0x7f0000006a80)="39b1db9708bde59e715ac1b2453a7362276d37e0f91741cc826d4034f1e552fa9c8a67b02d42b372e5359a8edafed4258c42fb7be13c7600e6a29e8ebed05e7c32da71ee477b6ff652ce67675469f2cd1f337c53122c20c7624a156fe4f0d8f69877f65d9150752c3bc06deb06bd710d5b0e0c", 0x73}, {&(0x7f0000006b00)="05a3f24649dd0f2d369b2b0e57d0a663f7cf2a2b267252893a576e8a7e93bf17060fd144b6976ed7c309302368dca3541d288870974b3b7c8a99d3", 0x3b}, {&(0x7f0000006b40)}, {&(0x7f0000006b80)="ba121d55f44177368c30242677a68ca360045e7fd18cc4592316df30c61e6cb391a27e", 0x23}], 0x7, 0x0, 0x0, 0x2000010}], 0x8, 0x80)
r49 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r49, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  859.652283] binder: undelivered TRANSACTION_ERROR: 29189
03:20:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
pipe(&(0x7f0000001000))

03:20:43 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xd1}], 0x20000000000003bc)

[  859.793967] binder: 30035:30047 got new transaction with bad transaction stack, transaction 2151 has target 30035:30040
[  859.809038] binder: 30038:30048 got new transaction with bad transaction stack, transaction 2152 has target 30038:30042
[  859.827660] binder: 30038:30048 transaction failed 29201/-71, size 0-0 line 3041
[  859.836132] binder: 30035:30047 transaction failed 29201/-71, size 0-0 line 3041
03:20:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001080)={0x1, &(0x7f0000001040)=[{0x3ff, 0x1f, 0x80, 0x662b}]})
connect$inet6(r1, &(0x7f0000000080), 0x1c)
dup2(r1, r1)
recvfrom$inet6(r1, &(0x7f0000001000)=""/7, 0x7, 0x10000, 0x0, 0x0)

03:20:43 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:43 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001000)={0x18, 0xf, 0x2, {{0x10, 0x1, 0x1}, 0x101}}, 0x18)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:43 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = geteuid()
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r1, r2)
setfsuid(r1)

03:20:43 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f00000010c0), 0x0)

[  860.482113] binder: release 30035:30047 transaction 2151 out, still active
[  860.489894] binder: BINDER_SET_CONTEXT_MGR already set
[  860.489932] binder: undelivered TRANSACTION_COMPLETE
[  860.489947] binder: undelivered TRANSACTION_ERROR: 29201
[  860.507464] binder: BINDER_SET_CONTEXT_MGR already set
[  860.512652] binder: 30035:30054 ioctl 40046207 0 returned -16
[  860.523495] binder: release 30035:30040 transaction 2151 in, still active
[  860.530557] binder: send failed reply for transaction 2151, target dead
[  860.542068] binder: 30038:30079 ioctl 40046207 0 returned -16
[  860.548397] binder: release 30038:30048 transaction 2152 out, still active
[  860.556182] binder: undelivered TRANSACTION_COMPLETE
[  860.560167] binder: 30035:30080 transaction failed 29189/-22, size 0-0 line 3014
[  860.569276] binder: undelivered TRANSACTION_ERROR: 29201
[  860.574896] binder: undelivered TRANSACTION_ERROR: 29189
03:20:44 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
openat$cgroup_int(r5, &(0x7f0000000200)='rdma.max\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000140)='D'})
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000001c0)=0x8, 0x4)
r6 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00001000"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:44 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
sendmsg(r1, &(0x7f0000002b40)={&(0x7f0000001040)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001280)="2c8d1b4e60c452c56108c96a046efe2273a74b490b8d49ebbdc6e71a83af7335014703e10cd7bcc8fe79b3c464a54805f798e16013c929356df2f2e7293f1d479dba687b0d5f2ae0f1329199e50d13479cbf4817ff1f44bb0d4db03b16d85e80884063923523a021a5b782f54c7c28cdbc1412b6376a39915d9737741abbbfb7c337de3c4d9a8e7edd3204e7e41c6f7f8a543f3740dc73100fce43848f9f8ffb51cd681ef89913b737a5dd4ee040383aa365f1cd69d8a92f34b458689b28e3ec655c987747b0a5b16da4828cb61d20", 0xcf}, {&(0x7f0000001100)="48fa611629ce7034e15e748491586d82c221cc5847e97bc843836e91a3062cf431d007aff55fa43cb345ffaeb27b8eb379b64f2a6577658ce35a84babeb3435a78433ea42da12763117138d7a8384aaacc09eec695af", 0x56}, {&(0x7f0000001380)="2ae5c601db36eeda855a459787292c391498086a456f2412d699a6a570307329b58cc017f6aa8712ffe4a166defbf186a79a5cd2de8d8c1ca0b70381fd15db38dd8dbfb59370ff598f2b975d0adc03d517e08fed28f6e2c987d38f804b01e3359ee04fdd31b3112a780c5b74e2c3a5f9d261596c7622ebd11a707d7b5074b72371e2ffcde8318f5af56584f47c29b68e506c412385e2df9484c4cc620ee0e77d92b417ec12ac1b476b7b7822eb7738ae0cc07df76694a8a62b5f1580cf151e5a283861c667b3d1277bd6c5b50efef3cecca1111c46c7fe5c0ff034f8c783873aeb0385851d7a2e8417507e24e94046c05c0968dc409bcd", 0xf7}, {&(0x7f0000001180)="d37a4404bcb1", 0x6}, {&(0x7f0000001480)="9df82872edf74833487ac915a0870b501d077dcd1ba74aa8b1a2de", 0x1b}, {&(0x7f00000014c0)="69127c48936d89a21a0bf5207a37d773e5ca904484c5d673c33766c7e6c45c8b15987f4586d8d5282d00ee3fc3fdf6bb8d00f4b7db73e06566e85f5c848fc83abc2895e5c0d743dc50fdc4ee3df3cb5fddfe967bec1b8d38d7363b6614543edfdf74a009356a02d139b438889e25f23a4a418055299421901805a69933ababdacc940ee09af495cbeefe5ebfa5185c984e74ceaf498a5795050af7001d7c20922830fc81bbd4e0e607d226909d58a2eac8c75d18341cef2014ea7decb3dc42ae", 0xc0}, {&(0x7f0000001580)="bfacb8ccc6e79a632c7bdcf0d614e772ea7a12a5ccc7f630918dc2d3767929b32097e3c764e030a2eb79e51a2660c5730a7aea94ba4f901cc3430d980e19ae5749fbaf9e2256400756df9162", 0x4c}, {&(0x7f0000001600)="8e0bfb0d24d8cd80825bac5d925c2da47dd39ffc091418f1d88d2b", 0x1b}, {&(0x7f0000001640)="63bdd1c9f053e2c3efc3b014a3bb27dc818fdc2ba5b5f83babfd708889bea46042266d040ad3aedd83f66df56267a8571ff5f54103ff1b72da3e1536589bfbd93cb2532d95520ab9d4bbb24e64d6027ff9ffd4f15582244d277610829d09c28b6ababd05c3637c695b6f4a5fa3dbb63de72ba681c1740264f07aedbaa5164e81eb95a71e6d8cee506483239a47c1ca85ea95b08e", 0x94}], 0x9, &(0x7f0000001780)=[{0x100c, 0x0, 0xfff, "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"}, {0x74, 0x119, 0x7, "4970f53a05f987be0e3b0ad5bcd99b59d2e53bad9d1b04b0980fe0280d60bf0ec8771cbab04a05b8a4473cc29fadd45d5b2df91ca23f3d86d0d59ecf0762292d396051bb4cf543190f2aef3c074d8c6468806f274dc549f3dce16977fb5ec9430b54cd99cb"}, {0x10, 0x84, 0x3, "0673"}, {0x10, 0x1, 0x4, '-'}, {0x10, 0x22d7fe80dfc9b191, 0x1, "a5cefe"}, {0x38, 0x117, 0x1, "a1244aaf2cebb2581c2e0796b5bf92eb092fd0c962577a6c022a4e674bbe9b29e2aa12c24b03f7c1ea39f9"}, {0xb8, 0x107, 0x0, "662d0138509cdfb17856244b92aa941137a1c989df7d2ed1b85aac8d698e315ec556b6067b830d57b032b7320fca02f86962d002398d132b33b6916098206799bc8ea48340088431d708c489077aaab80705ff06358c5c67fb4ea3daa9b70558e7be3bdeee6ad945257c021dc448acf4cbddeae80c34a2df95658f3ec9f843c4aa51fcf2df4336979a27c0c1d762b5a049300c7326828aca578deb85482c51bea2736c6941421a9c382d"}, {0xf0, 0x3a, 0x5, "490032d26e725b97eada37577a48bc4b214118fa4eb09521cb7c96e6c566569e97ebba2cb922769631f74409429a3aea008249ebf0947bfede82e2b00effef3b7bdae937514237120235686e0992b9d357dc488acb9eea5b4007a0c3d0b18302338766b49e092ed3150f2436a9261105b8403115baaeabc9fd1dae1d8c59b357bd468eb2d51367af13ce2af75d3ea95f4fbea5c34dee5b76ebee86f0023405c3da8fe506b0555046a5b2a29735c5d2c069ad22396536f87d27abf8551dd00e74c99f1a9316593a926a7aee003e6b75eb74cce35c1b8d6f0d9eaeee872af4c2f22de53c"}, {0x108, 0x102, 0x7, "1c164721c39e8e7aef9ccbae558c11cd6bea8923f18d2055dc7531db6b91c5594c09bbffeb406f583e47fa67f23d6185b4a80e066e365b145eda845dd2ca224b2ee7c6c5e4b0041f9604df0d2d550e4d4eee0784cbefc4f8660fdbc06f14e4b681bef59747b7bd4d0d6e383f30c3efbe8a256739aff2908e716ce9ae2367283d79afe7da819d9156c353de0001c27c53d72da8ba78d31d1fe97e742b55971a20b6a71ba27ce2b7957f2529fa17c5ebe296389dc9fd729bd2c6e633e36699ed1d046c555fb9415d5cd4a1e2f03ac4da38fe4eb13e977fdb9311c4610b580abdabd4d78af7d6f7cbc5cd8b4a5c6d7358620f6eaf7988f81612ac"}, {0x10, 0x113, 0x6, "fab1"}], 0x13a8}, 0x575a5e325e932fd6)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$setstatus(r2, 0x4, 0x6000)

03:20:44 executing program 3:
r0 = creat(&(0x7f0000001080)='./file0\x00', 0x8)
mkdirat(r0, &(0x7f0000001100)='./file1\x00', 0x1)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x200, 0x0)
fchmodat(r1, &(0x7f0000001040)='./file0\x00', 0x40)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:44 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:44 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000240)=0x656, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0xfff, 0x4)
sendto$inet(r1, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150)
shutdown(r1, 0x1)
setsockopt$inet_tcp_int(r1, 0x6, 0xbced7f3c0380ef0, &(0x7f0000000000)=0x4, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cc463ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  860.585898] binder: release 30038:30042 transaction 2152 in, still active
[  860.593061] binder: send failed reply for transaction 2152, target dead
[  860.601065] binder: 30038:30083 transaction failed 29189/-22, size 0-0 line 3014
[  860.611140] binder: undelivered TRANSACTION_ERROR: 29189
03:20:44 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f00000010c0), 0x0)

03:20:44 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4087}, {&(0x7f00000011c0)=""/140, 0x1c1}], 0x200000000000076b)

[  860.747339] binder: 30094:30096 unknown command 1048576
03:20:44 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write(r1, &(0x7f0000001000)="bd21c812d967ccfc4af9ff520a813d0256571cab4a7b8de1a05bfcc9", 0x1c)

[  860.790806] binder: 30094:30096 ioctl c0306201 20000000 returned -22
[  860.847435] binder: 30094:30096 unknown command 553631744
[  860.855218] binder: 30094:30096 ioctl c0306201 20000180 returned -22
03:20:44 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:44 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
dup2(r2, r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup(r5)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
r6 = openat$cgroup_subtree(r1, &(0x7f0000001000)='cgroup.subtree_control\x00', 0x2, 0x0)
readv(r6, &(0x7f0000001100)=[{&(0x7f0000001040)=""/15}, {&(0x7f0000001280)=""/241}, {&(0x7f0000001380)=""/215}, {&(0x7f0000001080)=""/37}], 0x4ef0740e7d1f437)
munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000)

03:20:44 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
getsockname$inet6(r0, &(0x7f0000001000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001040)=0x1c)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/147, 0x93}], 0x2)

03:20:44 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:44 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
getpeername$inet6(r2, &(0x7f0000001280)={0xa, 0x0, 0x0, @empty}, &(0x7f00000012c0)=0x1c)
getsockname(r0, &(0x7f0000001000)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000001080)=0x80)
setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000001100)=0x2, 0x4)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vga_arbiter\x00', 0x0, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/status\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5)

[  861.451232] binder: release 30087:30091 transaction 2159 out, still active
[  861.461965] binder: undelivered TRANSACTION_COMPLETE
[  861.467961] binder: release 30087:30097 transaction 2160 out, still active
[  861.475516] binder: undelivered TRANSACTION_COMPLETE
[  861.480860] binder: release 30087:30097 transaction 2159 in, still active
[  861.489080] binder: send failed reply for transaction 2159, target dead
[  861.496232] binder: BINDER_SET_CONTEXT_MGR already set
03:20:45 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$setstatus(r2, 0x4, 0x400)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:45 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = gettid()
rt_tgsigqueueinfo(0x0, r1, 0x0, 0x0)
syz_open_procfs(r1, &(0x7f0000001000)='net/ptype\x00')
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:45 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = geteuid()
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
keyctl$get_persistent(0x16, r1, r2)
r4 = geteuid()
r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r4, r5)
add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r5)
keyctl$read(0xb, r2, &(0x7f0000000000)=""/223, 0xdf)
fchdir(r0)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a31b922bea5c4f96914024359307ac7d7dfa073689909ce8b30d69ea1e4a4c56b67097ada83b7ff4b9d6b04c3c7883a2bec2dc394160bebc9c0b4e998a2e694b241ba49a4d310362a8ba268e86f32deda1e3de5eb4b6d9ceccb45773fb42a3e1c272d1d59e82edbaa39fed8876df49c803984aceb3ac652adecc772006db69271a33bbac3a9586f9304c65c602e92a6fbfb5e223c14c2cac9d75ace"], 0x9e)
readv(r0, &(0x7f0000001100)=[{0xfffffffffffffffe}, {&(0x7f0000001000)=""/139, 0xf4}], 0x20000000000003bc)

[  861.502401] binder: send failed reply for transaction 2160, target dead
[  861.509338] binder: 30094:30134 ioctl 40046207 0 returned -16
[  861.519727] binder: 30094:30134 unknown command 1048576
[  861.525548] binder: 30094:30134 ioctl c0306201 20000000 returned -22
[  861.532734] binder: 30094:30134 unknown command 553631744
[  861.538480] binder: 30094:30134 ioctl c0306201 20000180 returned -22
03:20:45 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:45 executing program 3:
readv(0xffffffffffffffff, &(0x7f00000010c0), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20040891}, 0x40)

03:20:45 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b6300f2ffff27ce3fd183000000000000000000"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r2, 0xf833c000)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000000)='./file1/file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR, @ANYRES16=r4, @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRESDEC=r3, @ANYRES64=r5]]], 0x0, 0x0, 0x0})
r6 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/access\x00', 0x2, 0x0)
fgetxattr(r6, &(0x7f0000000340)=@random={'os2.', '/dev/binder#\x00'}, &(0x7f0000000380)=""/102, 0x66)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000800000000000000d9cf5ceb0000000000"], 0x0, 0x0, 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r8, &(0x7f0000000640)="dd07948749769fe7e11ce8b66d3f336abff37f943d9827a981b16e466cc7ffc4b9696943874dc798e58a253536043652e945ceaaa00fe309dc8fe55cfb31503cfc1f1470487a468f88e82b2486d2d087f5ed", 0x52, 0x0, 0x0, 0x0)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c)
r9 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  861.581173] binder: release 30087:30097 transaction 2164 out, still active
03:20:45 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  861.629847] binder: undelivered TRANSACTION_COMPLETE
[  861.661001] binder: release 30087:30101 transaction 2162 out, still active
[  861.673083] binder: 30138:30149 got new transaction with bad transaction stack, transaction 2165 has target 30138:30142
[  861.687282] binder: undelivered TRANSACTION_COMPLETE
[  861.699465] binder: BINDER_SET_CONTEXT_MGR already set
[  861.701737] binder: 30138:30149 transaction failed 29201/-71, size 0-0 line 3041
[  861.713921] binder: release 30087:30097 transaction 2162 in, still active
[  861.723496] binder: 30152:30153 ioctl 40046207 0 returned -16
[  861.730103] binder: send failed reply for transaction 2162, target dead
[  861.754949] binder: send failed reply for transaction 2164, target dead
03:20:45 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:45 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
memfd_create(&(0x7f0000001000)='/dev/zero\x00', 0x778b64d10b2b132d)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000001380)={0xa, 0x0, 0x0, @rand_addr="0000000000001f00"}, 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001040)={{0x5, 0x8, 0xfc4d, 0x5a}, 'syz1\x00', 0x18})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000001140), &(0x7f0000001180)=0x4)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000001040))
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001280)=""/226)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:45 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write(r1, &(0x7f0000001000)="7e28fb25f18f4692e07fee400a602fe9d48ae9c3f3f7d3f765a30aaf267ed3dd7f51fe4197163fba", 0x28)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  861.808354] binder: 30152:30159 unknown command 536872640
[  861.833688] binder: 30152:30159 ioctl c0306201 20000600 returned -22
03:20:45 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
symlinkat(&(0x7f0000001000)='./file0\x00', r1, &(0x7f0000001040)='./file0\x00')

[  861.896571] binder: 30152:30169 transaction failed 29189/-22, size 0-0 line 3014
03:20:45 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000001180)='trusted.overlay.redirect\x00', &(0x7f0000001280)='./file0\x00', 0x8, 0x2)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x28100}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x1c, r2, 0x808, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0xffffffffffffff41}, 0x1, 0x0, 0x0, 0x40}, 0x0)

[  861.938099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30281 sclass=netlink_route_socket
[  861.985952] binder: undelivered TRANSACTION_ERROR: 29189
[  862.371595] binder: release 30138:30149 transaction 2165 out, still active
[  862.380086] binder: undelivered TRANSACTION_COMPLETE
[  862.386691] binder: BINDER_SET_CONTEXT_MGR already set
[  862.393058] binder: undelivered TRANSACTION_ERROR: 29201
[  862.399661] binder: 30138:30189 ioctl 40046207 0 returned -16
[  862.407040] binder: release 30138:30142 transaction 2165 in, still active
[  862.415140] binder: send failed reply for transaction 2165, target dead
[  862.461443] binder: 30138:30190 transaction failed 29189/-22, size 0-0 line 3014
03:20:46 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet(0x10, 0x400008000000002, 0x4)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd31, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956f1583b7e76a28f900000000000000119bb598bc593ab6821148a730de33a49868c62b2ca67529613b6aabf35d4c1cbcc0d318a7910000000004000000000000", 0x111}], 0x1}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0048919b"], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
getitimer(0x1, &(0x7f0000000000))
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000400000000000000000000000000ffffffe10000000000000000000000da20beb9c0d6ba3577545f66f0adcab5d34d"], 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0x13f1b0a2)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0))
getpgrp(0xffffffffffffffff)
ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000001400)})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x0)

03:20:46 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/de\xf6/z\x85ro\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f0000001100), 0x0)

03:20:46 executing program 3:
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/enforce\x00', 0x281100, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000001100)={{0x0, @broadcast, 0x4e24, 0x1, 'dh\x00', 0x20, 0xa0, 0x33}, {@local, 0x4e21, 0x2000, 0x7fff, 0x7, 0x1}}, 0x44)
setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000001000)=@gcm_256={{0x17ab2cde97154b13}, "262375be6f4d6709", "540652aa1ad0ec551bd5c670b31af57684874436bbfcdb1cdde6f4cd5c8f3efe", "0b5ff31d", "c0d8a030dc11967b"}, 0x38)
openat$zero(0xffffffffffffff9c, &(0x7f0000001080)='/dev/zero\x00', 0x206400, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:46 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  862.515744] binder: 30138:30149 transaction failed 29189/-22, size 0-0 line 3014
[  862.523926] binder: undelivered TRANSACTION_ERROR: 29189
[  862.529649] binder: undelivered TRANSACTION_ERROR: 29189
03:20:46 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$binfmt_script(r2, &(0x7f0000001000)={'#! ', './file1/file1', [{0x20, '/dev/zero\x00'}], 0xa, "609c60c67bea9ba42654ba1be9172e6415ae330d73980c4907b63769b36fcbdf524f21e4f2cb277b6a24e6a9afe011fcbf59dc987e3a1e2d69e313998749a626790a5c148e9a54602d4c2efab5cc63042e5fe78bd014404ecb291816fa58fdc39b3d58f022403eab44693182dcbadea7e8864edfbfca87b02518a1d6a8c80441d7d1be3d544554"}, 0xa3)
ftruncate(r1, 0x200)

03:20:46 executing program 0:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCGETS(r2, 0x5401, &(0x7f0000001080))
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001000)=0x100)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dp\xa6X\xdbero\x00', 0x44140, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  862.667716] binder: 30192:30206 got transaction to invalid handle
[  862.677151] binder: 30192:30206 transaction failed 29201/-22, size 6086392497997658558-5608025843112633951 line 3014
[  862.689523] binder: 30201:30208 unknown command -1684977664
[  862.695837] binder: 30201:30208 ioctl c0306201 20000180 returned -22
03:20:46 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:46 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001000), 0x20000000000003bc)

03:20:46 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x5b7c8daa8148806e, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040))
ioctl(r0, 0x6, &(0x7f0000000000)="71e203784e1274be541fc84c43613e67")

03:20:46 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001680)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000004c04000000000000540200000000000068030000680300006803000004000000", @ANYPTR=&(0x7f0000001000)=ANY=[@ANYBLOB='\x00'/60], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000000000000000000000000000000000003f54d155ee8a0000000000000000000000000000e00000010400000000000000e0000001ac1414aaffffff0000000000ffffffffffff0000000000000000000000000000000000007effff000000000000000000000000006d0cd906031a000000000000000000000000000000000000ff0000ff01ff00000000000000000000000500008dce004000050000697036746e6c300000000000000000006e723000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000f00014010000000000000000000000000000000000000000000000000000240041554449540000000000000000000000000000000000000000000000000000000000ac1414bbe0000002ffffffff00000000000000000000000000000000000000000000000000000000000000ffffff00000000000000000000000000000000000000000000000000000000000000000000000001ffff000000000000000000000000080a1300060904ff92000165727370616e3000000000000000000073797a6b616c6c65723100000000000000000000000000000000fe0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000f000140100000000000000000000000000000000000000000000000000002400415544495400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x498)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
symlinkat(&(0x7f0000001080)='./file0\x00', r1, &(0x7f0000001100)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000001040))

03:20:46 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='net/ip_mr_cache\x00')
r2 = syz_genetlink_get_family_id$tipc2(0x0)
r3 = dup(0xffffffffffffffff)
write$UHID_INPUT(r3, &(0x7f0000000180)={0x8, "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", 0x128e}, 0x2d)
write$FUSE_DIRENT(r3, &(0x7f00000014c0)=ANY=[@ANYBLOB="cf0e8b6b68ef3eb8ec893c71112b2488468aab632174334a29f1403f2feb1ef8309ffc69d334a27751964e153968cb4112809b8221270f9c92936913d342651268488d86d655a5e72e5b0b9d88", @ANYRESOCT=r2], 0x17)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001080)={&(0x7f0000001280)={0x20c, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd79}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd71e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19f3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000001540)=""/214)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  863.361754] binder: release 30192:30206 transaction 2172 out, still active
[  863.369475] binder: undelivered TRANSACTION_COMPLETE
[  863.378557] binder: undelivered TRANSACTION_ERROR: 29201
[  863.378620] binder: BINDER_SET_CONTEXT_MGR already set
[  863.378862] binder: 30201:30241 ioctl 40046207 0 returned -16
[  863.392773] binder: BINDER_SET_CONTEXT_MGR already set
[  863.392782] binder: 30192:30215 ioctl 40046207 0 returned -16
03:20:47 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4091, 0x100a}, {&(0x7f0000000000)=""/149, 0xffffffffffffffec}], 0x261)

[  863.393706] binder_alloc: 30192: binder_alloc_buf, no vma
[  863.393751] binder: 30192:30206 transaction failed 29189/-3, size 0-0 line 3137
[  863.394083] binder: 30192:30215 got transaction to invalid handle
[  863.394092] binder: 30192:30215 transaction failed 29201/-22, size 6086392497997658558-5608025843112633951 line 3014
[  863.434519] binder_alloc: 30201: binder_alloc_buf, no vma
[  863.434562] binder: 30201:30242 transaction failed 29189/-3, size 0-0 line 3137
[  863.453337] binder: undelivered TRANSACTION_ERROR: 29189
[  863.466309] binder: release 30201:30208 transaction 2173 out, still active
[  863.483787] binder: undelivered TRANSACTION_COMPLETE
[  863.489859] binder: release 30201:30204 transaction 2173 in, still active
[  863.509547] binder: send failed reply for transaction 2173, target dead
03:20:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
dup2(r2, r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180), 0xfffffffffffffff4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:47 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$P9_RREADLINK(r1, &(0x7f0000001000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write$P9_RVERSION(r2, &(0x7f0000001040)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.u'}, 0x15)

03:20:47 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x800)
getsockname(r2, &(0x7f0000000340)=@rc, &(0x7f00000003c0)=0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:47 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001040)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001280)={0x16c, r1, 0x11, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0xa8e92a59fbff2e1f}, 0x8000004)

[  863.521282] binder: undelivered TRANSACTION_ERROR: 29189
[  863.526919] binder: undelivered TRANSACTION_ERROR: 29201
[  863.532809] binder: release 30192:30199 transaction 2172 in, still active
[  863.539987] binder: send failed reply for transaction 2172, target dead
03:20:47 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001000)=""/144, 0x90)
set_robust_list(&(0x7f0000001280)={&(0x7f0000001100), 0x400, &(0x7f0000001180)={&(0x7f0000001140)}}, 0xc)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

03:20:47 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:20:47 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4101, 0x1005}, {&(0x7f00000011c0)=""/140, 0x1c}], 0x2)

03:20:47 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$keychord(0xffffffffffffff9c, &(0x7f0000001000)='/dev/keychord\x00', 0x40080, 0x0)

03:20:47 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x10000, 0x0)
setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000001040)=@ccm_128={{0x50b}, "6ba8212ad4a5810f", "6f6f47ba4b82461b3bfdb6b694fc03ca", "b9ca0a65", "bdd2cc55dda0b361"}, 0x28)

[  863.702565] binder: 30251:30266 got new transaction with bad transaction stack, transaction 2179 has target 30251:30256
[  863.735084] binder: 30251:30266 transaction failed 29201/-71, size 0-0 line 3041
[  863.781741] binder: 30259:30269 got new transaction with bad transaction stack, transaction 2182 has target 30259:30262
03:20:47 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/140, 0x8c}], 0x2)

[  863.830525] binder: 30259:30269 transaction failed 29201/-71, size 0-0 line 3041
03:20:47 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x1200)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000001000))
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
fstat(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/policy\x00', 0x0, 0x0)
r6 = geteuid()
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r6, r7)
socket$netlink(0x10, 0x3, 0x0)
r8 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r8, &(0x7f0000000280)='./file0\x00')
mkdirat(r8, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r8, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000001480)={0x401, 0x200, 0x1de8, 0x5, 0x1000})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r10=>0x0}, 0x0)
r11 = getegid()
setregid(r10, r11)
fsetxattr$system_posix_acl(r5, &(0x7f00000013c0)='system.posix_acl_access\x00', &(0x7f0000001400)={{}, {0x1, 0x2}, [{0x2, 0x6, r6}], {0x4, 0x4}, [{0x8, 0x2, r10}, {0x8, 0x2, r4}, {0x8, 0x4, r4}, {0x8, 0x4, r4}], {0x10, 0x4}, {0x20, 0x4}}, 0x4c, 0x2)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
getdents(r3, &(0x7f0000001280)=""/173, 0xad)
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000001100)='./file1/file0\x00', 0x2)
fsetxattr$security_smack_transmute(r1, &(0x7f0000001040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000001080)='TRUE', 0x4, 0x2)

[  864.396386] binder: release 30251:30266 transaction 2179 out, still active
[  864.402157] binder: BINDER_SET_CONTEXT_MGR already set
[  864.402169] binder: 30251:30276 ioctl 40046207 0 returned -16
[  864.415749] binder: undelivered TRANSACTION_COMPLETE
[  864.422815] binder: BINDER_SET_CONTEXT_MGR already set
[  864.428312] binder: 30259:30283 ioctl 40046207 0 returned -16
[  864.429049] binder: undelivered TRANSACTION_ERROR: 29201
[  864.429095] binder: release 30259:30269 transaction 2182 out, still active
[  864.429098] binder: undelivered TRANSACTION_COMPLETE
[  864.429112] binder: undelivered TRANSACTION_ERROR: 29201
[  864.429155] binder: release 30259:30262 transaction 2182 in, still active
[  864.429165] binder: send failed reply for transaction 2182, target dead
[  864.435664] binder: release 30251:30256 transaction 2179 in, still active
[  864.435669] binder: send failed reply for transaction 2179, target dead
[  864.449084] binder: 30251:30300 transaction failed 29189/-22, size 0-0 line 3014
03:20:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x20, @mcast2, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0400000bad00000b630000"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="ae7226d3885268d59602cdc47592839701c9f761d21c64710c07dbe196d22ac70000ed94a45e2b9adca7db630d0fecbfb20e920cab8cac8d89fee760c7b912014116ecf536e1bfc992a919f9dc33c99619083dbe2dd110ab75e4ceb57830568b1a664d495135452dfb3c5a5f30d4287b246f2e7c4ffee84efe677bab4035e1360575ad796060b54d3717c96797391598d6137ea23ff8a429a7e15ac59ec4f2b13724eda2f032280f9b72c29d8825853621b9615deb0e4bb7b06cc0f0d09808a6139bed6a12401879b00d46ccb528bbdc82c17bb77ee1ae88ecad5c6eac1af7dee61400070d6d018ff3f00b833e4a368fd364c2c4af96266cdec71798782d7cb1ee3228d166610acd20cb1b04bc490f9b0000"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$security_ima(r3, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xa}, 0x2, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:48 executing program 3:
getcwd(&(0x7f0000000000)=""/250, 0xfa)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001080)=[{&(0x7f0000001000)=""/113, 0xffffffffffffffa4}, {&(0x7f0000001100)=""/156, 0xa6}, {&(0x7f0000001280)=""/185, 0xb9}], 0x3)

03:20:48 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
chroot(&(0x7f0000001080)='./file1/file0\x00')
r3 = dup3(r2, r1, 0x80000)
setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000000c, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r4 = dup2(r1, r1)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/enforce\x00', 0x20000, 0x0)
clock_gettime(0x0, &(0x7f0000001140)={<r7=>0x0, <r8=>0x0})
timerfd_settime(r6, 0x1, &(0x7f0000001180)={{r7, r8+30000000}}, &(0x7f0000001280))
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r9 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0x342)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f0000001000)="9d7677b4b4a492ba4dd6145d91cc497e6c2182c03aed43c87809f17c0487b67756f22f10a92bb8d988d698a28aa13d027b51f15985f2145d27b6c67e432de2a32d0368b57dbdc9b171a9ecb0e57248fe140fafc10560", 0x56)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:48 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:48 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x0)
vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000000)="b328ae10747133588ae2f9b616d9b1a3", 0x10}, {&(0x7f00000000c0)="7d660b0e0c25897d0e349e56c75e2f056f181dba83f440d84d1754338083be21f9368c6562304f7ad2ffd5b42a00ef3c367c28b992524250afe7e59b182da99735dcf2d5f6b13ffbb2fd31ded44332", 0x4f}], 0x2, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  864.449435] binder: 30251:30301 transaction failed 29189/-22, size 0-0 line 3014
[  864.449692] binder: undelivered TRANSACTION_ERROR: 29189
[  864.449710] binder: undelivered TRANSACTION_ERROR: 29189
[  864.471746] binder: 30259:30302 transaction failed 29189/-22, size 0-0 line 3014
[  864.473325] binder: undelivered TRANSACTION_ERROR: 29189
03:20:48 executing program 3:
socket$key(0xf, 0x3, 0x2)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/\xe1\x04\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000001040)={0xa, 0x4e21, 0xfffffffc, @rand_addr="00409f8294f900007b8413bf4d6de2b2", 0x7f}, 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$selinux_attr(r2, &(0x7f0000001080)='system_u:object_r:system_map_t:s0\x00', 0x22)
socket(0xd, 0x6, 0x6)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:48 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  864.623212] binder: 30311:30320 unknown command -752454994
[  864.637383] binder: 30311:30320 ioctl c0306201 20000600 returned -22
03:20:48 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200a4}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="25002cbd7000010000000102000100000000db0000000014001462725b6164636176742d6c696e6b080023d900ced5bee93f6a91a90018e94c8376aa094f9b0a14ac332ce8603769fc7eb1c7f51dc7247c462fd3b2fd072e64891cf6411cf7a344225e820cfb0fa7ca85fefe16dc38e9ac5eb7d7193e4e2841a54597309e2468d3d2931fbebdc616d319d54de0ba4b344cd0f3a8207f92a45da5c14c92dfebe20f5acd6563d5d0e57048ed42a131dfb5cffd66c005dc4f9a48495e92debd03feb50093f756d874ecbcc4d10904b6cf14da746400"/223], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x364eaf51d1ade10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x200, 0x0)
memfd_create(&(0x7f0000001100)='system_u:object_r:fsadm_log_t:s0\x00', 0x1)
fsetxattr$security_selinux(r5, &(0x7f0000001040)='security.selinux\x00', &(0x7f0000001080)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140))

03:20:48 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001680)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000006804000000000000000000004402000084030000840300008403000004000000", @ANYPTR=&(0x7f0000001000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4b4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  864.662891] binder: 30307:30318 got new transaction with bad transaction stack, transaction 2189 has target 30307:30310
[  864.677286] binder: 30307:30318 transaction failed 29201/-71, size 0-0 line 3041
03:20:48 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
sendmsg$key(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001140)={0x2, 0xa, 0x2f, 0x3, 0x2d, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0xeb5, @loopback, 0x8}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, {0x6, 0x8ccbb65c4a38783f, 0xff, 0x80, 0x0, 0x0, 0x0, @in6=@rand_addr="73a64167136c6bad9b49baf02b4d6f4c", @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_sec_ctx={0x12, 0x18, 0x8, 0x1c, 0x86, "de25d38227a99f03ce31fb63063f7372e468610e1836bb6c253b53473a6ff5c0418f3dfbff1247ba404ae868f6ec761cd288fb77c07c4d1acc432d143af4f6349efe3f66fae6f5195920a4daa84787bd615387d6b0194793b8d26e7f1a191ef7f029bfe3d41656528b5b6d89b75174e6840e461a14dafbfbcef4d666993a1959bc5c7f8004db"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bb1, 0x0, {0x6, 0xff, 0x0, 0x1, 0x0, 0x9, 0x0, @in=@multicast1, @in6=@loopback}}]}, 0x168}}, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000001}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000001480))
write$UHID_CREATE2(r2, &(0x7f0000000000)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1000, 0x3, 0x4, 0x240, 0x2, 0x8, "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"}, 0x1118)
readv(r0, &(0x7f00000010c0), 0x0)

[  864.767575] audit: type=1400 audit(1574911248.382:91): avc:  denied  { associate } for  pid=30328 comm="syz-executor.0" name="full" dev="devtmpfs" ino=1033 scontext=system_u:object_r:fsadm_log_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
03:20:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000001040)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)={0x68, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x8004810)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:48 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
sendmsg$key(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x2, 0x9, 0x0, 0x6, 0x10, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x19, 0x80, 0x0, @in6={0xa, 0x4e21, 0x9, @local, 0x1}}, @sadb_address={0x3, 0x7, 0x2b, 0xa0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_lifetime={0x4, 0x2, 0x8, 0xfffffffffffffff9, 0x400, 0xfffffffffffffff8}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x7}]}, 0x80}}, 0x20000)

[  865.362100] binder: release 30307:30318 transaction 2189 out, still active
[  865.370174] binder: undelivered TRANSACTION_COMPLETE
[  865.375479] binder: BINDER_SET_CONTEXT_MGR already set
[  865.380877] binder: 30311:30327 ioctl 40046207 0 returned -16
[  865.388505] binder: BINDER_SET_CONTEXT_MGR already set
[  865.391121] binder: undelivered TRANSACTION_ERROR: 29201
[  865.391179] binder: release 30311:30327 transaction 2191 out, still active
[  865.391181] binder: undelivered TRANSACTION_COMPLETE
[  865.391228] binder: release 30311:30313 transaction 2191 in, still active
[  865.391232] binder: send failed reply for transaction 2191, target dead
[  865.426091] binder: 30307:30359 ioctl 40046207 0 returned -16
[  865.426287] binder: release 30307:30310 transaction 2189 in, still active
[  865.426293] binder: send failed reply for transaction 2189, target dead
[  865.437653] binder: 30311:30360 unknown command -752454994
[  865.437663] binder: 30311:30360 ioctl c0306201 20000600 returned -22
03:20:49 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001000))

03:20:49 executing program 0:
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000001000)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x4, 0x3}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001080)="f5ef2af90b823fdc5219d5ec98d7a4c15765cb7a227f9f2acb059b17f04c8fb523560d9624d279a5a2f9c330886e2559690b1ade0347ee8ecef0", 0x3a}, {&(0x7f0000001100)="6b8278aefb1f2aa0b7cb249d097a89c5e770e20a18851ee0a29065717dee6e46fef058053e56b55818493efb36866784e47a2f2ce06aa7b6e2865c67550f2bfd2004ad61bf808d66d0a0df22f40fb8c9386fe6b167b3b7e9a3e8161479829ef0868dbc03a05eede548632497f5d624ca16577d47c9c6d04b0404e20cc69593debe614457d590513d6a701d652a1f9fc2ee6d414f2a3e", 0x96}], 0x2, &(0x7f00000012c0)=[@mark={{0x10, 0x1, 0x24, 0x8}}, @timestamping={{0x10, 0x1, 0x25, 0x2}}, @timestamping={{0x10, 0x1, 0x25, 0x14c6}}, @txtime={{0x14, 0x1, 0x3d, 0x80000001}}], 0x44}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001340)="2593a68b4c435f8d83bcbe9f6511003e495d4444d987a20668ae3accd76a1177dc744979d04b00000000865549a0d243b6d00e61e307", 0x36}, {&(0x7f0000001380)="76b8a00e7161bdb4843462550e6dae41fae3dc76fd6af2810559d43cb5015f3e075c086f769462f916f8b1a2a9e034e28cc972d1918aab26d815d4cb861fac504a3a8e1a14c2e69be27ef02a1e08b9daefa6b8d35962b17b816a7c0fc52fc75ca431386cf05041fc902de529b16b909fa4da3e98ac21f817a0da0a4fae51cc50f8728aa6ecb84af8ebed0bac5102cec62e80220dcdac06ef5ad54929350120340b02489511a5f9c832e6a9d9820e3ce2dc9e309c07d40627cc27ad307644d19b0d7b98219a96951340beb04407aaf29b6156f68009053bd13ff0b51f19493fe1a6748dfa7c60e46176a4d245bdf4", 0xee}, {&(0x7f0000001480)="1446bd61c4a316bed9738d3efe686167ca0d472ab40a2e15089dba735d31", 0x1e}], 0x3, &(0x7f0000001500)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}, @mark={{0x10, 0x1, 0x24, 0x9}}, @txtime={{0x14, 0x1, 0x3d, 0x1}}, @timestamping={{0x10, 0x1, 0x25, 0x8000}}, @mark={{0x10, 0x1, 0x24, 0xffff}}, @timestamping={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0x5}}], 0x78}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001580)="005dae4811fc5c8f473dc8616480aa75b9e66f0d08c0b7bca9cc6bed16848714d3b9f3eda661275237bb17d5fe87742be68745e904918e59bc855615550cbc8315be847dcf", 0x45}, {&(0x7f0000001680)="e685e7d8faa8b38f2305508ad4e4e7efd05f6fd185dc7ee2386ee462a8693402151a57f64ed697c0a0c172d2e97534990880fc1f19bf3376f09ac64218b21b4d89c6bcae3bed79e42f88f3c3fc45328b6c370ad408c24e74b86cac5bfb6215cbd0641eaf1764701fcf32e3dffe18e28b0301399240870c1ed53f04e9ad1cc9096b91aff2d13ad630682a5144975d5597d5892a589a3b334e4c537d871badaa46eb2cca57af6b22c8743ce0a4a7eb0ec0a1dd312cbf097d139fc403eb4a59c3a52268857d032c99fe2086b3f7e9e33f1360559fac69282998ec71877e7e697d6c40dd2ec0fb8332c90eb6956aeb1054a8579190548bffe6b232438fb45f98f48770b436f8be35409f0fdf30550e59aa4477fc5ab25f195403da5d946a9f96ca82d14f509af08d9559d2de26b8bc0a1baf847f9766bb7e9ef465d2fadec339b6302a366525d18450d21acbd85fef39ab33ee63d00c5c8cb9c9dda11299afb5902a775942b7260b9015a3388eba28a8680425a6ae47e51984a52bd17a78f0a311aabeeaaa12144ec3effa746fa1f18223f1d6933edf69150c723ee3c372df2ef268d793396f60452dceb0a349fe9020e97b86dbe2e970f9ab036fe9cada2107cf6f3745b077eab39f5932b40bc14d0efcd964fbdc12bc0294fb66eb94fa219dee6e2869f25a1fc75a2bc22f5312f29fc102ab4b493a55413cb00a4d4c803a6254ed95abc9f7cb37f070ea4623d70029452c6d1f848c5bbe7b40fcbe2741526be9f181405ebe33098f0dea4a6a9c2b5752734e3c3d671e78a16912c5cccc19e35d536b9b5595ee2fa9847caabbfe70519373b5804bba318e0766909e48a75d0dd892b9d53ccbb40f1cdccf2d2ce67e97a4618ae62ac793a4eec984889b37245dab7e1f7d9cfd1e7cda24669da363ee243d1a2aba0ac3d247c4b489c1b688530dcfacb7934279cce2fa3bfa31a7c0b811ba5f9fe2674231afbae63b5dfe4560a5ecbae0a48bf94de1187a3552c8c8f30393d37070d8f0fef7d17499379eb8de1618686a13eead4d9332fd25b72f2b587734c4f753c28d955216a77e40b76fc09de6ad2f75a2f8a67709b0eceaf2f36b4923f5cbc7d88800494a8f35ee316d31c3cf6894f29d88b8f5bd9bc6afb51025917e494721ecc8e65da27c7f71c9e906a8c393517dfd38ea5041b020a82fb7dd6e8cb5e5fcf0e195d5e1dcc80b5e1b9664d80428ec7809f0722d1745c0f4570107514f8e13889ce50812f73a6497cc7d481a76b0da811a5529fec0a7aa4057423f0d2ffeb7e4577bbc713ff7607c669da555675090e0db48221ade7f6120a6c1ff40bd10889f9e0686acd7dc0dcb5775483b31b8e1998e4ec2c45d1ec91727eec9aa12608fec7013d186434bb0cbb86c04ad51be1b83ed3ec2e6cce808d88f3a0107eefca9f357c3590571e0e92a0e5a4adf0c5731c222d3c321c64ac83e478faa196c89115e13f1527b7899b6c513fb3bb95a3b7b3fc23b9fa27d4340af7e7c2d9c33647105598a4cf023865aaad7ad1400a6b33a7c0c90418865acd384bb89c8ab6fde9ab8537927014bfe6d296a1a325c2261aef3bb188546cc22ebe35e45dc904624ac79d4c76bb22ad56c0246c2eaf9d38fedd1bca57416fd41a500c223cfbc69b3ee419f92f792118673775a3ba09378cb534dd3862441edeab35eecb831180be89c4a12695089ab7dc8097eb39991f9934d5353ae22637b0409f449ee1aaac618e3a92c323c8b49e6ba013b849947ca90fc8c0aecedf6ede0ef14b9dda91fd80cc8df563503766f8d9f902c9c0aadbf823e23c03abd9400a288a9e32014aa7eeebf74f4d18da95c23480e9fed7c64fa10140babf40accb0cb627fb8168f0e2acb146c3dba0d143cb4e1f98d9595960747531f53ecbd4915dbb686024ee2d8f7fa75c7115fa6e807a5634244596f75dae481935fca83d7ed36f06094b33d2827e93936f30463147bba5459142214452538c13531c9840779d98b7d28d8413440f47cb5b81948f1956e0a8e076be7630ee6b0262cf0d4a7b3b9b62b55c8c7557875bb35e2a8680009f948cef550903540f860a53b849667ce6b711f0a8604e9200c1be9385cc1199de09cd5729208905ba099fdfe5531fd33f32611447b92c94581745407c75e2ced4d5c56b15e33117068eca3277950e2f6d1ae45522bdcc8bd4721dc2a47e694710e6ddf1f2c5c466260884ec2b696eac8263b70fc68978fc589fd841e7d7b4d1761961bebbdc4e1cd454e02abffa0d9fc448c70348f9d8492b13aabe2acf12e2aff05c5e04d2def3028bc989bd5806d32cfe4aad2ef72dbfeeb429485b146fc71a4fc035cd06d9863a228fc7293a7e158bc6ad3d542be48a9973e1ac07eb9a88dd384622b3cd8e8e77a708845f9a2ad9d69f2c618d0165641a89e03a053f120a520e220458725e9b62768774e68ef3523f5dca714d1e1d75aed71346da736c13d3b6eb8e2f47fd7790dded88fad72be5b42e05ff9414e714349e23890f5e84283a66b814de40e0a9499ce47da2c084b16a0ac490ee3763ef90cb3fe0d7802fb5fbeda2cf9ecbcd65b0b9a758b4caa62997b02b6cd39d6225e4509b580fe41dfd1822876f596b0621fc21608710b73682e07754ff894dd9ced9524a437ae7610679cd5b90d3e3c5c06d0d5fbe59f41f2d1b2a9e8e5f5f7acddf09cb06a287fdd917bdd84974f546cec13f6ee89907df6c7d424b41aecdf9763780f66b67fa7e39539b6f8686ad8c68ffdb691077ec8cf83435a86b10e15d0e25d4282e7ece1a95300ac371f8746f13bc33cfdce242bdf57968177d482af4cd3f05d5c7cb27d6bef774ef1c9291707101c23a2fdf2aeaf9ac8b896902329bfccf5c396f1d79e082c65d1e8cae1a55c58f46f0f29659d9bfc39d2c04a143a878050ceb1f0432c12445f6fa1999f18b7365ab2ee82a4dfd167d1dee5b2fed5dde277f4d3d24c66474235507448d6c931c3f843070bb2fb74d3f7946cf1875ff5e494161ecfcf3860b68b5d27ae2ca64d04d9384c1d88906ce116e227e4e906faa428adff42cc34b3003e92c815413b590c663e5f6601134703ccebdaec2fde19f6ea97156b04dd95585eef0f72decdacdcb17aba665759a42822aaea8705ee6a78caa8983ef8acf3ce89093bd3dffd46f89ef6dd586859147937ab7e26926345dd7e58c2ae14209d84539add47411a13effcedd0f02493d5275a4a23348871c09e4e37e321b69a3b831e2be4d3690b103a3d7e099094853c721f2be9b9e137e705f6f810631a8542bcdf5a17476ffef0aee9c81d19df784f08210783737b7673a4a78f2095b9651d0cd58ac1da32d54feac14f8381450bc18923954ab697480d7aa531d4fdf3f47f1b3e78e2500092f48fb3dbf14ad81b4f0162d46c0a246a9f5ab7d846c42083f02bbc43dc13a1c062053f9e384ced2fcd2e02f56002eb639a9f161bbf5da8e0e4ca2c42e0709d91fedc0cf20820df6d0c9dcdaee8a4507bba410156b268dc68c141fedbb728c462f53a4ec68e387feb7da57871ee30cb8cda37954f6006d745ea8f57bc42ce7aff5058d46ce2522c0be871a808b4ca27d97d8cfe62a4509808280fdd53b28e0c4f01bd54df3e61e9851d7fdda5ddf2e939ed6e7dc065f5713dd83c1e564b70ffd373aa42f4c7348ff9dcd83d562f99f7bbd1e10c4544cf964a68c75613d1ac8a82868fc74a8d124369ffe6c56c1be403f2a244ae57415b1f4d38265b0c602b5bf4a002eab55a399a8ff0b8edfec3f68a8812455e64cb3577eb60ae70046e0b23dca1f90da65aeaa4f1eac20aa2f5dae97ea3d9fa127085b33472037f773e36cc1c2692e31d2671591cb4dc5f983467cf937592f32ac2d8593f2398faf45c144a9e80947a4e743af9494ad72425c0a12ebf061de84e095a6c32ebbc3740862f6c25994175f5b662191f49b77b31a971ad94f53aefe9d8e730c2634661b77a9397d3b52f06b8c9fbaa3d304bb9c7dab87d77c8cb66ed1e370edc54a6881979bdef30328c655a18cd4f86b710e79d7cddd444b0f10305a2dc552c7d30721b9e71b40babcecedc3668626c72c2117a475a1e4b20d5c6ab6c43ac7fec1e12a94084f0142ddfc3b7e7d5e05cc0575244c6416343fa97fbfb1874bfdc4bd013044632f57b37fb0d7b7eabadc6f382b6f478ea82968049892d3c144fc2fdc04dcb7c28b0386964287d93b59074be9698c92ed67fd997ccc3b71a1a66d838f25541e935fac422286ee4759af3a841866d67fe817feaf8386cc01394bdea75061a0039626190c445bb209bf68a3a61eeb29843729306c4af5c35525e42feea75f95ba14603ab70022cf70ab7543c5f31f4495cca0e5114b786b921a5646b7e2e2771f09f1a72b21792f4269d228c82cc18774a4449ca67c8dbc560ef133a150fcc2a6bf7dd249c845de557cfe73d9e253827e5c54a3297a931722dce708b7b4f16c40854a91f0975b4040c56c9caffcac4ef9c29bede83aa9f28ac5913b899dead9eb5c514d6ed3c8bc22fa76d9cb58826429e3eeec75d4341514a14f5158d499587a1036c08254893163f7f7d4fa8c32c68b07f1a527d17bb69d9b303c89b19a2f8f48aca20dc82821df1b4a9579025f1183874be0c09808d391aec865356b28adb72225d20e406dec6aab785a8ad7fa810da22e1046abe582ca64e2bfc3de065f0ce0f8fba98a8cd82a7ab7af7da490e2ec371d9793e632deed063f777d55926515da6688fe58e06fbf41aefae43a254e7121f5e218f9a659b4f93d00d48ba0d9fa7b669e20bddbd91277a0f5cf19040759c188bd25e8b6e36cc87914b84ffddb3bb7c9800629e62fa6ed70ba1d73517f17c85cb72eb6f63d33c1a321e7188e43dac8b5af06ae804b7f6fcdfcac8807b2a7c890ac5c7f0412e9e85d4ebcc28a4c5b4534999952b2077b9ad8167d89fc4dde1bf4e8ddeecf3005aecff6a6dba6c6deda194473240cea33fb90fc320ee5e683a57cdc4b7d87d9a91b191f527a42a384a2df0f50816fb0be4c7b279d60da703c6f5b8de696d331adaf97a8368fa4b25398a5b4a68933cece236c2e992d5a994c64ee926875b60e79c0d84b2ea2f8bf764be35fba2ac48a289c30b38fe42c025d3dc9161c7514f198fb10564b45ea28e4a74b023664bbb0091d9cd32fbfa5250113bbd2e91671210f06a78f9d2ebece2bba0c4fbd58b8378ee20c4f07d7849397dcacdadb8e957839fd2428ad0fea6089096f77d897d638a705ea7b5eb89ff2e82f555c1b946ae65a70a36f5d995abe72159aea64925d699fd86c273110550898bfe85e042c69e4d452a39fcb7ef63cc318bdf580392f1005623b6fe3432aa0896ab7f17f1d1697bfd5272a8a2cd8c132e4f2ebb01439aac42ff4d477e4ee7c87638f44d3849674620dadd40c36b94480632fede26fd83739a584822469563fca553ddd86224fd169fe5ff5d0335ce9e1e916ec5a80979519c466415d8dc47c46c22ca3f7c2fe6628e0f1762eb881d334730fd7567a518f9d1155ab2e45d6f7db12b791ae2bf77614ebcd50a1261eb2160a1f555d75eeab9bc6b625343e019b0549419025f027953dbe5989a4aa3caa7e0e659b33cbee44b9e8e80862d25e6b927eeb88718ef18b31d416bf070f829a6e4ebd8619e76d8d6dfb66628861a0a4700ac2c0c32b75ba2218fd24673eeb80b0524fee87ea4c00d2451cb1031cfe0df52fdfecac767662d1a89422786196f5794f09ceafff6896078dd1d3b291df8099d3814f5ac4371393217ea1a6f22139b1cbfd18a7959", 0x1000}, {&(0x7f0000002680)="a141b6e08849760855c0dccb1afddd5f9ac2b6ddb302509d399b0f1831c83ccfafa91f4c619e08f6ec56259d25a40a022e3b8cb9021492f15d17d255783bca2a4189ed6f928ce429ff0f66e29bc0f3f34b99c3ad3083a8070c75e2ae1fab5a9711a668e0bcf5b26f49c77db1374687c7401e4c82ced87e6e8990bbaea8a40317e61e96dc0bc89d84714820048bd774fda3f335e4d0b3302ed8121ed2d3efa98cea7367ebc2493be1a11a69c9b187c84158b0391372fcc6e8c4a80197b62f49c3e67f4fbfbc2735d5d3d1b7d1d52860df67db9b0ed8d770764a7b87472bf1d68bc23e2db18647f14deab25630ae5c316aaed2f7d0", 0xf4}, {&(0x7f0000001600)="624bdf5e1a82dc6fc0f48afc1fc0ab9f99a19f145017a7064c2d", 0x1a}, {&(0x7f0000002780)="43557b02e8adc46fbc1a53011698f7e888bc99fc1d518de182acc58f41584bedd875cd5824a7576938d2e70a5075b9daa0cb8bcae6aa501cbdbe5ba507824d5904da921727de3663650e5b4b3c6ddf58102c28fbe4e5d806ab354b3f976fa99eaf5b1443dd0f70872a88e3cd2c55f628ca9244a039c80ceb940b32132e49091ffa3f0fce81e6b0c61d85a8895756d793534d645ba7f3f4de4a343e6662f586c8d6e4a9dcd7", 0xa5}, {&(0x7f0000002840)="b46a4333a3abf3192d23505b01c7080311090b2f5b80c9f28963081c2f870e75b521c6ef60ee09c0f591ff5f2ed2937660de0e18f7b2ae26da2c2cdd254b50cd09843ce8d1d65811da1d05c78e5711157625feff933bfeead7cbb1c398891eb91124cc58173dcfc88523a77801b2752bd5e935dc433e1f1058df508a990850846be225a2ac7c8269e5e212056c19539bdb7204fef56ae5dbee3be74a9c7024aadddfb3fce7be62d5a27be3e8d703a95060436ef50df34b935b61ca6197f4fe09cfe804fae8b6bb0b", 0xc8}], 0x6, &(0x7f0000002980)=[@timestamping={{0x10, 0x1, 0x25, 0x95b3}}], 0x10}}], 0x3, 0x14000014)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
pipe2(&(0x7f0000002b00)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x5000)
linkat(r1, &(0x7f0000002ac0)='./file0\x00', r0, &(0x7f0000002a80)='./file0\x00', 0x1000)
prctl$PR_SET_ENDIAN(0x14, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
r3 = syz_open_dev$loop(&(0x7f0000002b40)='/dev/loop#\x00', 0x9, 0x80802)
fsync(r3)
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000002a40)={0x1000, 0x9, 0x4, 0x0, 0x10000}, 0x14)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000002b80)=@fragment={0xff, 0x0, 0x80, 0x1, 0x0, 0x1, 0x65}, 0x8)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:49 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:49 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:49 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="00ff00"}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xd38d7c6bfdb19984, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffdc8, 0x0, &(0x7f0000000140)='\x00'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0)
ioctl$KDDISABIO(r4, 0x4b37)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = dup2(r5, r5)
r7 = epoll_create1(0x80000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  865.437755] binder: 30311:30360 transaction failed 29189/-22, size 0-0 line 3014
[  865.440775] binder: 30307:30362 transaction failed 29189/-22, size 0-0 line 3014
[  865.441485] binder: 30307:30363 transaction failed 29189/-22, size 0-0 line 3014
[  865.441831] binder: undelivered TRANSACTION_ERROR: 29189
[  865.441848] binder: undelivered TRANSACTION_ERROR: 29189
[  865.485591] binder: undelivered TRANSACTION_ERROR: 29189
03:20:49 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000001000)='/dev/input/mice\x00', 0x0, 0x8000)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000001040)=[0x3, 0x1])
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:49 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:20:49 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

03:20:49 executing program 3:
syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00')
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)

[  865.647018] binder: 30378:30382 unknown command 0
[  865.656847] binder: 30378:30382 ioctl c0306201 20000040 returned -22
03:20:49 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000001000)='./file1/file0\x00', 0x4)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r1, 0xad4d4000)

03:20:49 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000001100)='#\x00')
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/150, 0x96}], 0x2)

03:20:49 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x0)
inotify_init1(0x800)

03:20:49 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$void(r0, 0xa00688b4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f00000012c0))
write$FUSE_POLL(r0, &(0x7f0000001000)={0x18, 0x0, 0x1, {0xfffffff8}}, 0x18)

03:20:49 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x20000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:49 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  866.412083] binder: release 30376:30398 transaction 2199 out, still active
[  866.419384] binder: BINDER_SET_CONTEXT_MGR already set
[  866.424920] binder: 30376:30398 ioctl 40046207 0 returned -16
[  866.426925] binder: BINDER_SET_CONTEXT_MGR already set
[  866.426934] binder: 30378:30424 ioctl 40046207 0 returned -16
[  866.428450] binder: 30378:30424 unknown command 0
[  866.428457] binder: 30378:30424 ioctl c0306201 20000040 returned -22
[  866.429398] binder_alloc: 30378: binder_alloc_buf, no vma
[  866.429438] binder: 30378:30424 transaction failed 29189/-3, size 0-0 line 3137
[  866.476641] binder: undelivered TRANSACTION_COMPLETE
[  866.482213] binder: undelivered TRANSACTION_ERROR: 29189
03:20:50 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200a4}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="25c36c2200da0f35a2b66a5686d6d4875de209c526450d1295684dfc07db5ec5aa9d7b59c4d1a6700b63d190c665938141bf560ebc39b49d2815aecd3c1e5ee6320fb20d000000822b07340c4411caa73db2adf5573bdaf7819560757a36affeaf632f6452235e919897ebfd1d76632e6a83ca6b51eee005c62eb22222a647a2cfe37963450649ec1c044570ff0ae14cac0c99b78ed4d82d62e5fd3e2b122e0f05a61f330e44caaa216e985565396598ab8150643e72ba1cb68a294864b2cef44b61a535f40577149e557881af4c83c4feb47e98502bd6bea7030829ee42e9c0992df969d2a11f84ad6852db0e2770891328a18ae24b8172a60c1379d4bf68d40463d18dca01d9330e0b0541973278079d0033569e55a10c5054a51506e85c318ff6d5969cc517b88a51ad9dffa1c582b3fb321f718c317829b727e4b7721643cb4bd51367941006d35975613a0873d84a89b8dd371581cf4c802b43868475d5a499", @ANYRES16=r4, @ANYBLOB="25002cbd7000010000000102000100000000db0000000014001462725b6164636176742d6c696e6b080023d900ced5bee93f6a91a90018e94c8376aa094f9b0a14ac332ce8603769fc7eb1c7f51dc7247c462fd3b2fd072e64891cf6411cf7a344225e820cfb0fa7ca85fefe16dc38e9ac5eb7d7193e4e2841a54597309e2468d3d2931fbebdc616d319d54de0ba4b344cd0f3a8207f92a45da5c14c92dfebe20f5acd6563d5d0e57048ed42a131dfb5cffd66c005dc4f9a48495e92debd03feb50093f756d874ecbcc4d10904b6cf14da746400"/223], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x364eaf51d1ade10)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x200, 0x0)
memfd_create(&(0x7f0000001100)='system_u:object_r:fsadm_log_t:s0\x00', 0x1)
fsetxattr$security_selinux(r5, &(0x7f0000001040)='security.selinux\x00', &(0x7f0000001080)='system_u:object_r:fsadm_log_t:s0\x00', 0x21, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140))

03:20:50 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
syz_open_dev$mice(&(0x7f0000001000)='/dev/input/mice\x00', 0x0, 0x240000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4089, 0xff9}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

03:20:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10000}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:50 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  866.509553] binder: release 30378:30382 transaction 2197 out, still active
[  866.516952] binder: undelivered TRANSACTION_COMPLETE
[  866.520002] binder_alloc: 30376: binder_alloc_buf, no vma
[  866.520070] binder: 30376:30379 transaction failed 29189/-3, size 0-0 line 3137
[  866.536154] binder: release 30378:30395 transaction 2198 out, still active
[  866.546431] binder: undelivered TRANSACTION_COMPLETE
[  866.551824] binder: undelivered TRANSACTION_ERROR: 29189
03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x200, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:50 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/enforce\x00', 0x2, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x1f)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000001000)={{0x0, 0x5, 0x8d51, 0x3}, 'syz1\x00', 0x3f})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000001100)={'mangle\x00'}, &(0x7f0000001180)=0x54)

[  866.565051] binder: send failed reply for transaction 2197, target dead
[  866.581037] binder: send failed reply for transaction 2198, target dead
[  866.589706] binder: release 30376:30379 transaction 2199 in, still active
[  866.597269] binder: send failed reply for transaction 2199, target dead
[  866.686716] binder: 30431:30442 got new transaction with bad transaction stack, transaction 2203 has target 30431:30434
03:20:50 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
dup2(r2, r2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180), 0xfffffffffffffff4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:50 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
read$FUSE(r2, &(0x7f0000000000), 0x1000)
readv(r0, &(0x7f0000001180)=[{&(0x7f00000013c0)=""/202, 0xca}, {&(0x7f00000014c0)=""/145, 0x91}, {&(0x7f0000001580)=""/83, 0x53}, {&(0x7f0000001bc0)=""/252, 0xfc}, {&(0x7f0000001cc0)=""/157, 0x9d}], 0x5)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = accept4(r0, &(0x7f0000001100)=@in={0x2, 0x0, @remote}, &(0x7f0000001080)=0x80, 0x80c00)
write$binfmt_aout(r4, &(0x7f0000001680)={{0x0, 0x8, 0x8, 0xec, 0x371, 0x10000, 0x201, 0x3f}, "5ff14b0ded9f27751ee3ece3b2b68da3b4920810b80a6bda30916a6e2ed3473e0d72d23835434a283e3cb86ab9864d4f0413176473a14ad1514324c34174291dfaed97ba406e8247b4a26aac1cf896f2d1d27be9f5220406f8f650e99e37442857e57c89c879d0f4b0679abcf534bd3ab7e8cf98739b4598410d9c1f1c32037b7f7597e17be3b4c1e951163591041f23ad9dd14ff07b351f88da75f3145ba0dd8e72a19d020f207dcd06d41feecf87fd6fba6212d97c9afca5dbd2703698d1860326bb24fb799c2c590cf92ffd3eafd77bcfed853f49426cda83150ba49d55e690767bf9b4aee740ce9216907e0f164d0416aa", [[], [], [], []]}, 0x513)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1b8e86a13028baf568aaf381792c55600000000000000000000000000000000000002000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000"], 0xffeb)
sendto$inet(r3, &(0x7f0000001000)="1c2fbb01c23cd8d9f389d4a6293ef84923c10eee2bbdbebe", 0x18, 0x480c0, &(0x7f0000001040)={0x2, 0x4e22, @remote}, 0x10)
pipe2(&(0x7f00000010c0)={<r5=>0xffffffffffffffff}, 0x4800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000011c0))

[  866.731186] binder: 30431:30442 transaction failed 29201/-71, size 0-0 line 3041
03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = dup(r0)
setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000001040)="ddc94bdd292d3535b08f26538dfcf59dfded8387a965a6fb219ccfb702e7eae8ca2c0d6811624e314d540388ffb8c1d3da05b37af8b110647013a7726a7550528e7694ba84812f403f741b78d9eb7de5ff66f26b7544d8b8e9c9ad7895ee2399697d3c", 0x63)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r3 = geteuid()
r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r3, r4)
r5 = geteuid()
r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r5, r6)
r7 = getgid()
lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r10=>0x0}, 0x0)
r11 = getegid()
setregid(r10, r11)
stat(&(0x7f0000001180)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, <r13=>0x0}, &(0x7f00000013c0)=0xc)
r14 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r15=>0x0}, 0x0)
r16 = getegid()
setregid(r15, r16)
r17 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r18=>0x0}, 0x0)
r19 = getegid()
setregid(r18, r19)
r20 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r21=>0x0}, 0x0)
r22 = getegid()
setregid(r21, r22)
r23 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r24=>0x0}, 0x0)
r25 = getegid()
setregid(r24, r25)
stat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0})
fsetxattr$system_posix_acl(r2, &(0x7f0000001100)='system.posix_acl_default\x00', &(0x7f00000014c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r3}, {0x2, 0x4, r5}], {0x4, 0x1}, [{0x8, 0x1, r7}, {0x8, 0x2, r8}, {0x8, 0x7, r10}, {0x8, 0x2, r12}, {0x8, 0x2, r13}, {0x8, 0x2, r15}, {0x8, 0x2, r19}, {0x8, 0x1, r21}, {0x8, 0x2, r24}, {0x8, 0x1, r26}], {0x10, 0x2}, {0x20, 0x8}}, 0x84, 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001000)=@req={0xdb, 0x6, 0x8, 0x1}, 0x10)

03:20:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0xfffffffffffffd89, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe68, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
io_setup(0x9, &(0x7f0000000000))

[  866.832936] binder: release 30431:30442 transaction 2203 out, still active
[  866.861130] binder: undelivered TRANSACTION_COMPLETE
[  866.895892] binder: undelivered TRANSACTION_ERROR: 29201
[  866.927905] binder: release 30431:30434 transaction 2203 in, still active
[  866.965606] binder: send failed reply for transaction 2203, target dead
[  867.001761] binder: 30458:30469 got new transaction with bad transaction stack, transaction 2207 has target 30458:30463
[  867.014438] binder: 30458:30469 transaction failed 29201/-71, size 0-0 line 3041
03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x2000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
clone(0x60200, &(0x7f0000001040)="a493d4bc4b37ab947345e60a1006700a1618efcc548eddc2492b91c7f318f5f443", &(0x7f0000001080), &(0x7f0000001100), &(0x7f0000001140)="e310c69f2d660ad517b62e6981765dec274a403dbed75a711490071a7285994b")
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001000)=""/54)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000001280)={0x5, 0x5, 0x2, 0x8, 0x10, 0xff, 0x1, 0x9, 0x1000, 0x8, 0x1, 0x80000000})
r3 = syz_open_dev$sndtimer(&(0x7f00000012c0)='/dev/snd/timer\x00', 0x0, 0x80000)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendfile(r3, r4, &(0x7f0000001300)=0x4b284d3f, 0x80000001)
ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000001180))

03:20:50 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x464002, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
creat(&(0x7f0000001000)='./file0\x00', 0x20)

03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
recvfrom$inet6(r0, &(0x7f0000001000)=""/47, 0x2f, 0x40002020, &(0x7f0000001040)={0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, [], 0x1e}, 0x89a}, 0x1c)

03:20:50 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
dup2(r1, r1)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000003980)='/selinux/member\x00', 0x2, 0x0)
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
connect(0xffffffffffffffff, &(0x7f00000039c0)=@generic={0x9, "186a9fa7a78e8ad5e2a32c4940bcbb4cee57cef4d99592902f4b90b8cb87201a5a3d0f0292d2bbc53f90e8086d0f02db35399de4ed5afbfc3bcbdecde4fead1d7f1872dbd79e55ed14c457d872781246a5af1f04a1a55f516c42c006cf58a982d9885fb229b2edced9f20067428cc67a4261692552ff466eae3b8e3934d8"}, 0x80)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000003a40)={<r8=>0x0}, &(0x7f0000003a80)=0xc)
sched_getscheduler(r8)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="a8000000000100003f00000065d8757c10eb9f095f4cb560ad39f620355d8327836d4e9a3bcd6f59cbd7fa6114714d2deed6569eabe6a3f8b9da73c56bff06a5b400d12a5cceccd3932b9f331850e8ede08a8339e252e785dd73e4e354f3192c2e9dd30eca5cae3ca313bfe872457cb82398d5926dc99e3d30a415d89e801f634aed65f0c223f877dd626488ade03f08a105d00f9654976e3eb4c887d0ab69832f8631683d8100000c0000000301000008000000a800000007010000e2320000946f1a0bd416865e64a829341eff57cdee3efdd93642f76f3df9164da5e766b3235f7a6a782f48aa639e72ad2a7693af3a37f152043f2f43f3a60fac2b5ca98e3f5542e152b7a0e566db314d85b8acf39ada3e3ea519cca02a329402a661675abf45143b0a943379f1215b951a4f1b4426aa04dfccee629c113f2a83965ed80cf9700343ae495e43faaab20043300d653d6f7c46eb962c871cea4241b95b8ce26b65d96e05000000ac00000000000000030000007b18d7be065a58e7565674920034f4b1d13493c5af503c72567e5dd6aef741afddf6ff940355c9dd027bc2d6772151ad983fdf99cb9b09feb8dad8f15b00b828eac81b6b553e2fa2e81ace7265a467c3b1446d52c20fab718c89326695f649ba377704b376a49ae815588061bd793ce9a053c8ec3cc977e096d1dcf727545da5cf2d77f2e2cf9062c9622dc3564d84c3e3716d6e4f14666b952a0566f8fc9a005800000088000000200000006d2b2bfd0b690b818b4ff8dad4b6a30d0b0444c64826c80b6133349503ac5311909b4ebc296ce727268f939dbcfb593cb79c40539cc53b2d9ba56195970000b00000000501000005000000cc3a905ce29ef1a82ffd93e25ba49ae695ffc8cd376b3f50781db3da9c166d838eed9fa3ec91864b9e86c7cc8bc5854edf5bc39af74eddc88f490182688a78f27b0a670bb32cf63a3d1708c2c5d2e584f10b3dafa049c92313f6db34fba10377758e0df2a9f6d5ce94e4d105eb892dcbdb28011641e31bba72879577e3abaadf2cacc34c40c99f2e008d7610e5982d246d3c24c4e5309797"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r6, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001000)={@dev={0xfe, 0x80, [], 0x18}, r6}, 0x14)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:51 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000001000)=ANY=[@ANYBLOB="02020000000000000000"])

03:20:51 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$UHID_INPUT(r1, &(0x7f0000001680)={0x8, "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", 0x1000}, 0x1006)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000001000)={0x2e, 0x4, 0x0, {0x6, 0x10bd, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/136, 0x88}], 0x2)

03:20:51 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x800)
getsockname(r2, &(0x7f0000000340)=@rc, &(0x7f00000003c0)=0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

[  867.659382] binder: release 30458:30469 transaction 2207 out, still active
[  867.673820] binder: undelivered TRANSACTION_COMPLETE
[  867.690018] binder: undelivered TRANSACTION_ERROR: 29201
03:20:51 executing program 0:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000001040)=0x8)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
lgetxattr(&(0x7f0000001100)='./file1/file0\x00', &(0x7f0000001140)=@known='user.syz\x00', &(0x7f0000001180), 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000001080)=@v1={0x0, @adiantum, 0x3, "d8880b8a5fd141f2"})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)=<r5=>0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r7=>0x0}, 0x0)
r8 = getegid()
setregid(r7, r8)
mount$fuse(0x0, &(0x7f0000001180)='./file0\x00', &(0x7f0000001280)='fuse\x00', 0x100000, &(0x7f0000001380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/zero\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vmnet1system^-vboxnet1'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, '\''}}, {@pcr={'pcr', 0x3d, 0x17}}]}})
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
fcntl$setflags(r2, 0x2, 0x1)

03:20:51 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/create\x00', 0x2, 0x0)

[  867.708054] binder: release 30458:30463 transaction 2207 in, still active
[  867.722290] binder: BINDER_SET_CONTEXT_MGR already set
[  867.740089] binder: 30465:30472 ioctl 40046207 0 returned -16
[  867.771488] binder: send failed reply for transaction 2207, target dead
[  867.784584] binder: release 30465:30472 transaction 2209 out, still active
[  867.814797] binder_alloc: 30465: binder_alloc_buf, no vma
[  867.821569] binder: 30465:30468 transaction failed 29189/-3, size 0-0 line 3137
[  867.831924] binder: undelivered TRANSACTION_COMPLETE
[  867.843357] binder: 30510:30519 got new transaction with bad transaction stack, transaction 2211 has target 30510:30511
[  867.847148] binder: release 30465:30468 transaction 2209 in, still active
[  867.847153] binder: send failed reply for transaction 2209, target dead
[  867.859657] binder: undelivered TRANSACTION_ERROR: 29189
[  867.876552] binder: 30510:30519 transaction failed 29201/-71, size 0-0 line 3041
03:20:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0xa8, 0x1, 0x80, "3451a2f978485e3fc858e9cb89df05c8", "33473f283184a1d1920822b683b2badd529e02e723188cda929269f78475f8c7aca2ce9d497ad5d12285aca6cff9c597be7dd03e09e7b21883728982e8f6a4f7bf1c971fe36bce189aa90a0c2aa30d8fff10cebfdee77c396b41b7e8818229334f1bd9b37fc01f78d7966be1780618688bdeb07062efa1f46399434ab9b6ef2ed116f8cdf371651c6a09b59fc1f51735c29398"}, 0xa8, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xff66, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b6300000b6300000b6300004a08b0f878c011e480d5037ee7e1db904f3ad2caaf8de4145e9f88e196ec344b358370aac7896f454e08c59f3b70771f57a3b91cb6952c50e0329b062c8938528edc66be88a1911a57e09ae6261ce338ee07426ec94d7781a9d0c18e5fbe1c002023a48982bb2f94b85dcd4df03be18c8b991f500f78ff985a75c67ed8bc518815edb5eed9ecf8fcf3fc2ae1b4c7539a2d749538484d3d00c0fa9a8b4709d14f716d7e70b52e53ffc4968c6f4b7cace6e2c52861336d2c20e68e93b9af1b822b3b7f6551ecad6d5f5bbbac5a5be2903fa2"], 0xdb, 0x0, &(0x7f0000000740)="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"})
r2 = open(&(0x7f0000000640)='./file0\x00', 0x40, 0x8)
linkat(r1, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000680)='./file0\x00', 0xe00)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0x80800, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
connect$inet6(r6, &(0x7f0000000700)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff9}, 0x1c)
ioctl$PPPIOCSCOMPRESS(r4, 0x400c744d)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r8 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:51 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000001000))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:51 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:51 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000001000)=0x80000001)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000001040)={0x8, 0x0, 0x8000}, 0x1)

03:20:51 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14, 0x40800)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x22e1)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000013c0)={@empty, <r4=>0x0}, &(0x7f0000001400)=0x14)
recvfrom$packet(r1, &(0x7f0000001280)=""/149, 0x95, 0x2, &(0x7f0000001440)={0x11, 0x6, r4, 0x1, 0x6, 0x6, @local}, 0x14)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RMKDIR(r5, &(0x7f0000001140)={0x14, 0x49, 0x1, {0x4, 0x4, 0x7}}, 0x14)

03:20:51 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/}gro\x00', 0x1d94b6ba5606b4b, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:51 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$trusted_overlay_upper(r2, &(0x7f00000013c0)='trusted.overlay.upper\x00', &(0x7f0000001440)={0x0, 0xfb, 0x94, 0x4, 0x3f, "9353b77ae02d011099e035950e02f896", "815b6ce3f3f981325a80fd233db257f8cbe72349b93f8720e6eeb09c1c13e9acaf202470184d12ded00f05d38af126e5d4c2d88aa0ccaeb7103c3439134f575b3c3514f570694f166f4c9a25b9d7fbd726813c7c37c7a3a1400173d6c0ac65771aa758bdcf02cf77906b5f82b4da81bb081b4c465f7ff841c9e899bb1c65c3"}, 0x94, 0x3)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x82)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r1, &(0x7f0000001400)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000001000)=""/181, 0xb5}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000001100)=""/159, 0x69}, {&(0x7f0000001280)=""/136, 0xfffffffffffffe6b}, {&(0x7f0000001340)=""/125, 0x7d}, {&(0x7f00000013c0)}], 0x7)

[  868.084348] binder: 30528:30535 got new transaction with bad transaction stack, transaction 2215 has target 30528:30530
[  868.118434] binder: 30528:30535 transaction failed 29201/-71, size 0-0 line 3041
03:20:51 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:51 executing program 0:
r0 = epoll_create(0x8)
epoll_pwait(r0, &(0x7f0000001000)=[{}, {}, {}], 0x3, 0x101, &(0x7f0000001040)={0xfffffffffffffffe}, 0x8)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:52 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000001000)=0xbbda)

[  868.512767] binder: release 30510:30519 transaction 2211 out, still active
[  868.524859] binder: undelivered TRANSACTION_COMPLETE
[  868.552491] binder: undelivered TRANSACTION_ERROR: 29201
03:20:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x40200, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  868.566107] binder: release 30510:30511 transaction 2211 in, still active
[  868.583742] binder: send failed reply for transaction 2211, target dead
[  868.785895] binder: release 30528:30535 transaction 2215 out, still active
[  868.796995] binder: undelivered TRANSACTION_COMPLETE
[  868.797894] binder: BINDER_SET_CONTEXT_MGR already set
[  868.797904] binder: 30528:30546 ioctl 40046207 0 returned -16
[  868.801480] binder_alloc: 30528: binder_alloc_buf, no vma
[  868.801520] binder: 30528:30546 transaction failed 29189/-3, size 0-0 line 3137
03:20:52 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
flock(0xffffffffffffffff, 0x1)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000001100)=""/104, 0x68}, {&(0x7f0000001280)=""/137, 0x89}, {&(0x7f0000001180)=""/23, 0x14d}, {&(0x7f0000001340)=""/199, 0xc7}], 0x4)

03:20:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000000d4)
openat$cgroup_ro(r0, &(0x7f0000001000)='cpuacct.usage_sys\x00', 0x0, 0x0)

03:20:52 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x2f3)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4085, 0xff5}, {&(0x7f0000001000)=""/137, 0x89}], 0x2)
r1 = socket$inet(0x2, 0x800, 0x81)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000))

[  868.841488] binder: undelivered TRANSACTION_ERROR: 29201
[  868.847350] binder: release 30528:30530 transaction 2215 in, still active
[  868.859776] binder: send failed reply for transaction 2215, target dead
[  868.868209] binder: undelivered TRANSACTION_ERROR: 29189
03:20:52 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x72872dc505b89880, 0x0)

03:20:52 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000001080)='./file1/file0\x00', r1, &(0x7f0000001100)='./file1/file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
r4 = geteuid()
r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r4, r5)
keyctl$get_persistent(0x16, 0xee00, r5)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001280)={0x4, 0x0, 0x6, 0x0, 0x0, [{r1, 0x0, 0x1df}, {r2, 0x0, 0x7}, {r0, 0x0, 0x4}, {r3, 0x0, 0x2}, {r0, 0x0, 0x1}, {r0, 0x0, 0x8000}]})
r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000001040))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:52 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:52 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
readv(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r1 = gettid()
rt_tgsigqueueinfo(0x0, r1, 0x0, 0x0)
ptrace$getregset(0x4204, r1, 0x6, &(0x7f00000000c0)={&(0x7f0000000000)=""/157, 0x9d})

03:20:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:53 executing program 3:
readv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x2170)
socket(0x0, 0x1, 0x4)

03:20:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000001000)={0x4b, 0x75, 0x2, {0x40, "c7163d59c64293c5f24f20a6e724741d61c3a9ce80c5432b9f5384c398b616daad44571d8dbdeca18df376ba7be8b38a42a5e90e326d07ed16c2a988d76baf48"}}, 0x4b)

03:20:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001280)={0x2, 0xd, 0x1, 0xc, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x4000000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:53 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, &(0x7f0000001100)="8ae24831ac071a5bf9f965173a5261f28b14c5faca3a4d5627d40fee46494b3f1c45beb7f7c61229084304363d769833123777f9a971fa422b2ff01d1f25f9ca8902cac9ef87530174d220e15bbd94589b685fa2afef7aa451ab7af24ff8c9a0f47bcd79980031b52f21458b02ff49f1097660577bf8c9146199324b")
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000001040)='trusted.overlay.opaque\x00', &(0x7f0000001080)='y\x00', 0x2, 0x5)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001000)={r0, 0x0, 0x81, 0x8, 0x3})

03:20:53 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  869.772680] binder: BINDER_SET_CONTEXT_MGR already set
[  869.778727] binder: 30585:30603 ioctl 40046207 0 returned -16
03:20:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000340)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast, @bcast, @null, @default]}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="5125f7bbc9705f64099127bbe97aa3c14d2e47dd4f99bb7747675cb972f5952c278688a4d136e724acf45c93d355746837e3388ce79f4a577bb6d9d47e74a9a2b5494b57f249c7c13879719d7b6ae9150258f55837cee47b0ee6ad76549e6ba955b108e2dcb5b612a16480f6bc542f9ce7c2a3301a1270a57d3cd71c7e194144cba979f14251fade64d6594e09ce44151e706debb1ef51f8d84e848a1acdc021dd95ed5003d8aef114e298569e812c10bd78c91e683880", 0xb7}, {&(0x7f00000003c0)="49472ffa778e0699f77e4c115edec136b91ad10279df126095b2683ff6e6db7b98ecfafa89c93c234587c13a259df74e5ff9a5321b842564744673737404097cedea4a9e6a94ef18d788b6037392725e18acaebdba", 0x55}, {&(0x7f0000000640)="598d09175a3a313dd8b0ad90b08cb62f024e68a524bf67d33c610f3a1dd05d67093a67dad7c3d2a2dffe069b088e57f4465d462b36b1f5baeeff67ac8cb08290712892", 0x43}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000000)="a9de0afc366eab8af5a9f80ab8479186", 0x10}, {&(0x7f00000027c0)="4a8ddabba1f6b861b2db621c3100ff4e9df287057a00808cd01458979c59a25371bddf9ca7354fa810e1385ddf98a756d17c98f23d7df23fe9e0e2b4aa0b6c32de0a2edb4e254fea0559e8698799d6de4515198f7a0a041ee096", 0x5a}], 0x7, &(0x7f0000002840)=[{0xec, 0x0, 0x4, "922ec9cc6a84caa47d10c55cc4074b7b071ad06a934f299fa3d28fddf4a9a4ba6e6305a0eab6978b9f7ac1313bf84a6432cedf51734c56b131df39618f86a0d51f0ccefaca40c1502e1363f6f0a9ef744f9c8c1abec8ff9227979323c2d29c055d5a471a08a3041ff0ce4c2f7f9e1897fbbe5ddc3d08274108646a186699b50affd4d0b3d7cf4d03d30c0110c5a9f153dbb4d124581a7e64fc7d8733bd292e8bda7a75090444e56e744bd17442bfb994ff0d6f4813e2770b90a93216ff8c8fb998b641cb4562dc19337a1eeac3f3d0cb2b7a7e96cbe172c5a3b7729ae5ff"}], 0xec}}], 0x1, 0x30)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b6300000b63006bd3630000"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:53 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000001100)=""/190, 0xffffffbc}, {&(0x7f0000001280)=""/18, 0x12}, {&(0x7f00000012c0)=""/59, 0x44}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0xeee}, {&(0x7f0000001340)=""/248, 0x31}, {&(0x7f0000003680)=""/4096, 0x1536}, {&(0x7f0000001440)=""/161, 0xa4}], 0x8)

03:20:53 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$security_capability(r1, &(0x7f0000001000)='security.capability\x00', &(0x7f0000001040)=@v2={0x2000000, [{0x1, 0xcd5c}, {0x4, 0x8000}]}, 0x14, 0x0)

03:20:53 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x10000, 0x0)
readv(r0, &(0x7f00000010c0), 0x0)
r1 = add_key(&(0x7f0000001080)='big_key\x00', &(0x7f0000001100)={'syz', 0x2}, &(0x7f0000001140)="16d58c787e56a8fa07b64e63cc4eac05e102365d0efb19523453bfbc07b7dae7b73f10d99c7939de09e784fd701764de4c393a01892c61f027da0971b73c8cec65eb23f7f31249907c68c7d25bbc44", 0x4f, 0xfffffffffffffffe)
keyctl$get_security(0x11, r1, &(0x7f00000013c0)=""/166, 0xa6)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001680)=ANY=[], 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400000000e5ffffff00"/268], 0xffeb)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
getsockopt$inet_mreqsrc(r4, 0x0, 0x0, &(0x7f0000001280)={@broadcast, @rand_addr, @local}, &(0x7f00000012c0)=0xc)
getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001000)=""/45, &(0x7f0000001040)=0x2d)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x2)

03:20:53 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:53 executing program 0:
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001000)={0xa2c, 0x0, 0x2000}, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080)='\x04\x00', 0x208000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  870.105445] binder_alloc: 30651: binder_alloc_buf size -2309367073869210984 failed, no address space
[  870.137513] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  870.179059] binder: 30651:30659 transaction failed 29201/-28, size 0-0 line 3137
03:20:54 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000001000)={0x0, @aes128})
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4088, 0xff8}, {&(0x7f0000001280)=""/142, 0x8e}], 0x2)
sendmsg$key(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x2, 0x6, 0x3, 0x0, 0x4, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x4f, 0x0, 0x0, 0x70bd25, 0x3500}]}, 0x20}}, 0x20000000)

03:20:54 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getpeername(r1, &(0x7f0000001000)=@nfc, &(0x7f0000001080)=0x80)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x92000100}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0x1c, 0x0, 0x5709957780a2b1c, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0xd145b953596e8d39, &(0x7f0000001100)=0x3f, 0x4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:54 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:54 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:54 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x0)

[  870.665686] audit: type=1400 audit(1574911254.282:92): avc:  denied  { setopt } for  pid=30672 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
03:20:54 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000000)='./file1\x00', 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
dup2(r0, r0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac14140000000000006460d9b7257b15b300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e01c4bd9d495abdc698b427ce3a437c6b32ca65b650df3f09619c3ba51d746b9de30ffe52bbc61f0421"], 0xffeb)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001300)=""/221, 0xdd}, {&(0x7f0000001500)=""/47, 0x2f}, {&(0x7f0000001440)=""/4, 0x4}, {&(0x7f0000001480)=""/38, 0x26}], 0x4)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$binfmt_script(r3, &(0x7f0000000940)={'#! ', './file1/file0', [{0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}], 0xa, "6518d85d2fdf9d2ddc2d88460c50ea0801169c9a0ea16cc46acdcb68e1e92bc8c69883d71c905196662db7760c42124f4588d4aa56bc255ce19fa37c819f3030f780da5285a31b262cc52ad7c69f28e70dc13477c3908dc3beb2a29decbefba3be97d603b8dd12bfe98442cc03b52adb505e3c40ef612064eb3bf5a92af5168357ac8d01be54ea718845384dc0ded75cd37a3b9c58cfb52375cf1c737304c2dfd99cc9fb1fe17dc0f8e7fcd80476fc67ece6e560c3fce9e50020e93129b0fffc5fd1d54c318f99ea75a9cc4a5bccaf977ceedc04de1ed0756cf5839f23e3ea53f2779c1ed30bca8fef273621f7cea5f8"}, 0x12d)

[  870.849314] binder: undelivered TRANSACTION_ERROR: 29201
[  870.855831] binder: BINDER_SET_CONTEXT_MGR already set
[  870.857481] binder: release 30651:30668 transaction 2221 out, still active
[  870.857485] binder: undelivered TRANSACTION_COMPLETE
[  870.888881] binder: 30651:30659 ioctl 40046207 0 returned -16
[  870.888942] binder: release 30651:30653 transaction 2221 in, still active
[  870.888954] binder: send failed reply for transaction 2221, target dead
[  870.903575] binder: 30651:30653 transaction failed 29189/-22, size 0-0 line 3014
03:20:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:54 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x6d5e9e8265fe714b, 0x4a)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001040), &(0x7f0000001080)=0x14)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:54 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001000))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$void(r0, 0xc0045878)

[  870.951404] binder: undelivered TRANSACTION_ERROR: 29189
03:20:54 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x6, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x1, [{{0x2, 0x0, @dev}}]}, 0x10c)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000001000)=0xd)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/enforce\x00', 0xa800, 0x0)
pipe(&(0x7f0000001100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000001140)={0x2, @remote, 0x4e21, 0x4, 'ovf\x00', 0xa, 0x0, 0x48}, 0x2c)
mknodat(r2, &(0x7f0000001080)='./file0\x00', 0x0, 0x6)

03:20:54 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:54 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BLKBSZGET(r2, 0x80041270, &(0x7f0000001000))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:54 executing program 3:
r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)

03:20:54 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000001000)=0x15, 0x4)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/user\x00')
write$binfmt_aout(r1, &(0x7f0000001680)={{0x107, 0x2, 0x2, 0x2b2, 0x336, 0x0, 0x21e, 0x7ff}, "81016b58cf49963c7453782edb76b1a10c8fbdae73afa33d26296798ed07014b8a6add23e297c0f0d38421c0a2047baab58af564339b43690807f78574ff6cce55b89a3d1f2ac4fc8c8f33d8060c09ee93958685cd53929973217fbe34a5489c6e49dca343dce86abf8ac1fbac9ccf7237227d490726c89e3e0e821c4d9fcce7af25fd623deece73b800cdb9ada152d926a6e40b1885e59c2a4e59a573ba34370a16c60362c7ee8ed63ff2ddc8a17d78006f4f96c7cff12155ac4d4ff77ff96c5d6e95bf3eb1272b7baeac987380ff35188b82c32c175ca404a0bcbbb253ad3c574a0303c7682af6d70b91", [[], [], [], [], [], []]}, 0x70b)

03:20:55 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:55 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001280)={0x2, 0xd, 0x1, 0xc, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x4000000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = gettid()
rt_tgsigqueueinfo(0x0, r2, 0x0, 0x0)
fcntl$setownex(r1, 0xf, &(0x7f0000001000)={0x0, r2})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001080)={<r3=>0x0, @multicast2, @loopback}, &(0x7f0000001100)=0xc)
r4 = geteuid()
sendmsg$nl_xfrm(r0, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x140820}, 0xc, &(0x7f0000001140)={&(0x7f0000001680)=ANY=[@ANYBLOB="04020000190000012abd7000fddbdf25fe8000000000000000000000000000aa000000000000000000000000000000004e2400014e2001000000002001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x4000}, 0x40400c9)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000001040)={0x9, 0x3f, 0x0, 0x6})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000001280)=""/234)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f0000001680)=""/4096)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r8 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
r9 = openat$cgroup_ro(r8, &(0x7f0000001000)='memory.events\x00', 0x0, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001380)=""/244)

[  871.796163] binder: release 30697:30701 transaction 2225 out, still active
[  871.804376] binder: undelivered TRANSACTION_COMPLETE
[  871.804686] binder: BINDER_SET_CONTEXT_MGR already set
[  871.804697] binder: 30697:30741 ioctl 40046207 0 returned -16
[  871.821510] binder: release 30697:30704 transaction 2224 out, still active
[  871.828931] binder: undelivered TRANSACTION_COMPLETE
[  871.834654] binder: release 30697:30701 transaction 2224 in, still active
03:20:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4085, 0xff5}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

03:20:55 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x800)
getsockname(r2, &(0x7f0000000340)=@rc, &(0x7f00000003c0)=0x80)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

03:20:55 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
write(r0, &(0x7f0000001000)="6d2e14b72a41ef16039d772de8bf89fbd8855ab862e3fb9bf728c7a1abe3a6c7e0e7d6b531e72981264b72ccc9b377ac33c86485388eadf3fcc4133c55773333a22882a92c20dc2ad7d867e4d6ac017bab2cbdc5562017d76cd5bac507dfd81062ecb3cf361d6707ce15c9", 0x6b)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  871.841893] binder: send failed reply for transaction 2224, target dead
[  871.849234] binder: send failed reply for transaction 2225, target dead
[  871.851809] binder: 30697:30742 transaction failed 29189/-22, size 0-0 line 3014
03:20:55 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200a4}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="25002cbd7000010000000102000100000000db0000000014001462725b6164636176742d6c696e6b080023d900ced5bee93f6a91a90018e94c8376aa094f9b0a14ac332ce8603769fc7eb1c7f51dc7247c462fd3b2fd072e64891cf6411cf7a344225e820cfb0fa7ca85fefe16dc38e9ac5eb7d7193e4e2841a54597309e2468d3d2931fbebdc616d319d54de0ba4b344cd0f3a8207f92a45da5c14c92dfebe20f5acd6563d5d0e57048ed42a131dfb5cffd66c005dc4f9a48495e92debd03feb50093f756d874ecbcc4d10904b6cf14da746400"/223], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x4004090)
sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x68, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r8 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  871.891976] binder: undelivered TRANSACTION_ERROR: 29189
03:20:55 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x5}, 0xffffffffffffff26)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000001040))
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000001000)=0x8001)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r4, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:55 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000001500)={0x110, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0x13}, [@nested={0xfc, 0x9, [@generic="ed24cfea3f", @typed={0x8, 0x1a, @fd=r0}, @generic="a010f04353c4bf", @generic="1ef0c46d32e02aaf0fa2467fec8af75a136395517aab10249653870702c88d9f7f94a98828d5911d5d8fbeeb30d6cfa56237319e8ea73c19229442e63eb3bad23a26df03d1d09a670d0e69a475b4f94e722533e6fe3ef29e4bd5b068a64d258f8fd33a6a8ac91b108351662dac50dc29f05b71698da6bdcfd79b06edcf2495874e8911d12f71c4db6ba39c541aea9f46c69d856415b24cdc6518863fb8f504261c6b1d41953febfe1e62b2df7c3b61a5b7e06e548d378e50539f22d1b87626bfef0d50b38d75ff23d6b1c826d4d3f62009997b3899205222f2cb0770fd773a8bb9de0a"]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x40024054)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = gettid()
rt_tgsigqueueinfo(0x0, r2, 0x0, 0x0)
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x0, 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
read(r5, &(0x7f0000002940)=""/170, 0xaa)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000001000)=@kern={0x10, 0x0, 0x0, 0x8400012c}, 0xc, &(0x7f0000001040)=[{&(0x7f0000001280)={0x10c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="e23abf81cb848c65e2fec7d96ef40e36652ad4cffbf9ea7666ce38b63702a25c82430d873765253ff91665642b639ae6a535db1fd21cae15fcb8d7b4731c07225c1c6ab95ebebf26056980a3dd541cb1e3e87b4c413432ae6e74393eafeb1f20f730654400e6926d29c8d3565cf29844ef5f5d2a62314addecbaff06c99da64d10ccae6c970770df540550ddc4ce38edcdc79247c5cdbb026866130fb8f9f448273025aa892b8ec50f55e3b8c409481a3293be5dac46dfa85ab5792fbbca274bbdbd0f1e607dbfee19eb361b25ddb3dfd567c71ff6ae454bfa4a6a75c9114c4d1fc4d3b743426265e31f17d20106fb56f6913105d6dec40b68"]}, 0x10c}, {&(0x7f00000013c0)={0x104, 0x3c, 0x300, 0x70bd28, 0x25dfdbfc, "", [@nested={0xf4, 0x3a, [@typed={0xc, 0x57, @u64=0x7}, @generic="1f0ea2d9ceeb29e28e09f33ef8008579356aab35f6783f4794bde3a769f412896b9b3fa9c104f34f5325e8d85ccb1dfe5aca3242090239cb3746a04e98bfdba0f9863680ef62319e859776789ea084bca1cd0b57221cb25d6414b4eae33fd125f5041c6bde90d8531640b98b0c3c47ba8338708cf2650909d6379a306047ac12e42ecb5e154196121ee465878728f0bc49246c94c8c54eb172b2c444ce00e87459986fac5f74b7bd890c5f2efc227c2b11b8e123d39f1f9086e18fdb1832654675f1c385808105b4946e66cba71e86af4da482d40cb071ff54a7427f9abcf92dd0"]}]}, 0x104}, {&(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="780373d2c79b3c603f82a5e0d30f4ab10fc292fc14b6f3e290dae30f77bcdeaa4cac2154dc44ecb77e9877717dadf41c45e2e358ee4f1a8b663d283363cdef61c73d7d44f3bfd48be25bfd046ca4f22f41bb75d2070039456f4ed1ad874ddcc4bd29ad24f7facc5c64484f725a73af38ca786e1deeda3678bd37d2f31b83bcbb8509490f88487114317b870000d800860008008000020000000c008500810000000000000020008a002a7d6367726f75705c6e6f646576766d6e6574307b6e6f646576000076f463301dc47cb8e4857e1655951c5b8de01e11d202b51c74ec368edede76a245e93c8634fc5728022ed0856ac5eeeb0b640b60cde44b188ba9fccd60ecb0d34953a7ca8ce28b8f08fc3a9fa4634df23bd75e66611b2257f3e0163c0b87bbf0cc3a360c9177452d85c6632331c69d3bd41665183ccf64dfadb269d226dffd5a0008007d00e00000010c000700000000000000000008008f00", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x12a0}], 0x3, 0x0, 0x0, 0x40110}, 0x44005)

03:20:55 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(0xffffffffffffffff, r5, 0x0, 0xa5cc554)

03:20:55 executing program 0:
r0 = gettid()
rt_tgsigqueueinfo(0x0, r0, 0x0, 0x0)
r1 = getuid()
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r3=>0x0}, 0x0)
r4 = getegid()
setregid(r3, r4)
lchown(&(0x7f0000001000)='./file0\x00', r1, r4)
getpgid(r0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r5, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  872.089715] binder: 30754:30763 got new transaction with bad transaction stack, transaction 2230 has target 30754:30755
[  872.101993] binder: 30754:30763 transaction failed 29201/-71, size 0-0 line 3041
03:20:55 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:55 executing program 3:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000001000)={0x3, 0x0, 0x3, 0xd15c, 0x401, 0x57, 0x7, 0x81, 0x401, 0x7, 0xb8, 0x500000, 0x9, 0x3, &(0x7f0000001280)=""/255, 0x4, 0x7ff, 0xffff})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0xa4af68e430ce5bb)

03:20:55 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ppoll(&(0x7f0000001100), 0x0, &(0x7f0000001040)={0x77359400}, &(0x7f0000001140)={0x2}, 0x8)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:55 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(0xffffffffffffffff, r5, 0x0, 0xa5cc554)

03:20:55 executing program 3:
readv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:56 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000001500)={0x110, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0x13}, [@nested={0xfc, 0x9, [@generic="ed24cfea3f", @typed={0x8, 0x1a, @fd=r0}, @generic="a010f04353c4bf", @generic="1ef0c46d32e02aaf0fa2467fec8af75a136395517aab10249653870702c88d9f7f94a98828d5911d5d8fbeeb30d6cfa56237319e8ea73c19229442e63eb3bad23a26df03d1d09a670d0e69a475b4f94e722533e6fe3ef29e4bd5b068a64d258f8fd33a6a8ac91b108351662dac50dc29f05b71698da6bdcfd79b06edcf2495874e8911d12f71c4db6ba39c541aea9f46c69d856415b24cdc6518863fb8f504261c6b1d41953febfe1e62b2df7c3b61a5b7e06e548d378e50539f22d1b87626bfef0d50b38d75ff23d6b1c826d4d3f62009997b3899205222f2cb0770fd773a8bb9de0a"]}]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x40024054)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = gettid()
rt_tgsigqueueinfo(0x0, r2, 0x0, 0x0)
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x0, 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
read(r5, &(0x7f0000002940)=""/170, 0xaa)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000001000)=@kern={0x10, 0x0, 0x0, 0x8400012c}, 0xc, &(0x7f0000001040)=[{&(0x7f0000001280)={0x10c, 0x24, 0x400, 0x70bd27, 0x25dfdbff, "", [@generic="e23abf81cb848c65e2fec7d96ef40e36652ad4cffbf9ea7666ce38b63702a25c82430d873765253ff91665642b639ae6a535db1fd21cae15fcb8d7b4731c07225c1c6ab95ebebf26056980a3dd541cb1e3e87b4c413432ae6e74393eafeb1f20f730654400e6926d29c8d3565cf29844ef5f5d2a62314addecbaff06c99da64d10ccae6c970770df540550ddc4ce38edcdc79247c5cdbb026866130fb8f9f448273025aa892b8ec50f55e3b8c409481a3293be5dac46dfa85ab5792fbbca274bbdbd0f1e607dbfee19eb361b25ddb3dfd567c71ff6ae454bfa4a6a75c9114c4d1fc4d3b743426265e31f17d20106fb56f6913105d6dec40b68"]}, 0x10c}, {&(0x7f00000013c0)={0x104, 0x3c, 0x300, 0x70bd28, 0x25dfdbfc, "", [@nested={0xf4, 0x3a, [@typed={0xc, 0x57, @u64=0x7}, @generic="1f0ea2d9ceeb29e28e09f33ef8008579356aab35f6783f4794bde3a769f412896b9b3fa9c104f34f5325e8d85ccb1dfe5aca3242090239cb3746a04e98bfdba0f9863680ef62319e859776789ea084bca1cd0b57221cb25d6414b4eae33fd125f5041c6bde90d8531640b98b0c3c47ba8338708cf2650909d6379a306047ac12e42ecb5e154196121ee465878728f0bc49246c94c8c54eb172b2c444ce00e87459986fac5f74b7bd890c5f2efc227c2b11b8e123d39f1f9086e18fdb1832654675f1c385808105b4946e66cba71e86af4da482d40cb071ff54a7427f9abcf92dd0"]}]}, 0x104}, {&(0x7f0000002a00)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x12a0}], 0x3, 0x0, 0x0, 0x40110}, 0x44005)

03:20:56 executing program 3:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000001100)=0x401)
open(&(0x7f0000001000)='./file0\x00', 0x80, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
bind(r2, &(0x7f0000001040)=@l2={0x1f, 0x48de, {0x80, 0x0, 0x4, 0x8, 0x3, 0x40}, 0x3, 0x80}, 0x80)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  872.677824] binder: release 30746:30757 transaction 2229 out, still active
[  872.688982] binder: undelivered TRANSACTION_COMPLETE
[  872.702878] binder: release 30746:30747 transaction 2229 in, still active
[  872.716370] binder: send failed reply for transaction 2229, target dead
[  872.757674] binder: release 30754:30763 transaction 2230 out, still active
[  872.766590] binder: undelivered TRANSACTION_COMPLETE
[  872.782158] binder: BINDER_SET_CONTEXT_MGR already set
[  872.792018] binder: undelivered TRANSACTION_ERROR: 29201
[  872.792824] binder: 30754:30802 ioctl 40046207 0 returned -16
[  872.806836] binder: release 30754:30755 transaction 2230 in, still active
[  872.816441] binder: send failed reply for transaction 2230, target dead
[  872.839089] binder: 30754:30804 transaction failed 29189/-22, size 0-0 line 3014
03:20:56 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x2)
sendfile(0xffffffffffffffff, r5, 0x0, 0xa5cc554)

03:20:56 executing program 3:
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x5)
r1 = getgid()
setfsgid(r1)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:56 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000001040)={0x9, 0x3f, 0x0, 0x6})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000001280)=""/234)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_GET_NAME(r7, 0x81007702, &(0x7f0000001680)=""/4096)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r8 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
r9 = openat$cgroup_ro(r8, &(0x7f0000001000)='memory.events\x00', 0x0, 0x0)
ioctl$EVIOCGNAME(r9, 0x80404506, &(0x7f0000001380)=""/244)

[  872.855563] binder: undelivered TRANSACTION_ERROR: 29189
03:20:56 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000001100)=0x10)
r3 = socket(0x0, 0x3, 0x7f)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001280)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000001000)=0xe8)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001040)={r4, 0x1, 0x6, @local}, 0x10)

03:20:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:20:56 executing program 5:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:56 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x23aab33c201dcf86, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f0000001000)='./file1\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$binfmt_misc(r2, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xf1)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
statfs(&(0x7f0000001040)='./file0\x00', &(0x7f0000001100)=""/154)
ftruncate(r1, 0x1)

03:20:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x100, @mcast2, 0x10000000}, 0xfffffef5)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000300)={0xa, 0x1, 0xd9, 0xff}, 0x1f)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x1)
r4 = geteuid()
r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r4, r5)
stat(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = geteuid()
r8 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r7, r8)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8)
r11 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r12=>0x0}, 0x0)
r13 = getegid()
setregid(r12, r13)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r14, 0x0, 0x30, &(0x7f0000000000)={0xfffffff9, {{0x2, 0x0, @rand_addr=0x1}}, 0x0, 0xe9, [{{0x2, 0x0, @multicast2}}]}, 0xffeb)
getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000900)=0xe8)
r16 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r17=>0x0}, 0x0)
r18 = getegid()
setregid(r17, r18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="980200000000000003000000000000000200000000000000010000000000000001000000000000000c00000000000000080000000100000000000000000000009cffffffffffffffff7f0000000000000008000000000000400000000000000009000000000000004710000005000000000000008000000004000000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="0104000007000000000000000600000000000000d70f0100000000000f0000009af2ffff626465762d73656c696e757847504c00060000000000000002000000000000000200000000000000080000000000000006000000000800000500000000000000240000000000000000000100000000002c00000000000000010000000000000003000000000000000000000081ae0000ff7f00003f00000006000000", @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="050000000300000000000000070000000000000002000000000000000d000000001000002f6465762f62696e646572230023f7172e000000000000010100000000000004000000000000000000000e0500000001000000000000001f0a0000000000000000000000000000000000000000000007000000000000000300000000000000ff070000020000000100000040000000ffffff7f", @ANYRES32=r10, @ANYRES32=r13, @ANYBLOB="04000000030000000000000006000000000000000300000000000000000000000000090000000000000000000100000000000000020000000000000008000000000000009b000000020000000500000000000000010000000000000008000000000000000200000000000000800000000000000006000000000000008400000003000000060000000100000005000000", @ANYRES32=r15, @ANYRES32=r17, @ANYBLOB="00000000020000000000000006000000000000000900000000000000060000007e00000065746830047d0000"], 0x298)
r19 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r19, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r19, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r20 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r20, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000f9a70b0bd47a9e47a73659adb233de47a873d1c7e4b6f1a83854751acda6995a1c3bb00be5c5900d990e1d44e14312b727374f7aa936c7810a41cc4db80f0d53996e3184d671cf6fa568cca79bd41f70"], 0x0, 0x0, 0x0})
r21 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r21, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r21, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r22 = dup2(r21, r21)
write$UHID_GET_REPORT_REPLY(r22, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
truncate(&(0x7f0000000000)='./file0\x00', 0x8000)

03:20:56 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:20:56 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4086}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000005aa)
pipe2(&(0x7f0000001000), 0x88000)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000001040)={0x18, 0x1, 0x0, {0x1}}, 0x18)

03:20:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xfffffffffffffdea, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000640)={'nat\x00', 0x0, 0x3, 0xad, [], 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000700)=""/173}, &(0x7f0000000400)=0x50)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\nc,@'], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:56 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
getresgid(&(0x7f0000001280), &(0x7f00000012c0), &(0x7f0000001340))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4109, 0x100d}, {&(0x7f00000011c0)=""/136, 0x422}], 0x2)
getsockname$unix(0xffffffffffffffff, &(0x7f0000001040), &(0x7f0000001100)=0x6e)
ioctl$LOOP_SET_FD(r0, 0x4c00, r0)
removexattr(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=@known='system.posix_acl_default\x00')

03:20:56 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1a0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0), 0x20000188)

03:20:57 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/policy\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000001280)='./file0\x00', r1, &(0x7f00000012c0)='./file1/file0\x00', 0x2)
creat(&(0x7f0000001180)='./file0\x00', 0xa0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000001100)={'NETMAP\x00'}, &(0x7f0000001140)=0x1e)
getgid()
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000001040)={{0x2, 0x0, @descriptor="83cf7adab11eb630"}})

03:20:57 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dEv/zero\x00', 0x222000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  873.405797] binder: 30846:30858 unknown command 1076650762
[  873.414689] binder: 30846:30858 ioctl c0306201 20000600 returned -22
03:20:57 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/\x00', 0x206002, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/152, 0x98}], 0x2)
pipe2(&(0x7f0000001000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x8800)
write$FUSE_LSEEK(r1, &(0x7f0000001040)={0x18, 0x0, 0x7, {0xffffffff}}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000001080)=r5)

03:20:57 executing program 1:
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCGETS(r2, 0x5401, &(0x7f0000001080))
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001000)=0x100)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dp\xa6X\xdbero\x00', 0x44140, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:57 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:57 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001140)='/dev/zero\x00', 0xa001, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x50)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ppoll(&(0x7f0000001040)=[{r0, 0x1}, {r1, 0x200}, {r0, 0x110}, {r2, 0x124c1}], 0x4, &(0x7f0000001080)={0x77359400}, &(0x7f0000001100)={0x8}, 0x8)

03:20:57 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x74)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000240)=0x656, 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000200)=0xfff, 0x4)
sendto$inet(r1, 0x0, 0x198, 0x20000804, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendto$inet(r1, &(0x7f0000000480), 0xfffffffffffffdce, 0x0, 0x0, 0x150)
shutdown(r1, 0x1)
setsockopt$inet_tcp_int(r1, 0x6, 0xbced7f3c0380ef0, &(0x7f0000000000)=0x4, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cc463ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:57 executing program 0:
r0 = creat(&(0x7f0000001000)='./file0\x00', 0x90)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000001040)=0x7)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:57 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  874.120237] binder: release 30846:30863 transaction 2234 out, still active
[  874.129178] binder: undelivered TRANSACTION_COMPLETE
[  874.145885] binder: BINDER_SET_CONTEXT_MGR already set
[  874.155970] binder: 30846:30863 ioctl 40046207 0 returned -16
[  874.163580] binder: release 30846:30850 transaction 2234 in, still active
[  874.181754] binder: send failed reply for transaction 2234, target dead
03:20:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
prctl$PR_SET_KEEPCAPS(0x8, 0x1)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
eventfd(0x2)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000080000000000000000000000000000000000000000a93000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400"/268], 0xffeb)
accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0xc0800)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b6300000b6300000b3e08620328420eccb9faf6fd5b630000"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)='D'})
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0063404000000a00000000000000034b00000000000000000000000000000000000000000c16c955b527a928d06c29ace1566af28fbe49aa5e767fa6818362b1a1c7b5febc03cea43566c1085336fd95a61d17f915eda674ec91759de5ca8a3beecabbfd9550eafc555d9f9219dbbaa624fa73b3be91a7f5c6583a5a6c4995ff94ce099b332ba576e476ccfb51bfc2e7594be68300000000"], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x354, 0x0, 0x501, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5bb943}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e4efe7d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd483}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @local, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8dd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x975}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x354}}, 0x14)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:57 executing program 3:
munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='\x00d\x00v/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:57 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

[  874.237602] binder: 30846:30897 unknown command 1076650762
[  874.243685] binder: 30846:30897 ioctl c0306201 20000600 returned -22
[  874.250297] binder: 30846:30897 transaction failed 29189/-22, size 0-0 line 3014
[  874.259368] binder: undelivered TRANSACTION_ERROR: 29189
03:20:57 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='\x9a-{\fE\xe1\xd1+G\x00', 0x25474ed98b95f43e, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:57 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000001cb)

[  874.331756] binder: 30882:30896 got new transaction with bad transaction stack, transaction 2237 has target 30882:30889
03:20:58 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r7, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001000)={r7, 0x1, 0x6, @dev={[], 0x19}}, 0x10)

[  874.394715] binder: 30882:30896 transaction failed 29201/-71, size 0-0 line 3041
03:20:58 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = accept4$packet(r2, 0x0, &(0x7f0000001000), 0x80000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000003e80)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000003f80)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003fc0)={'team0\x00', r6})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  874.467592] binder_alloc: 30909: binder_alloc_buf, no vma
[  874.502232] binder: 30909:30916 transaction failed 29189/-3, size 0-0 line 3137
03:20:58 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:58 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000001000)={0x18, 0x1, 0x0, {0x8e3}}, 0x18)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:58 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000001100)=""/179)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fchmodat(r2, &(0x7f0000001000)='./file0\x00', 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FS_IOC_SETVERSION(r4, 0x40047602, &(0x7f0000001080)=0xd71)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xfffffe83}], 0x20000000000003bc)

03:20:58 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7})
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r7, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001000)={r7, 0x1, 0x6, @dev={[], 0x19}}, 0x10)

[  874.906605] binder: release 30882:30896 transaction 2237 out, still active
[  874.917402] binder: undelivered TRANSACTION_COMPLETE
[  874.923550] binder: undelivered TRANSACTION_ERROR: 29201
[  874.933232] binder: release 30882:30889 transaction 2237 in, still active
[  874.941895] binder: send failed reply for transaction 2237, target dead
03:20:58 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000001000)="9934dce762e7ebaf398b425605b1fcfb5a0e", 0x12}, {&(0x7f0000001040)="c43b10ac2933568a061fa9b245e27b675f53708f1ea11045d06948322ef9f92c5f6cf9bf8a552f1120aeb9c9b3d1c3a5ee1181b045af98f7e391aa18c6c5aae41dd034987e2877b4bac079a6b15d17e635c02fadec2a5ba392b51ec4a076a39df7737fa9e9cda565ff", 0x69}, {&(0x7f0000001100)="049a0b350191355eb044a6670cef4155b4314adac3d4c2815aa80bc02cb11ebfd109086283bb1e67d3a685896fe34277e1ad4accfafe6c759fa6acd1d2906f1976c496713ee6e8c33b978afad01378fda4f323231a6ec56012ea135d78d7585cec6614269af5fe8e8f94d6d016d889cb97098b44af3d780059f138002ac7c4ac51cab2b41dbb22fd364360f389299f1350d8477909a122fea02d688153", 0x9d}], 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000001540)={0xdb, 0x6, 0x934, 0x6, 0x8, 0x401})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r4 = dup3(0xffffffffffffffff, r3, 0xc0000)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000001580))
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/ptmx\x00', 0xe7b674be4415c46d, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
r8 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
r9 = openat$cgroup_int(r8, &(0x7f0000002700)='cpu.weight.nice\x00', 0x2, 0x0)
dup2(r6, r9)
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000002740)=ANY=[@ANYBLOB="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"])
write(r0, &(0x7f00000012c0)="7289d5baad2cafaf1012b77660d35d983205aa452da6e8076990a0d6e06a45f1501246682d6a87bedbd4a633067dade93e6aea9c02b5e422024ef7fd7136a2dedd594164f68d4debd241b00f01003696d724503acad658b7e81e5265b40d1b094e9bca351675fb6029fdabe82da337b88acbdb402ad9a18af76eb2d0f67d4228f3970fda2e733ab1afcc8e7a9576869f256a95cff6c01f8a04a2925dc7330f1cd7bbb5da1cf2f8ad2326abf165b158", 0xaf)

03:20:58 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000002680)=[{&(0x7f0000001100)=""/58}, {&(0x7f0000001280)=""/223}, {&(0x7f0000001380)=""/148}, {&(0x7f0000001680)=""/4096}, {&(0x7f0000001140)=""/118}, {&(0x7f0000001440)=""/34, 0x606}, {&(0x7f0000001480)=""/192}, {&(0x7f0000001540)=""/232}], 0x2000000000000319)

03:20:58 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:20:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:20:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RTC_EPOCH_READ(r1, 0x8004700d, &(0x7f0000001000))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080)='/dev/zero\x00', 0x280c00, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$void(r2, 0xc0045878)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000001040))

03:20:58 executing program 4:
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x109000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r2, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r6, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x5c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x8, 0x1f, 0xbd, 0x3f}]}}}]}}]}, 0x5c}}, 0x90)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:inetd_exec_t:s0\x00', 0x22, 0x3)
r7 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000340)="ff462a1fb9a519d41bee0e2c47162977aa43341d91f0b51a9a0a48f8dfccecce5008ca6136138295c5a44e8d3ede2b878528f71049b67480f7e6adf445033bfe7c91d4c95ca56ceb02d97cf993ecfd7a056156f84da075fb50699104f6512b72678d3735f2f49906a90b156c1ce8cdde801e27b1fd8abcd3aeb9c73d5b6531f6330881ceddc894c8dfcf708b9e661363f801adead738f6f99d0bda10f13f5d", 0x9f)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r10 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x2000, 0x3})
setsockopt$inet6_tcp_int(r11, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r12 = dup2(r11, r11)
write$UHID_GET_REPORT_REPLY(r12, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:20:58 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/146, 0x92}], 0x2)

[  875.181294] binder: undelivered TRANSACTION_ERROR: 29189
03:20:58 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write$input_event(0xffffffffffffffff, &(0x7f0000001040)={{}, 0x1f, 0xffff, 0x9}, 0x10)

[  875.367480] binder: 30963:30974 got transaction to invalid handle
[  875.374812] binder: 30963:30974 transaction failed 29201/-22, size -2668295318632961781--4160195710263511340 line 3014
[  875.456351] binder: 30963:30974 ioctl 4018620d 20000400 returned -22
03:20:59 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:20:59 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000001000)={0x2b, 0x7fff, 0xfffffffe, 0x3})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:59 executing program 3:
r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={'W\n8', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000001000)={0x9, 0x7fff, 0x9})
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
recvfrom$packet(r3, &(0x7f0000001040)=""/64, 0x40, 0x20, 0x0, 0x0)

03:20:59 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
times(&(0x7f0000001000))

03:20:59 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x10002, 0x0)
readv(r0, &(0x7f00000010c0), 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$int_in(r1, 0xfc85, &(0x7f0000000000)=0x5)

03:20:59 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001040)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x14, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4a44956522c5640a}, 0x1)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000001180)=0x8d7, 0x4)

03:20:59 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  876.122789] binder: undelivered TRANSACTION_ERROR: 29201
03:20:59 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/\x05\x00\x00\x1a\x00', 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000)='/proc/self/net/pfkey\x00', 0x80000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:20:59 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
bind$inet(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @empty}, 0x10)

[  876.193408] binder: 30963:30974 got transaction to invalid handle
[  876.205771] binder: 30963:30974 transaction failed 29201/-22, size -2668295318632961781--4160195710263511340 line 3014
[  876.239311] binder: 30963:30974 ioctl 4018620d 20000400 returned -22
03:20:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:20:59 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001140)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001180)={0x2c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x2c}}, 0x4000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000001000)=0x3)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x200000000000000a)
fstat(r0, &(0x7f0000001040))

03:20:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\vc\x00\x00c\x00\x00\x00\x00\x00\x00\x00'], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = memfd_create(&(0x7f00000000c0)='/dev/binder#\x00', 0x4)
fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000000)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  876.323141] binder: undelivered TRANSACTION_ERROR: 29201
[  876.494769] binder: 31025:31032 got new transaction with bad transaction stack, transaction 2246 has target 31025:31027
[  876.531076] binder: 31025:31032 transaction failed 29201/-71, size 0-0 line 3041
03:21:00 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:00 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RTC_PIE_ON(r2, 0x7005)

03:21:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0xd6183000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:00 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x10000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
lseek(r0, 0x1, 0x1)

03:21:00 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:00 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400000000000000000000000000000000004000"/268], 0xffeb)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001000)={@dev, @multicast2, <r2=>0x0}, &(0x7f0000001040)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001080)={'team0\x00', r2})
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r3, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
accept4(r4, 0x0, &(0x7f0000001100), 0x80000)
read$eventfd(0xffffffffffffffff, &(0x7f0000001140), 0x8)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$P9_RREADDIR(r5, &(0x7f0000001280)={0x103, 0x29, 0x2, {0x80, [{{0x424a97825a4866b9, 0x1}, 0x8, 0x8, 0x7, './file0'}, {{0x1a, 0x4}, 0x2, 0x40, 0x7, './file0'}, {{0x9, 0x3, 0x1}, 0x0, 0x0, 0x7, './file0'}, {{0x18, 0x2, 0x1}, 0xffffffffffff481f, 0x0, 0x7, './file0'}, {{0x64, 0x0, 0x1}, 0x800, 0x80, 0x7, './file0'}, {{0x38, 0x5, 0x3}, 0x0, 0x3, 0x7, './file0'}, {{0x80, 0x4, 0x5}, 0x2435671b, 0x4, 0x7, './file0'}, {{0x0, 0x1, 0x4}, 0x1, 0x91, 0x7, './file0'}]}}, 0x103)

03:21:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x20000000000003bc)

03:21:00 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
lseek(r0, 0xfffffff8, 0x1)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4098, 0x1002}, {&(0x7f0000001000)=""/155, 0x9b}], 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
sched_setparam(r1, &(0x7f0000000040)=0x400)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendfile64(r3, r4, &(0x7f0000000180)=0x40, 0x9)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000000c0))
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$setlease(r5, 0x400, 0x0)

[  877.182756] binder: release 31025:31032 transaction 2246 out, still active
[  877.190172] binder: BINDER_SET_CONTEXT_MGR already set
[  877.203382] binder: 31025:31036 ioctl 40046207 0 returned -16
[  877.216705] binder: undelivered TRANSACTION_COMPLETE
[  877.243803] binder_alloc: 31025: binder_alloc_buf, no vma
[  877.259985] binder: undelivered TRANSACTION_ERROR: 29201
[  877.299524] binder: release 31025:31027 transaction 2246 in, still active
[  877.300277] binder_alloc: 31025: binder_alloc_buf, no vma
[  877.313325] binder: 31025:31065 transaction failed 29189/-3, size 0-0 line 3137
[  877.353389] binder: 31025:31036 transaction failed 29189/-3, size 0-0 line 3137
[  877.390199] binder: send failed reply for transaction 2246, target dead
03:21:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x80000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r4, r4, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r5})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r5})
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r5, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000003980)=ANY=[@ANYBLOB="2c0001000080000004000100db0800833f8b1d409199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1fa791fbc5a9dfd815d7471342dd1934683ab68f1c9843a9bae620999c6ffb94b6c4172585433583ed4a5109ba5dcd279da86edda9219e2332df695377c0e01907d115ae73d5d10509c9ae870a824bd49a87336bde9ea283a087ce74f6714e2814967d861db007e72c0527174187284188570bba4c99b1149a1004f8f141203fa740a2a4c8ca4ca818a5155bfa5e647a18ada0a779c896272e4c8af00b438b8c31e8034d0e14442afa197503aec551a579"], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'vxcan1\x00', r5})

03:21:01 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x4b60, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000004c0)='./file0\x00', r1, &(0x7f0000000500)='./file1/file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f0000001000)='./file1/file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = dup2(r0, r1)
ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000480))
readv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/35, 0x23}, {&(0x7f00000002c0)=""/255, 0xff}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/18, 0x12}], 0x7)

03:21:01 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  877.417842] binder: undelivered TRANSACTION_ERROR: 29189
[  877.474588] binder: undelivered TRANSACTION_ERROR: 29189
03:21:01 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:01 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
dup2(r2, r2)
setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)="0d2544e9afeeff250051111489f7eba011a54c12ec7737070f9789c511d9d19fb25a3998da8356724809c19aed48725678695fb3ec274cfb5b817652", 0x3c)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2d634840c61acf29cde5f3517466c1f7ffffffffffffff9e898a90139849548140e34a79647069e071cd8b1b2a20949f75a549478db7d811091e1ba0dbaf82088cf19d60c992c71954312aea3ed4f2765dd90805af73f2b7f1a7b6f24139e79e463de6d377dd7c88c14280ecf4f9a19c2669b81c853e6c9afaf632b52d12446ce49c2e260ba27939e4fd47f70902cbada3d4d9910623cb39d2562806b7ed4a6f4b94878aac5b84971dd99f148154daf8007d1dc7fb9fac"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:01 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e21, @rand_addr=0x7}, {0x6, @random="e08a827b1a97"}, 0x12, {0x2, 0x4e23, @multicast2}, 'veth1\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:01 executing program 0:
pipe(&(0x7f0000001280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x4)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r2 = getpgrp(0x0)
syz_open_procfs(r2, &(0x7f0000001140)='setgroups\x00')
r3 = gettid()
rt_tgsigqueueinfo(0x0, r3, 0x0, 0x0)
ptrace$setregset(0x4205, r3, 0x3, &(0x7f0000001100)={&(0x7f0000001000)="4fc09f4f522aa72a9c65452f6e22e9cc1ddb9932dbdf79ce93374d573a9f0908c3890f2fcd0620296701d740bf23b121467ef8f6cb75b813d45e39046412ef46e62716ed503c18d5c65b011148d5063c343b9a0eefa64bfbea38cd767ebd4607b52a4fdfb37dda94326f8270d98ad03af4fc658868fa92612b7a4739fe8adeddebb87a0b9384425aad1c56c19cdfd7f78c45d452bda3a9cf57f3742923bd622f4d2738a4c06ba5c149308b69adf1e69ecece204f3b43", 0xb6})
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:01 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x4000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000001480)={@empty, 0x4e})
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)={0x1c8, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
lseek(r0, 0x3, 0x1)
getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000001000), &(0x7f0000001040)=0x295)

03:21:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x12f0}, {&(0x7f0000001000)=""/140, 0x8c}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000001280)={0x3, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @loopback}}}, 0x104)

[  878.011575] binder: 31089:31101 unknown command 1078485805
[  878.020392] binder: 31089:31101 ioctl c0306201 20000600 returned -22
03:21:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

[  878.103873] binder: 31091:31110 got new transaction with bad transaction stack, transaction 2252 has target 31091:31096
[  878.138932] binder: 31091:31110 transaction failed 29201/-71, size 0-0 line 3041
03:21:01 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={<r1=>0xffffffffffffffff})
fchdir(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
clone(0x8020a180, &(0x7f0000001680)="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", &(0x7f0000001080), &(0x7f0000001100), &(0x7f0000001280)="e87adc8393f801653845c5cac6345c099b12ff8857dee03e9d2805a957584c5040ba951c48667cf3e991882af788bd55c2c3f6e76bce62688255b75992b3a8818cc3a1868bfeee9c2077bee4f74f856feb1c98b32428a132702336d8ebf44ac5e54cb55500eebbb3e43068a048ff49d28ff3d65703191a20dc91c8c88c07e6e0691cf8eba3a9a0b4fe8c6fb65118b1dcb97eddc106db15db4d43f09876e90e281be9ab97a373eb0ceb378aa71c07b13a2d894955870c07c9ec60483571e51f487ecf0555f5b40fd642")
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
socketpair(0x5, 0x1, 0x8, &(0x7f0000001140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_inet_SIOCGIFADDR(r4, 0x8915, &(0x7f0000001180)={'netdevsim0\x00', {0x2, 0x4e22, @multicast1}})
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000001000))
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001440)=<r5=>0x0)
r6 = gettid()
rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0)
setpgid(r5, r6)
getsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000001380), &(0x7f00000013c0)=0x4)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/checkreqprot\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:02 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = syz_open_dev$binderN(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x800)
socketpair(0x11, 0x1, 0x1, &(0x7f0000001100)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001140))
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001040)={0x2, 0x3d, "8e508692875887ea226419775189c90831f04d800e7a4cb26341013fde393a40b252a99e75676fc7b49476341981f0006afbca88a8067935a1459ba27a"})
ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000001680)=""/4096)

03:21:02 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$evdev(r1, &(0x7f00000002c0), 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f0000001000), 0x20000000000003bc)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000000)={0x10000, 0x1b, 0x2, 0x2, 0xa, [{0xcc3c, 0x80000000, 0x100000001, 0x0, 0x0, 0x800}, {0x5, 0x8000, 0x7, 0x0, 0x0, 0x4}, {0x100, 0x33a3, 0x100000001, 0x0, 0x0, 0x800}, {0x6, 0x6, 0x2, 0x0, 0x0, 0x500}, {0x9, 0x7, 0x0, 0x0, 0x0, 0x400}, {0x4, 0x1, 0x0, 0x0, 0x0, 0x2000}, {0x6, 0x5, 0x2, 0x0, 0x0, 0x6089}, {0x101, 0x60, 0xffffffffffff8f38, 0x0, 0x0, 0x1801}, {0x8, 0x1f, 0x2, 0x0, 0x0, 0x402}, {0x401, 0x3f0d, 0x4, 0x0, 0x0, 0x1900}]})

03:21:02 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
preadv(r1, &(0x7f0000001540)=[{&(0x7f0000001000)=""/89, 0x59}, {&(0x7f0000001280)=""/213, 0xd5}, {&(0x7f0000001080)=""/42, 0x2a}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000001100)=""/12, 0xc}, {&(0x7f0000001140)=""/75, 0x4b}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000001480)=""/156, 0x9c}], 0x8, 0x80000000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  878.502804] binder: 31133:31134 ioctl c0046686 20001040 returned -22
[  878.758081] binder: release 31089:31112 transaction 2253 out, still active
[  878.765637] binder: BINDER_SET_CONTEXT_MGR already set
[  878.771505] binder: undelivered TRANSACTION_COMPLETE
[  878.776887] binder: release 31091:31110 transaction 2252 out, still active
[  878.790785] binder: 31089:31112 ioctl 40046207 0 returned -16
03:21:02 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  878.805990] binder: undelivered TRANSACTION_COMPLETE
[  878.822997] binder: 31089:31147 unknown command 1078485805
[  878.829002] binder: undelivered TRANSACTION_ERROR: 29201
[  878.835374] binder: 31089:31147 ioctl c0306201 20000600 returned -22
03:21:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:02 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/uts\x00')
ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000001040)=0x5)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:02 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/133, 0x85}], 0x2)

03:21:02 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001280)=0xffffffffffffffff, 0xfffffe19)
fsetxattr(r1, &(0x7f0000001180)=@known='com.apple.FinderInfo\x00', &(0x7f00000012c0)='GPL,\x12)#+\x00', 0x9, 0x1)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x5)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x40000, 0x0)
ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000001040))
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
dup2(r4, r4)
getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000001100)=ANY=[@ANYBLOB="66696c74657200ff00002e010000000000000000000000000000002d000000fe9aa843985dd81310397aebe81db78eaee22966c90a2511bc2101ea6e569e6f9118c59effed2ba22b08d7217c0000000000"], &(0x7f0000001080)=0x51)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:02 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  878.855071] binder: release 31089:31092 transaction 2253 in, still active
[  878.863616] binder: 31089:31112 transaction failed 29189/-22, size 0-0 line 3014
[  878.894882] binder: send failed reply for transaction 2253, target dead
03:21:02 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='\xff\xff\b\x00\xdf\xff\x00@\x00', 0x301800, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
futimesat(r2, &(0x7f0000001300)='./file1/file0\x00', &(0x7f0000001340)={{0x0, 0x7530}, {0x77359400}})
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readlinkat(r3, &(0x7f0000001080)='./file1/file0\x00', &(0x7f0000001280)=""/29, 0x1d)
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
renameat2(r4, &(0x7f0000001380)='./file0\x00', r5, &(0x7f00000013c0)='./file0\x00', 0x57673ad0057691b)
syz_open_dev$mice(&(0x7f0000001400)='/dev/input/mice\x00', 0x0, 0x22fb72bc3e5b55bf)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x2)
readlinkat(r1, &(0x7f0000001000)='./file0\x00', &(0x7f0000001100)=""/137, 0x89)

03:21:02 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000001040)='./file1/file0\x00', 0x2000, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000001000)=0x4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
pwrite64(r0, &(0x7f0000001280)="20e3cc38fd3660b8a127a5a60f3d9060cbd1d00814ef404dd50cad97e6ee52843cb629286a94366ea53201fd4458e7f41256466b66914aca21b0c399782e0d5895bd82a1c64bde338aa7ae2a465ade198e1e959b7d42ba51e551c8d7bb420f75eae5a180b9574299e1a820fbab1cc31f4d9a0c7224af0f94ce71993c565f3e8cb4673f50057b01051ac6359788970033b758ebd1d3eb71f69ff590a4f7c87ed5ffd43ba123c49269b17bbfcbafdc268302cb11f3a4bcb10c630b8e0660ca0d7e4d5c212d549b55733a775431165126a7614e3a", 0xd3, 0x8000)

[  878.915219] binder: undelivered TRANSACTION_ERROR: 29189
03:21:02 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='\xff\xff\b\x00\xdf\xff\x00@\x00', 0x301800, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000012c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
futimesat(r2, &(0x7f0000001300)='./file1/file0\x00', &(0x7f0000001340)={{0x0, 0x7530}, {0x77359400}})
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readlinkat(r3, &(0x7f0000001080)='./file1/file0\x00', &(0x7f0000001280)=""/29, 0x1d)
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
renameat2(r4, &(0x7f0000001380)='./file0\x00', r5, &(0x7f00000013c0)='./file0\x00', 0x57673ad0057691b)
syz_open_dev$mice(&(0x7f0000001400)='/dev/input/mice\x00', 0x0, 0x22fb72bc3e5b55bf)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x2)
readlinkat(r1, &(0x7f0000001000)='./file0\x00', &(0x7f0000001100)=""/137, 0x89)

[  878.958885] binder: release 31091:31096 transaction 2252 in, still active
[  878.985867] binder: send failed reply for transaction 2252, target dead
03:21:02 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000001040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r0 = open(&(0x7f00000010c0)='./file0\x00', 0x80, 0x80)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001200)="9b83aa87328023aa42bc471aab8212b6dfa326b8c38ab330318a51e33e2dca9e77a471011c", 0x25)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000011c0)={0x2, 0x5, 0xa000}, 0x4)
readv(0xffffffffffffffff, &(0x7f0000001080)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/140, 0x8c}], 0x2)

03:21:02 executing program 3:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0)
pipe(&(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800)
write(r2, &(0x7f00000001c0), 0xbab230cf)
read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = gettid()
rt_tgsigqueueinfo(0x0, r4, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
keyctl$join(0x1, &(0x7f0000000180)={'syz'})
ioctl$TIOCGPGRP(r1, 0x540f, 0x0)
syncfs(r0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
getuid()
r5 = openat$cgroup_ro(r1, &(0x7f0000000480)='\xe3group.stat\x00\xccz\x15\v\xb9P\xbc\xaf\x14\xfe\'/\x01\x8b\xe7\x03cm\xca\xfb)\x80\xcaN\x97\xbaz\x95K\xfb\xeaM\x8aa\xc5\xb6\xd9\f\x18t\x97\xf5@\xaci>\xa9\xf3\\\xa2b\xf3\xf4\xf1\x04\xc7nqi\xce\x1dJ\xd1\xc3{\x06S\x00G\xca\x98*Y\xf44p\xfd\xfc\xa4\xaf\xc4\x8f\x10\xea\xb2v\xe5\x84z\xddcQ\xcd\x90\xecI\x90c\xcfHh\xbc\xdf\xc0\x9f\xb5\x8b,\x9c\xf2\x02\xfe\xf3C\xef\x95\x03\xcd(\x12KM\x96\xc8\xa8\v\xc0\xf2\x8b\x0em\xd7\xdejj\x9boS=\x81\x0f\x1d\r.\xeb\xe2\x8f\xc4I\xeb\x92\x00\xb7\xcc<\x94\x99nAh\xe8\b\f\xc98\xbc\x18\x96s\xa78j\xe6{j\xf2\x8f\xf3\xcdq\x85\xcf\xa9\xfb\x1e\xc2\xf5sC\xb0\xac\xe6\xf2\x1a\xa5\xed\xafk\xc2\xd5\x89\xa1\r\\ahNM\xe1R\x99\xd8\x84', 0x0, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0xfffffd4b)
write$FUSE_STATFS(r5, &(0x7f0000000680)={0x60, 0x0, 0x5, {{0x800, 0x5, 0xb3d, 0x3d996fec, 0x9e, 0x7, 0x6, 0x9}}}, 0x60)
syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00\x00\x00\x00\x00\x06\x00', 0x1001})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2')

03:21:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001040), &(0x7f0000001080)=0x14)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000001000)={0xa, 0xfffc, 0x10000, @rand_addr="2bcb967a3aeacdfc1600"}, 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RTC_WIE_ON(r1, 0x700f)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  879.102733] binder: 31160:31177 got new transaction with bad transaction stack, transaction 2257 has target 31160:31166
[  879.157681] binder: 31160:31177 transaction failed 29201/-71, size 0-0 line 3041
03:21:03 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  879.768226] binder: release 31160:31177 transaction 2257 out, still active
[  879.776825] binder: BINDER_SET_CONTEXT_MGR already set
[  879.783070] binder: 31160:31187 ioctl 40046207 0 returned -16
[  879.787215] binder: undelivered TRANSACTION_COMPLETE
[  879.787232] binder: undelivered TRANSACTION_ERROR: 29201
[  879.787279] binder: release 31160:31166 transaction 2257 in, still active
[  879.787284] binder: send failed reply for transaction 2257, target dead
[  879.827639] binder: 31160:31199 transaction failed 29189/-22, size 0-0 line 3014
03:21:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:03 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/create\x00', 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_GET_SECCOMP(0x15)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000001cb32264d476371b03cd00"/273], 0xffeb)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000001000))

03:21:03 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x20010, r1, 0x2ccb9000)

03:21:03 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  879.886486] binder: undelivered TRANSACTION_ERROR: 29189
03:21:03 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
write$P9_RLERROR(r0, &(0x7f0000001000)={0x21, 0x7, 0x2, {0x18, 'vboxnet1securityvboxnet1'}}, 0x21)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:03 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x4400, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4094}, {&(0x7f0000001000)=""/151, 0xf7}], 0x200001a0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x2)

03:21:03 executing program 1:
rename(&(0x7f0000001000)='./file0\x00', &(0x7f0000001080)='./file0\x00')
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4096, 0xae6}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x322)

03:21:03 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000)={<r1=>0x0}, &(0x7f0000001040)=0xc)
sched_setaffinity(r1, 0x8, &(0x7f0000001080)=0x8)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x10000, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  880.098756] binder: 31212:31227 unknown command 1078485762
[  880.134033] binder: 31212:31227 ioctl c0306201 20000600 returned -22
03:21:03 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/134, 0xffffffffffffff28}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="000000a124000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d11625783b68cd45d2f9cd4f2a4b459563bdcd6d05d079d42b04e2a8829ce37c7e4d85690e08f4dc87a3aae28c2a80bf03cfb44fdfa320"], 0xffeb)
setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000001040)={0x5, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @loopback}}}, 0x104)

03:21:04 executing program 3:
r0 = socket(0x10, 0x20000000000003, 0x0)
recvmmsg(r0, &(0x7f0000001cc0), 0x0, 0x0, &(0x7f0000000100))
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x1e, 0x1ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x9)

03:21:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000)='/dev/keychord\x00', 0x44080, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:04 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x100082, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vga_arbiter\x00', 0x602800, 0x0)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000001040), &(0x7f0000001080)=0x4)

[  880.803841] binder: BINDER_SET_CONTEXT_MGR already set
[  880.809604] binder: 31212:31227 ioctl 40046207 0 returned -16
[  880.812561] binder: release 31212:31227 transaction 2261 out, still active
[  880.812565] binder: undelivered TRANSACTION_COMPLETE
[  880.812619] binder: release 31212:31214 transaction 2261 in, still active
[  880.812624] binder: send failed reply for transaction 2261, target dead
03:21:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
fcntl$getflags(r0, 0x400)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
openat$cgroup_int(r4, &(0x7f0000000000)='memory.high\x00', 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0xe04, 0x4, 0x235, 0x100}, 0x10)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:04 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

03:21:04 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x60)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000080)=0x80000000)
fcntl$setstatus(r0, 0x4, 0x42c00)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x140, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e)
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
socket$key(0xf, 0x3, 0x2)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4100, 0x1004}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendfile64(r0, r6, &(0x7f0000000340), 0x1)
r7 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
fsetxattr$security_capability(r7, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x8, 0x6}, {0xffe, 0x5}], r8}, 0x18, 0xb56dbccc85ee0d73)

03:21:04 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:04 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000180))
pipe(&(0x7f0000000640)={<r3=>0xffffffffffffffff})
read(r3, &(0x7f0000000200)=""/250, 0xfa)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000700099901000000000000ffffff00"], 0x10}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
accept4(r6, 0x0, 0x0, 0x0)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
dup3(r5, r6, 0x40000)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f00000001c0), 0xfffffef3)
r8 = open(0x0, 0x20141042, 0x0)
ftruncate(r8, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r10=>0xffffffffffffffff})
ioctl$EVIOCSABS3F(r10, 0x401845ff, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x7f})
read(r10, 0x0, 0x0)
r11 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182)
r12 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r12, &(0x7f0000000340)=[{0x0}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r12)
sendfile(r11, r11, 0x0, 0x2000005)
ioctl$LOOP_CLR_FD(r11, 0x4c01)
r13 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r13, &(0x7f0000000280)='./file0\x00')
mkdirat(r13, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r13, &(0x7f00000001c0)='./file0\x00', r13, &(0x7f0000000100)='./file1/file0\x00', 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r14 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r14, &(0x7f0000000280)='./file0\x00')
mkdirat(r14, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r14, &(0x7f00000001c0)='./file0\x00', r14, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r15 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r15, &(0x7f0000000280)='./file0\x00')
mkdirat(r15, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r15, &(0x7f00000001c0)='./file0\x00', r15, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup3(r14, r15, 0x80000)
ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x3)
openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x2000, 0x0)
syncfs(r1)

03:21:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
fchdir(r0)
close(r0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  880.855152] binder: 31212:31257 unknown command 1078485762
[  880.870699] binder: 31212:31257 ioctl c0306201 20000600 returned -22
[  880.878019] binder: 31212:31227 transaction failed 29189/-22, size 0-0 line 3014
[  880.887262] binder: undelivered TRANSACTION_ERROR: 29189
03:21:04 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001000)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000001100)=0x1f)
r2 = geteuid()
r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$get_persistent(0x16, r2, r3)
r4 = request_key(&(0x7f0000001140)='.dead\x00', &(0x7f0000001180)={'syz', 0x0}, &(0x7f0000001280)='lo\xd6keyring@em1mime_type\\\x00', r3)
keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000012c0)='trusted.overlay.redirect\x00', &(0x7f0000001300))
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000001040)='trusted.overlay.redirect\x00', &(0x7f0000001080)='./file0\x00', 0x8, 0x1)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:04 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5756fb8fb326a2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="cc3d3e638ddcda80c37ca4557bd2f1c89fb44e4429b180d9ff663070c5c6a343b1eaa3cba0362d9f4944d48d6c5942c0204180c21bef65d373dedee27a9902cc54ebd66b924d4710fbba5bb358", 0x4d, 0xfffffffffffffff8)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f00000001c0)={0x1, 0x7, 0x5})
fallocate(r3, 0x7, 0x1, 0x40)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'U+', 0x4}, 0x28, 0x0)
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = dup(r4)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00')
mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080), 0x1c)
r9 = dup2(r8, r8)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$selinux_load(r5, &(0x7f00000003c0)=ANY=[], 0x7a0c)
r10 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_GET_THP_DISABLE(0x2a)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
ioctl$EVIOCREVOKE(r10, 0x40044591, &(0x7f0000000200)=0xee)

03:21:04 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='\x00\x00\x04\x00\x00\x00\x00\xe1\x00', 0x2800, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  881.075854] binder: 31271:31283 got new transaction with bad transaction stack, transaction 2264 has target 31271:31273
[  881.112942] binder: 31271:31283 transaction failed 29201/-71, size 0-0 line 3041
03:21:04 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendfile(r0, r1, &(0x7f0000001000), 0x4720000)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:04 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCSETXF(r2, 0x5434, &(0x7f0000001000)={0x6, 0xb, [0x400, 0x6, 0x7f, 0x6, 0x5], 0xc7})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  881.761037] binder: release 31271:31283 transaction 2264 out, still active
[  881.768931] binder: BINDER_SET_CONTEXT_MGR already set
[  881.774677] binder: 31271:31290 ioctl 40046207 0 returned -16
[  881.780489] binder: undelivered TRANSACTION_COMPLETE
[  881.780506] binder: undelivered TRANSACTION_ERROR: 29201
[  881.780556] binder: release 31271:31273 transaction 2264 in, still active
[  881.780561] binder: send failed reply for transaction 2264, target dead
[  881.858249] binder: 31271:31310 transaction failed 29189/-22, size 0-0 line 3014
03:21:05 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r2 = openat$selinux_status(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000340))
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/100, 0x64, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r5 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:05 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/de\x03\x00zero\x00', 0x200400, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001140)='reno\x00', 0x5)
ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000001100)={0x7f, 0x401})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0xa4080008}, 0xc, &(0x7f0000001040)={&(0x7f0000001280)={0x1a0, 0x3b, 0x0, 0x70bd26, 0x25dfdbfd, {0x15}, [@generic="778eca9c00a1b2d62bf56533f1f78c5f0fe0d82e139e1c90fad20ef034b395969d0d7bb6a021633155726fc66dfc6e3a0e4c8406972e743fd87da4e78410abb1b34c6e148326715c61bd9bff2ac4c834edf03213b20b0a46963f089af49478375e4765f418996b0853efd33bca377012c1a77676edefe81c6bc7a72e6be5e8d8212508f4f53924f48afba1b59c", @generic="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"]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:05 executing program 5:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:05 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001000090468fe07002b0000000000ff0701000000450001070000001419001a00120002000e00010009002500"/57, 0x39}], 0x1)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ftruncate(r1, 0x7)

[  881.920019] binder: 31271:31312 transaction failed 29189/-22, size 0-0 line 3014
[  881.929404] binder: undelivered TRANSACTION_ERROR: 29189
[  881.934950] binder: undelivered TRANSACTION_ERROR: 29189
03:21:05 executing program 3:
r0 = socket(0x10, 0x3, 0x7)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000080)={'sit0\x00', @ifru_flags})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @mcast2, 0x2}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000040)=0x7)

03:21:05 executing program 0:
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082)
r3 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="90", 0x1}], 0x1, 0x401081806)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
r6 = gettid()
rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="170000001000"/44]})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000012c0)={0x0, <r8=>0x0}, &(0x7f0000001300)=0xc)
r9 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
setxattr$system_posix_acl(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000001000000000000000200ed91", @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB="02001799", @ANYBLOB="02000100f51dfce8d2d90e2ddd7d306661fb2f0995d3", @ANYRES32, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0xb, 0x0)
r10 = getegid()
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r6, r8, r10}, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x2000005)
pipe(&(0x7f0000000280)={<r11=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYRES16], 0x1}}, 0x4000)
syz_genetlink_get_family_id$tipc(0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r11, &(0x7f0000000440), 0x0, 0x11)
fchdir(r12)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(r13, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYBLOB="c7e9e7b0f40062efb6bd7e7a12f27413b1b934e30844340737bacc20d99d27fd54aa3f1cf49bf82bbfb0f070f886af42da965b3d63eba504a8057369dceecad09a1c4d86aeead565d01719fe7acfae62c6ade91948ed873fa086779e8555c4f798b3b06070859ef1e76c292e4170e25e"], @ANYRESDEC=0x0, @ANYRES32=r13], 0x3}, 0x1, 0x0, 0x0, 0x220000c0}, 0x1)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da", [0x0, 0x20]})
ioprio_set$uid(0x3, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)

03:21:05 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x200000000000040c)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3ff)
rt_sigreturn()

03:21:05 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6100)
fcntl$setflags(r1, 0x2, 0x1)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$F_GET_RW_HINT(r2, 0x40b, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @empty}, 0xffffffffffffff31)
connect$inet(r4, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r4, r4, 0x0, 0xffffffff80000001)
lseek(r1, 0x0, 0x2)
sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe)
socket$inet6(0xa, 0x80004, 0x0)
sendfile(r1, r5, 0x0, 0xa5cc554)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x42602, 0x0)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
r7 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r7, &(0x7f0000000000)=ANY=[], 0x323)
r8 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0)
write$FUSE_POLL(r8, &(0x7f0000000200)={0x18, 0x0, 0x8}, 0x18)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0x3a107deedd894bb9)
sendfile(r7, r8, &(0x7f0000000140), 0x8fff)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000380)=@req={0x0, 0x1, 0x1f, 0xfffffff9}, 0x10)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000940))

[  882.079071] binder: 31322:31331 unknown command 33554432
[  882.103870] binder: 31322:31331 ioctl c0306201 20000600 returned -22
03:21:05 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @local}}, 0x0, 0x1, [{{0x2, 0x0, @broadcast}}]}, 0x10c)
ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000001140)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001100)='ip6gretap0\x00', 0x400, 0x1f, 0x4cf})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000001380)={@rand_addr, @initdev}, &(0x7f00000013c0)=0x8)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/policy\x00', 0x0, 0x0)
sendto$inet(r2, &(0x7f0000001440)="d93821f08825b96f0353f62ec45171ec9be405dc91218ba7f5950cd2418e2be5a85e90fe20b1e4ce91616040e4cd187d2d6393", 0x33, 0x1000, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000001040)={0x1, 0x2, 0x1000, 0xe9, &(0x7f0000001280)="bfe9cc395f3ad99579c3a59489d5ed65140ba4647779ec9f769ff43e648368cc643e0e054d9a2efacddb7d8b42ac666b2a6d19b301735d1881904bc31ac44beba44ecf60a35470d67f2c3ce8df36b99b77ecd5de13f57e603731fc6073dec144986630201845679e991b8dfc8cbb06786cd5669945f2c359ea9115a4cf3f057f4ce4cc8d92781cd8c6f1f14bcb2624ae9aa7d3fc0075cf642e81a7ad940224e8f201c3cb6a5a05c20b35763c9acebd5d718a1ca62f719a8e0c8e8d05b44ec2a71de7e6ce460d4e759daa0cb2a4f76a2c373158fe02bb6d5e4b60c91fc30fa96bcdce492d4b3a4294e5", 0x15, 0x0, &(0x7f0000001000)="c0d123b53d1fbce0f069c5abe2c2935ae6d51ac8f1"})

[  882.313265] Dead loop on virtual device ip6tnl0, fix it urgently!
03:21:06 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001040)=""/114)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vga_arbiter\x00', 0x10480, 0x0)
r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001180)='/selinux/member\x00', 0x2, 0x0)
r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/load\x00', 0x2, 0x0)
sendfile(r2, r3, 0x0, 0x8000)
read(r1, &(0x7f0000001280)=""/76, 0x4c)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vga_arbiter\x00', 0xa00, 0x0)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r4, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:06 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x20000000000003bc)

[  882.775535] binder: release 31322:31331 transaction 2269 out, still active
[  882.775922] binder: BINDER_SET_CONTEXT_MGR already set
[  882.775932] binder: 31322:31331 ioctl 40046207 0 returned -16
[  882.800240] binder: undelivered TRANSACTION_COMPLETE
[  882.806252] binder: release 31322:31324 transaction 2269 in, still active
[  882.819723] binder: send failed reply for transaction 2269, target dead
03:21:06 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:06 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x113200, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x3c)

03:21:06 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:06 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  882.846044] binder: 31322:31367 unknown command 33554432
[  882.852197] binder: 31322:31367 ioctl c0306201 20000600 returned -22
[  882.859097] binder: 31322:31367 transaction failed 29189/-22, size 0-0 line 3014
[  882.867960] binder: undelivered TRANSACTION_ERROR: 29189
03:21:06 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001040)=0xff)
ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000001000)=0x1)

03:21:06 executing program 1:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000001040), 0x4)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
prctl$PR_SET_FPEMU(0xa, 0x2)
r2 = inotify_init1(0x800)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001100)={<r4=>0x0}, &(0x7f0000001140)=0xc)
fcntl$setown(r1, 0x8, r4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080)='/dev/net/tun\x00', 0x10000, 0x0)
dup2(r2, r5)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xffffffc7}], 0x20000000000003bc)

[  883.035694] binder: 31378:31384 got new transaction with bad transaction stack, transaction 2272 has target 31378:31379
[  883.051962] audit: type=1400 audit(1574911266.662:93): avc:  denied  { connect } for  pid=31332 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  883.090100] binder: 31378:31384 transaction failed 29201/-71, size 0-0 line 3041
03:21:06 executing program 0:
socket$key(0xf, 0x3, 0x2)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
add_key$keyring(&(0x7f0000000080)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082)
r3 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0)
pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="90", 0x1}], 0x1, 0x401081806)
r4 = creat(&(0x7f0000000580)='./bus\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
r6 = gettid()
rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="170000001000"/44]})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000012c0)={0x0, <r8=>0x0}, &(0x7f0000001300)=0xc)
r9 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
setxattr$system_posix_acl(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='system.posix_acl_default\x00', &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000001000000000000000200ed91", @ANYRES32=0xee01, @ANYRES32=r8, @ANYBLOB="02001799", @ANYBLOB="02000100f51dfce8d2d90e2ddd7d306661fb2f0995d3", @ANYRES32, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="10000000000000002000030000000000"], 0xb, 0x0)
r10 = getegid()
setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={r6, r8, r10}, 0xc)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x2000005)
pipe(&(0x7f0000000280)={<r11=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYRES16], 0x1}}, 0x4000)
syz_genetlink_get_family_id$tipc(0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r11, &(0x7f0000000440), 0x0, 0x11)
fchdir(r12)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r13, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
dup2(r13, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYBLOB="c7e9e7b0f40062efb6bd7e7a12f27413b1b934e30844340737bacc20d99d27fd54aa3f1cf49bf82bbfb0f070f886af42da965b3d63eba504a8057369dceecad09a1c4d86aeead565d01719fe7acfae62c6ade91948ed873fa086779e8555c4f798b3b06070859ef1e76c292e4170e25e"], @ANYRESDEC=0x0, @ANYRES32=r13], 0x3}, 0x1, 0x0, 0x0, 0x220000c0}, 0x1)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da", [0x0, 0x20]})
ioprio_set$uid(0x3, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)

03:21:06 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = inotify_init1(0x0)
fcntl$setpipe(r2, 0x407, 0x3ff)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup2(r1, r0)

03:21:06 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r2 = openat$selinux_status(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
timerfd_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000340))
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
pread64(0xffffffffffffffff, &(0x7f00000003c0)=""/100, 0x64, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r5 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000002"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:06 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000001000)='./file1/file0\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001380)={0x2, 0x6, 0xff, 0x8, 0x30, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x80000000}}, @sadb_address={0x5, 0x17, 0x32, 0x1d0, 0x0, @in6={0xa, 0x4e24, 0x7, @remote, 0x20}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d3}, @sadb_x_sec_ctx={0x1e, 0x18, 0x1, 0x23, 0xe5, "c0c7bc62d9df1c49ceac7a9f3e9f4c1bf0544c58d4b5e70d518db4ffc4e6582ac6fd77cc6ff9a11a7822185d0914d5fb5ea58c2dd26aa0f49aa0e0f857315d1eb79a47fb9c3b865d32ac817eaa170ac51a6e278137322625ddc6149269c1d9d88da03fc05a59d6c71b23aecb465a7f16cad1324d2f405765923863a72dcc7d9ca30e4c72e98ffb964a8f184566bf49f8f6302104d55099d21f80308fa260fe5443529ac1c8778883a3795070ff77fbc26228a55c34c757e039262d6597ee6ec1e826bc22cf3c73ba71eccd4a4a61adcc6eeaab496f1890544bc8a1221e69a1aaacd7031e90"}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x8}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x180}}, 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_netdev_private(r2, 0x89f5, &(0x7f0000001040)="ef927489969489c06eb8d036b90a0a14b80c415574d0219ec97860a40a2bad602b2013a41822e292ab205b938004ca1c87a45fbd12ca3e67fdf1a2e13ce253fbf0218f06b598e07cd2e3673bd6118f1fb3acd1f3a6")
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001280))

03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ashmem\x00', 0x800, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  883.464769] binder: 31411:31417 unknown command 33554432
[  883.469612] Dead loop on virtual device ip6tnl0, fix it urgently!
[  883.498236] binder: 31411:31417 ioctl c0306201 20000600 returned -22
03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
prctl$PR_GET_TSC(0x19, &(0x7f0000001000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001040))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  883.734507] binder: release 31378:31384 transaction 2272 out, still active
[  883.734867] binder: BINDER_SET_CONTEXT_MGR already set
[  883.734875] binder: 31378:31391 ioctl 40046207 0 returned -16
[  883.737145] binder_alloc: 31378: binder_alloc_buf, no vma
[  883.737186] binder: 31378:31384 transaction failed 29189/-3, size 0-0 line 3137
03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
fstat(r0, &(0x7f0000001000))
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$binfmt_script(r3, &(0x7f0000001100)={'#! ', './file0', [{0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {}], 0xa, "39c48780cd7b0bff8b2525ae539eff40a49f9875cfa2eab37643a482107088ab9a844a12254ec08a2a44867b04f1beb2ba10560d4bc443c188908e6adc0f"}, 0x76)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x128)

03:21:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:07 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  883.780958] binder: undelivered TRANSACTION_COMPLETE
[  883.786142] binder: undelivered TRANSACTION_ERROR: 29201
[  883.792018] binder: undelivered TRANSACTION_ERROR: 29189
[  883.797618] binder: release 31378:31379 transaction 2272 in, still active
[  883.805116] binder: send failed reply for transaction 2272, target dead
03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xffffffffffffff40}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
mkdirat(r2, &(0x7f0000001040)='./file0\x00', 0x29)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001000)=0x1)
setxattr$security_evm(&(0x7f0000001080)='./file1/file0\x00', &(0x7f0000001100)='security.evm\x00', &(0x7f0000001140)=@md5={0x1, "2fd28b1bc9ca7e28daef8103a0217594"}, 0x11, 0x2)

03:21:07 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2810}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="32e327bd7000ffdbdf25040000001400010079f62a7793fb7568edde478a16f34ba308000300010000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
sendto$inet6(r5, &(0x7f0000000300)="c0e747485d5f2681a39bd36f241207ed4abe684f51ad59a6cf83635f9532a9ba73f6f9d3431a4e58fcf4a935464154b38d36ab83c3bd26b0046b3b3b018c1b12861cef29140db9e59fed7578e1d743ec8180320fc8d8114022564a37893d899d67c63cb4a7d58a87897540475124eb98ff6ae4f46c53d701e803f463819ddad5b610c1ab190de33e9630f6ad32f6a2825809b02febc134bd84b8227d9cc6af9a", 0xa0, 0x20004000, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c)
socketpair(0x2, 0x0, 0xa9, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$tipc2(0x0)
r8 = dup(0xffffffffffffffff)
write$UHID_INPUT(r8, &(0x7f0000000180)={0x8, "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", 0x128e}, 0x2d)
write$FUSE_DIRENT(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7], 0x17)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x28, r7, 0x711, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x140}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x2000814)
r9 = dup2(r5, r5)
r10 = creat(&(0x7f00000003c0)='./file0\x00', 0x4a)
recvfrom$unix(r10, &(0x7f0000000800)=""/237, 0xed, 0x40, 0x0, 0x0)
ioctl$KDGKBLED(r9, 0x4b64, &(0x7f0000000000))
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @aes128, 0x4, [], "6a96ac25aa154bd36e07fe75e00e38b7"})

03:21:07 executing program 1:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001040))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  883.995685] binder: 31438:31445 unknown command -1341693184
[  884.005640] binder: 31438:31445 ioctl c0306201 20000180 returned -22
03:21:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:07 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f0000000000), 0x0)

03:21:07 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x4103, 0x0)
r1 = gettid()
rt_tgsigqueueinfo(0x0, r1, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000001000)='net/softnet_stat\x00')
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000001680)=""/4096)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0xfffffffffffffff8}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  884.192991] binder: release 31411:31422 transaction 2275 out, still active
[  884.226147] binder: undelivered TRANSACTION_COMPLETE
[  884.234286] binder: release 31411:31413 transaction 2275 in, still active
03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
flock(r1, 0x1)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  884.268081] binder: send failed reply for transaction 2275, target dead
03:21:07 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/160, 0xa0}], 0x1f3)
openat$tun(0xffffffffffffff9c, &(0x7f0000001000)='/dev/net/tun\x00', 0x480000, 0x0)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/checkreqprot\x00', 0x10000, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/status\x00', 0x0, 0x0)

[  884.389804] binder: 31462:31473 got new transaction with bad transaction stack, transaction 2281 has target 31462:31467
[  884.410725] binder: 31468:31476 got new transaction with bad transaction stack, transaction 2282 has target 31468:31470
[  884.411516] binder: 31462:31473 transaction failed 29201/-71, size 0-0 line 3041
[  884.431374] binder: 31468:31476 transaction failed 29201/-71, size 0-0 line 3041
03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write(r0, &(0x7f0000001000)="e6d68e37cc8364e5b091f7ab289649c2e33a0904a407a2e8cd6aab1953567e2a597780dc38940907a20aa4df8aa26a3280821bd920e50ddd283ca6289f3963fbb9b03f18f00748c5cec73acfd3225c867e37885a909d7aca8a0e57d4d072fd24b13a0458b3ec4ac035cb88ad4a9f291857838f7064f050ab29c34a72e97a154b99fdbf31ead5bb793f47b3ec14", 0x8d)

03:21:08 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:08 executing program 1:
timer_create(0x7, &(0x7f0000001040)={0x0, 0x2e, 0x1, @thr={&(0x7f0000001000)="5d013bb385a0197cc442142b62234b846f146bbb272f25b507e7cc4d496a9b4f54948b3e2d491d274b611760bd101010", &(0x7f0000001680)="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"}}, &(0x7f0000001080)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000001100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001140))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
timer_settime(r0, 0x0, &(0x7f0000001180)={{0x0, 0x1c9c380}}, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:08 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:08 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340))

[  884.680038] binder: release 31438:31445 transaction 2278 out, still active
[  884.680226] binder: BINDER_SET_CONTEXT_MGR already set
[  884.680234] binder: 31438:31454 ioctl 40046207 0 returned -16
[  884.718733] binder: undelivered TRANSACTION_COMPLETE
03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x6a0002, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  884.740294] binder: release 31438:31439 transaction 2278 in, still active
[  884.756439] binder: send failed reply for transaction 2278, target dead
[  884.862121] binder: 31496:31503 got new transaction with bad transaction stack, transaction 2286 has target 31496:31497
[  884.875307] binder: 31496:31503 transaction failed 29201/-71, size 0-0 line 3041
03:21:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2810}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="32e327bd7000ffdbdf25040000001400010079f62a7793fb7568edde478a16f34ba308000300010000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
sendto$inet6(r5, &(0x7f0000000300)="c0e747485d5f2681a39bd36f241207ed4abe684f51ad59a6cf83635f9532a9ba73f6f9d3431a4e58fcf4a935464154b38d36ab83c3bd26b0046b3b3b018c1b12861cef29140db9e59fed7578e1d743ec8180320fc8d8114022564a37893d899d67c63cb4a7d58a87897540475124eb98ff6ae4f46c53d701e803f463819ddad5b610c1ab190de33e9630f6ad32f6a2825809b02febc134bd84b8227d9cc6af9a", 0xa0, 0x20004000, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @remote, 0x3}, 0x1c)
socketpair(0x2, 0x0, 0xa9, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$tipc2(0x0)
r8 = dup(0xffffffffffffffff)
write$UHID_INPUT(r8, &(0x7f0000000180)={0x8, "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", 0x128e}, 0x2d)
write$FUSE_DIRENT(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT=r7], 0x17)
sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x28, r7, 0x711, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x140}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x2000814)
r9 = dup2(r5, r5)
r10 = creat(&(0x7f00000003c0)='./file0\x00', 0x4a)
recvfrom$unix(r10, &(0x7f0000000800)=""/237, 0xed, 0x40, 0x0, 0x0)
ioctl$KDGKBLED(r9, 0x4b64, &(0x7f0000000000))
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @aes128, 0x4, [], "6a96ac25aa154bd36e07fe75e00e38b7"})

03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4085, 0xff5}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000140)={0x1, 0x22, "9858cd264a684ba3658669c0ce5f1552471a107623e5b94cd02b2eb84153cb78ff51"})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@loopback, @remote}, &(0x7f0000000040)=0xc)

[  885.058037] binder: release 31462:31473 transaction 2281 out, still active
[  885.075036] binder: undelivered TRANSACTION_COMPLETE
[  885.090595] binder: undelivered TRANSACTION_ERROR: 29201
03:21:08 executing program 3:
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000480))
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_DUMPABLE(0x4, 0x0)
write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0)
openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x0, 0x0)
pipe(0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0)={0x77359400}, 0x8)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x4010000000})
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000580))
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback}, 0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9)
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000040)={@local, @loopback}, 0xc)
setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @empty, @multicast1}, 0xc)
getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback}, 0x0)
ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000140))
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
ioctl$TIOCMBIS(r1, 0x5416, 0x0)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082)
pipe(0x0)
r7 = syz_open_procfs(0x0, 0x0)
preadv(r7, &(0x7f00000017c0), 0x3a8, 0x0)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0)

[  885.104891] binder: release 31468:31476 transaction 2282 out, still active
03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = gettid()
rt_tgsigqueueinfo(0x0, r1, 0x0, 0x0)
timer_create(0x2, &(0x7f0000001040)={0x0, 0x13, 0x2, @tid=r1}, &(0x7f0000001080)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000001100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000001140))
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000001000)=0xfffffffa, 0x4)

[  885.135067] binder: undelivered TRANSACTION_COMPLETE
[  885.150496] binder: undelivered TRANSACTION_ERROR: 29201
[  885.159471] binder: release 31468:31470 transaction 2282 in, still active
03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x105040, 0x0)
readv(r0, &(0x7f0000001040)=[{&(0x7f0000001000)=""/27, 0x1b}], 0x1)

[  885.183162] binder: BINDER_SET_CONTEXT_MGR already set
[  885.199661] binder: send failed reply for transaction 2282, target dead
[  885.201285] binder: 31509:31511 ioctl 40046207 0 returned -16
[  885.236074] binder: release 31462:31467 transaction 2281 in, still active
[  885.243623] binder: send failed reply for transaction 2281, target dead
03:21:08 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f0000001000)=""/131, 0xffffffffffffffe2}], 0x20000000000003bc)
socket$inet_tcp(0x2, 0x1, 0x0)

[  885.281141] binder: 31509:31520 transaction failed 29189/-22, size 0-0 line 3014
03:21:09 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$setstatus(r1, 0x4, 0x800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
setsockopt$inet_udp_int(r2, 0x11, 0x0, &(0x7f0000001000)=0x5, 0x4)

03:21:09 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:09 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000013c0)={'#! ', './file0', [{0x20, '/eth0trusted+vboxnet1selinux\x15bdevmd5sum#/ppp1md5sumtrustedposix_acl_accessppp1nodev'}, {0x20, '-eth1'}, {0x20, '/dev/zero\x00'}, {0x20, '/dev/zero\x00'}, {0x20, '/proc/self/net/pfkey\x00'}, {0x20, '/dev/zero\x00'}], 0xa, "a7e20cb84f3e0d24cf7c664eeb7cbdc7930064f2e7dd49a7f147928374d104f49a6260dfb38657564623dc0a43cf9a59b51820724f2de3f19ba98fe4f9eed15128decc7b655c3b5bdc8c42f3f5b4c77c233b9875760e4c68d7b0"}, 0xf6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001040)='/proc/self/net/pfkey\x00', 0x1, 0x0)
write$P9_RAUTH(r2, &(0x7f0000001080)={0x14, 0x67, 0x2, {0x4, 0x8, 0x8}}, 0x8113ed7f430dc7)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
clone(0xd0020000, &(0x7f0000001140)="f9d35f5cbe15aa37bf616a00038ea51f4147dde1", &(0x7f0000001180), &(0x7f0000001280), &(0x7f00000012c0)="0f6c545bf0ee166a2615522b7afd449f263d614196e4574be6b9a769a41f963045d564bf7fe6cbdd5e8c627568ae66a79c8cf8e7910c9a541ef343ceae4133c6f3cc69da8aaaf7f14b5357ab1998a1fd13e860fecd7e943478eff7053bc0a63c52b662316cb72a511a11ddc94c1050092371a4a7bdc2b22138ac295d363f2987f06f959bc19a48ac584519257841f0c25d4d77da98a7dcd1d9cbc5e9372a10b4f56ded61f7ddbf779f012f494bb4b1dc62c2b453aed357f96e72fe9ffa92b5e5becdbd139c278049104c89e04aff340356c21e717ad7761d07d269b32ccd1716c290bad822545735727a")
r3 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$P9_RMKNOD(r3, &(0x7f0000001000)={0x14, 0x13, 0x2, {0x1, 0x1, 0x8}}, 0x14)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  885.549134] binder: release 31496:31503 transaction 2286 out, still active
[  885.566233] binder: BINDER_SET_CONTEXT_MGR already set
[  885.574875] binder: undelivered TRANSACTION_COMPLETE
[  885.589685] binder: 31496:31538 ioctl 40046207 0 returned -16
03:21:09 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000340)=0x40)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  885.605867] binder_alloc: 31496: binder_alloc_buf, no vma
[  885.612076] binder: undelivered TRANSACTION_ERROR: 29201
[  885.615324] binder: 31496:31539 transaction failed 29189/-3, size 0-0 line 3137
[  885.615513] binder_alloc: 31496: binder_alloc_buf, no vma
[  885.615552] binder: 31496:31538 transaction failed 29189/-3, size 0-0 line 3137
03:21:09 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
fadvise64(0xffffffffffffffff, 0xf8e, 0xc10, 0xca233869f22f8522)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
timer_create(0x7, &(0x7f0000001140)={0x0, 0x1a, 0x6, @thr={&(0x7f0000001000)="4c48873a6baeb0a582599c0539c699ea9b923e081024792e07d4f488587173144406eb8843f01b66e2f9b4412cc8f1b98607bac77b1b6ac434d67653d43a933e5a607ff68bc0f23ce7662227f9090f7bc23d915d95284eb0ecfc9c9f6917f0403db37b3d1c9ad7c6e7a86f8d7a1a80e4434d4e3395580b8824d0f30a13ed0d68652371cea827057da907eb2338ac90275a4871bf20ac743966aa", &(0x7f0000001100)="604d81"}}, &(0x7f0000001180)=<r1=>0x0)
timer_delete(r1)

[  885.691035] binder: 31546:31548 ioctl 1 20000340 returned -22
[  885.716733] binder: BINDER_SET_CONTEXT_MGR already set
[  885.739268] binder: undelivered TRANSACTION_ERROR: 29189
[  885.745915] binder: 31546:31548 ioctl 40046207 0 returned -16
[  885.760744] binder: undelivered TRANSACTION_ERROR: 29189
[  885.788853] binder: release 31496:31497 transaction 2286 in, still active
[  885.807590] binder: send failed reply for transaction 2286, target dead
[  885.821689] binder: 31546:31555 transaction failed 29189/-22, size 0-0 line 3014
[  885.892206] binder: 31546:31559 transaction failed 29189/-22, size 0-0 line 3014
03:21:09 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340))

03:21:09 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
getsockname$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14)

[  885.961585] binder: undelivered TRANSACTION_ERROR: 29189
[  886.192785] binder: 31564:31572 got new transaction with bad transaction stack, transaction 2294 has target 31564:31568
[  886.205197] binder: 31564:31572 transaction failed 29201/-71, size 0-0 line 3041
[  886.484206] binder: undelivered TRANSACTION_ERROR: 29189
[  886.490989] binder: 31546:31560 ioctl 1 20000340 returned -22
[  886.492776] binder: undelivered TRANSACTION_ERROR: 29189
[  886.504084] binder: 31546:31559 got new transaction with bad transaction stack, transaction 2297 has target 31546:0
[  886.514884] binder: 31546:31559 transaction failed 29201/-71, size 0-0 line 3041
[  886.524001] binder: release 31546:31559 transaction 2297 out, still active
[  886.551405] binder: undelivered TRANSACTION_COMPLETE
[  886.556591] binder: undelivered TRANSACTION_ERROR: 29201
[  886.581110] binder: send failed reply for transaction 2297, target dead
03:21:10 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4085, 0xff5}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000140)={0x1, 0x22, "9858cd264a684ba3658669c0ce5f1552471a107623e5b94cd02b2eb84153cb78ff51"})
getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@loopback, @remote}, &(0x7f0000000040)=0xc)

03:21:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup(r2)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001000))
r3 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0)

03:21:10 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:10 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000340)="2cdb5b9ad3fcc30a0e71b1ac43447eea1c455867c354ff65232f27fdab6928566af2e5ae312bf63f89a9198c639f1aee9e7f3bb919cf46cba170d4e1cebccb8b642f36ee2da7b537bdf62979d0a49540ab66156187a6a3fe7f7f55cc25879fc6a4064791af39955a89a7246a0fc41ff169e244bb8c5ef6953be1b8dfa51573d9a5d971a713ba3c85c3afcf387594b0ba80e7322d396fae7498b042c24b6c0655ad5c36884108f70480b62435", 0xac, r0}, 0x68)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:10 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
readv(r1, &(0x7f0000001000)=[{&(0x7f0000001280)=""/202, 0xca}], 0x1)

[  886.768308] binder: 31580:31587 got new transaction with bad transaction stack, transaction 2300 has target 31580:31583
[  886.782536] binder: 31580:31587 transaction failed 29201/-71, size 0-0 line 3041
03:21:10 executing program 3:
socket$inet(0x10, 0x3, 0x1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00')
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfffffffc, 0x7d5e0000, 0x0, 0x0, 0x20000005})
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4ad02, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00\x00\x00@\x00\xdd\xa8>\xbc\x89\x01(4\xbdfx\xb6tQ-n\xde\xd0 \xba.Qf\x97E\xa9\x85\xba\x884L\x18\xf4\xa1\xeao\x16\xae\x85Qx)\x15%\x12\xa9\xeb')
openat$cgroup_ro(r1, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x7)
bind$netlink(0xffffffffffffffff, 0x0, 0xffffffffffffff0d)
pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0x186ba2ba)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x1c4)
openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27)
write$cgroup_int(r5, &(0x7f0000000080)=0x2000000000000080, 0x12)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
r7 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0)
sendfile(r7, r6, 0x0, 0x2000005)
read(r7, &(0x7f00000005c0)=""/193, 0xc1)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r8)
r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r9, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
lseek(r9, 0x100000000000000, 0x2)
sendfile(r9, r10, 0x0, 0xfffffffffffffffc)
sendfile(r9, r10, &(0x7f00000001c0), 0x8000fffffffe)
getsockopt$sock_buf(r11, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9)
mkdirat(0xffffffffffffffff, 0x0, 0x180)
syz_open_procfs(0x0, 0x0)

03:21:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000001000))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000001040))

03:21:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340))

[  886.849903] binder: release 31564:31572 transaction 2294 out, still active
[  886.895228] binder: undelivered TRANSACTION_COMPLETE
[  886.932371] binder: undelivered TRANSACTION_ERROR: 29201
[  886.958053] binder: BINDER_SET_CONTEXT_MGR already set
03:21:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ppoll(&(0x7f0000001140)=[{r0, 0x2010}, {r0, 0xa08}, {r1, 0x520}, {0xffffffffffffffff, 0x80}, {r2, 0x4020}, {r0, 0x20}], 0x6, &(0x7f0000001040)={0x77359400}, &(0x7f0000001080)={0x8}, 0x8)

[  887.025037] binder: 31602:31604 ioctl 40046207 0 returned -16
[  887.025058] binder: release 31564:31568 transaction 2294 in, still active
[  887.025063] binder: send failed reply for transaction 2294, target dead
[  887.031861] binder: 31602:31607 transaction failed 29189/-22, size 0-0 line 3014
[  887.116119] binder: 31602:31611 transaction failed 29189/-22, size 0-0 line 3014
03:21:10 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001280)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @local}}]}, 0xfffffffffffffe1d)
sendmmsg$sock(r1, &(0x7f0000001000), 0x0, 0x8)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001000)=0x2d8)

03:21:11 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00')
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./file1/file0\x00', 0x2)
readv(r0, &(0x7f00000010c0), 0x0)

03:21:11 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  887.466695] binder: release 31580:31587 transaction 2300 out, still active
[  887.484618] binder: undelivered TRANSACTION_COMPLETE
[  887.494231] binder: BINDER_SET_CONTEXT_MGR already set
03:21:11 executing program 2:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  887.519346] binder: undelivered TRANSACTION_ERROR: 29201
[  887.526931] binder: 31580:31625 ioctl 40046207 0 returned -16
[  887.534203] binder_alloc: 31580: binder_alloc_buf, no vma
03:21:11 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = open(&(0x7f00000012c0)='./file0\x00', 0x40, 0x20)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, r5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000001340)={0x8000000})
r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001300)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r8 = eventfd2(0x50f, 0x84dc391dc4caa62c)
r9 = dup2(r8, r7)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4)
r10 = openat$cgroup_ro(r9, &(0x7f0000001180)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$EVIOCGID(r10, 0x80084502, &(0x7f0000001280)=""/34)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000001140)={0x6, &(0x7f0000001100)=[{0x5, 0x9, 0xff, 0xff}, {0x25b, 0x2, 0x4, 0x2}, {0xb301, 0xa2, 0xc4, 0x4}, {0x81, 0x2, 0x1, 0x7}, {0x0, 0x8, 0xc0, 0x4}, {0x6, 0x1f, 0x3, 0x6}]})
r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000001040)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, 0x0, 0xff, &(0x7f0000001000)='veth0_to_bridge\x00', 0x3, 0x5, 0xfffa})
readv(r11, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  887.573891] binder: release 31580:31583 transaction 2300 in, still active
[  887.582498] binder: 31580:31627 transaction failed 29189/-3, size 0-0 line 3137
[  887.586850] binder: 31580:31629 transaction failed 29189/-22, size 0-0 line 3014
[  887.640954] binder: send failed reply for transaction 2300, target dead
03:21:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840cd42fd6c3eb7a274b057fa0381230817e21d48f5ab3270c850702e738ad24c1abf63dde2e5ffd3f2535fc9ef2ae7555c818651698a07"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RRENAMEAT(r3, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:11 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  887.691937] binder: undelivered TRANSACTION_ERROR: 29189
[  887.725880] binder: undelivered TRANSACTION_ERROR: 29189
03:21:11 executing program 1:
pipe(&(0x7f0000001000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001380)={{{@in=@empty, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000001140)=0x22)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000001080))
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xfffffffffffffd56}], 0x200000000000044f)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1441b885b22cbb39, r1, 0x65713000)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/mls\x00', 0x0, 0x0)

[  887.779696] binder: undelivered TRANSACTION_ERROR: 29189
[  887.816541] binder: undelivered TRANSACTION_ERROR: 29189
03:21:11 executing program 3:
syz_open_dev$mice(0x0, 0x0, 0x2000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1029)
r1 = signalfd(r0, &(0x7f0000000040)={0x16}, 0x8)
fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file1\x00', 0x8, 0x2)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0)
pipe(&(0x7f0000000740)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
fchdir(r2)
r5 = creat(&(0x7f0000000880)='./file1\x00', 0x0)
r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000140)={@empty, 0x33})
write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
rt_sigaction(0x0, &(0x7f0000000380)={&(0x7f00000005c0)="660ffc9c4e000800006fc4e2599cad00008020c4c281dff6660fedb1f8ffff7fc4e22db7a6f2ffffff360f380aba00000000640faef1c4e2a52b2b660f763d01000000", {}, 0x18000001, &(0x7f0000000200)="c4e1fbf054b374c4c195f480e9000000c4c261de190fa1c4c279787f00c4c37916877ac6000037260f1d2c712664dce126660f3a4449060a2913"}, &(0x7f0000000700)={&(0x7f0000000640)="c4e17d2884c41cf16edec4c12014cac4e1dded27c4c18df17c9919c4c291df68f4c4e3750fc20126d8f4660f2b98f6ffffff0f01d60f186620", {}, 0x0, &(0x7f00000006c0)="0ffe4b15f00fb08300008020c4c17a52ff8ad4c4c2f91e5b9ce305c4c37d04e90830aa0b000000c4e37961db06c4c2dd288ce9695f0000"}, 0x8, &(0x7f00000007c0))
r7 = getegid()
ioctl$TUNSETGROUP(r5, 0x400454ce, r7)
fsync(0xffffffffffffffff)
write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4)
socket$key(0xf, 0x3, 0x2)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_getres(0x6, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x9, 0x0, 0x7})
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2, 0x21030, r3, 0x0)

03:21:11 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file0\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x800, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40820}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
fchdir(r4)
creat(0x0, 0x0)
pipe(&(0x7f00000003c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r8 = open$dir(&(0x7f0000000080)='.\x00', 0x200000, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r8, &(0x7f0000000280)='./file0\x00')
mkdirat(r8, &(0x7f0000000140)='./file1\x00', 0x40)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x100, 0x0)
renameat2(r9, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x0)
write(r8, &(0x7f00000001c0), 0x0)
read(r7, &(0x7f0000000200)=""/250, 0xfffffffffffffcb1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
unshare(0x200)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
wait4(0x0, 0x0, 0x8, 0x0)
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r11 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f00000005c0)='trusted.overlay.opaque\x00', 0xfffffffffffffffb)
add_key(&(0x7f0000000400)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000600)="38617344ddf88ef2a971b1c46edd15c3b18211ed90a5ea7e4b8bcbfc564eb493e83d797d2ffd9623461875328e4b1c9cb516f352221a0363ba4afbdf796052cfed2697f0f708b5551cd5e2d0e064f33b49f4d9bb45687275640f9ccac4d44760c9de4640b9dca3b829ab6d74f48ddf0f0ac0773d8d41ab121e2260eba29d65b51641121b3a881ca47431e5e1953f119cbcad00"/157, 0xfffffffffffffed1, r11)
request_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='&\x00', r11)
add_key$user(0x0, 0x0, 0x0, 0xe1834a367390b774, r11)

[  887.946351] binder: 31646:31656 got transaction to invalid handle
[  887.982010] binder: 31646:31656 transaction failed 29201/-22, size -949133733626289217-6653478196107370323 line 3014
03:21:11 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x183)

03:21:11 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001100)=""/139, 0x8b}], 0x2)

03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x7, &(0x7f0000000340)=<r5=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}])
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)=<r7=>0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r9=>0x0}, 0x0)
r10 = getegid()
setregid(r9, r10)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001080)={r7, 0xee00, r10}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r11 = openat$cgroup(r2, &(0x7f0000001000)='syz1\x00', 0x200002, 0x0)
fcntl$getflags(r11, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:12 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
pipe(0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x0, 0x1}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000100)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ')
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x94, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb0}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x94}}, 0x810)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000c6ba3b2578d1e055d65139e3000027eb9d6003206f8fc586d70e4b07fecce3f0c674f3c4fd024a2db910d89edba37a33a6000d61aec429aa0bca3c933492bac5d87cd14ead2b08a37aff0700002a1881fcfb0ade88d489c01b64db3fbbc128775369143fde6684544e8f1bffd3fe93da03e55e6ad402bdc903ef26cf9ae4c66db966304d3f016f431ff4358bf40c353a11738027dcd705bb80278a58b750e33516bace60d5844de2025a1e1fa9c4317998107a6efb61b6", @ANYRES16=r7, @ANYBLOB="000129bd700dfcdbdf21090000050800060005000000200001000a000000140003007f0000010000bf1500000000000000005dc1fddbfae963220712e896595e9b251bb873a462dab3bf35081bc1a3f2f9a1768d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x3fa610076603142f)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', <r9=>0x0})
ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000240))
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="e9e67fc1ba20cacf5af3c71212f092a64978d13fb7b3eca521020993b7468b6e1575386b4dccafd13db7", 0x2a, 0x1811, &(0x7f0000000200)={0x11, 0x297f296326a586c4, r9, 0x1, 0x20}, 0x14)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x88)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)=ANY=[], 0x0)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)

03:21:12 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:12 executing program 2:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:12 executing program 1:
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x290000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r3 = openat$cgroup_type(r2, &(0x7f0000001000)='cgroup.type\x00', 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  888.624988] binder: undelivered TRANSACTION_ERROR: 29201
[  888.633859] binder: BINDER_SET_CONTEXT_MGR already set
[  888.667251] binder: 31646:31692 ioctl 40046207 0 returned -16
[  888.686280] binder: 31646:31650 got transaction to invalid handle
[  888.698326] binder: 31646:31650 transaction failed 29201/-22, size -949133733626289217-6653478196107370323 line 3014
[  888.717039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
[  888.732023] binder: 31646:31696 transaction failed 29189/-22, size 0-0 line 3014
03:21:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80042407, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000300)=ANY=[], 0xffffffffffffffda, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/63)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:12 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_setup(0x7, &(0x7f0000000340)=<r5=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x0, r4, 0x0}])
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001040)=<r7=>0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r9=>0x0}, 0x0)
r10 = getegid()
setregid(r9, r10)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001080)={r7, 0xee00, r10}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
r11 = openat$cgroup(r2, &(0x7f0000001000)='syz1\x00', 0x200002, 0x0)
fcntl$getflags(r11, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f0000001100)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000001000)=""/104, 0x68}, {&(0x7f0000001140)=""/51, 0x33}], 0x3)

[  888.806522] binder: undelivered TRANSACTION_ERROR: 29201
[  888.813418] binder: undelivered TRANSACTION_ERROR: 29189
03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001280), 0x2000000000000131)
fstat(r0, &(0x7f0000001000))

03:21:12 executing program 0:
clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xb3', 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$FUSE_DIRENT(r1, &(0x7f0000000300)=ANY=[], 0xffffffffffffff70)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
read(r3, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
write$cgroup_int(r3, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
bind$netlink(r7, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f00000001c0), 0xfffffffffffffffb)
read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3)
fchdir(0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0)
ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000000040)=0x140)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r10 = creat(&(0x7f0000000780)='./bus\x00', 0xfffffffffffffffe)
fcntl$setstatus(r10, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0)

03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4082, 0x10ba}, {&(0x7f0000001100)=""/140, 0x2b}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000076840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400"/268], 0xffeb)
setsockopt(r1, 0x1, 0x4, &(0x7f0000001000)="5e0eeced9ff29317fb51c35b24948b82f0c7d88e915815c94d99fe060846005258d5f0c39ed15a8f50e54d3e11b62b8685d5a728bdff49bcf4259fb0bd19e574d7efd490de3d553bb1c5973353cf17", 0x4f)

[  889.062390] binder: 31710:31716 unknown command 0
[  889.076847] binder: 31710:31716 ioctl c0306201 20000180 returned -22
03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write(0xffffffffffffffff, &(0x7f0000001000)="6d7f85ba6a64eca1ccf092d394", 0xd)

[  889.228807] binder: 31724:31730 ioctl 80046601 0 returned -22
03:21:12 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x3)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  889.387939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket
[  889.724968] binder: release 31710:31716 transaction 2311 out, still active
[  889.732861] binder: BINDER_SET_CONTEXT_MGR already set
[  889.738618] binder: undelivered TRANSACTION_COMPLETE
[  889.738762] binder: 31710:31716 ioctl 40046207 0 returned -16
[  889.749963] binder_alloc: 31710: binder_alloc_buf, no vma
[  889.756194] binder: 31710:31723 transaction failed 29189/-3, size 0-0 line 3137
[  889.762171] binder: release 31710:31713 transaction 2311 in, still active
[  889.762177] binder: send failed reply for transaction 2311, target dead
03:21:13 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:13 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:13 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:13 executing program 2:
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x406)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0bed780000000000000fff00"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x6ca, 0x2fc3f86e8a076a74, 0x46, 0x4, 0x7a5}, 0xc)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\nc\a\x00'], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x20, 0x101003)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000700)={{0x2, 0x0, @descriptor="02707e56ce2bad6d"}, 0x78, [], "35e54d3c5d250ffca60baedf35fe63dadf3cb19cb98ca71d36b792dd751ca64455e74286d3a4f35891155a0e6cd1ac544cb0b66c177bdf54479ba7f28cead9237240992070729901e3795143de389e765724624719e64b07110f4c624faeb1ca4dcc83521df2e58b908f488aff8e81275cca3ba89a5e38d3"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00'}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$FUSE_OPEN(r5, &(0x7f0000000380)={0x20, 0x2f, 0x2, {0x0, 0x1}}, 0x20)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r7 = dup2(r6, r6)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, &(0x7f00000000c0)={{0x6, 0x1, 0x10001, 0x1, 0x7f}, 0x4, 0x1})
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:13 executing program 0:
clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xb3', 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
write$FUSE_DIRENT(r1, &(0x7f0000000300)=ANY=[], 0xffffffffffffff70)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x10, r0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
ioctl$FS_IOC_GETFLAGS(r3, 0x80046601, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
read(r3, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
write$cgroup_int(r3, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
bind$netlink(r7, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write(r9, &(0x7f00000001c0), 0xfffffffffffffffb)
read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3)
fchdir(0xffffffffffffffff)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0)
ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000000040)=0x140)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r10 = creat(&(0x7f0000000780)='./bus\x00', 0xfffffffffffffffe)
fcntl$setstatus(r10, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0)

03:21:13 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
syncfs(r0)

[  889.796588] binder: 31710:31723 ioctl c0306201 20000180 returned -14
[  889.828237] binder: undelivered TRANSACTION_ERROR: 29189
03:21:13 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080), 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080), 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000001680)=""/4096)
openat$cgroup_procs(r5, &(0x7f0000001040)='tasks\x00', 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000001280)={0x3, 0xfd, "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"})
r8 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$P9_RXATTRWALK(r8, &(0x7f0000001000)={0xf, 0x1f, 0x2, 0x1f}, 0xf)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  889.979017] binder: 31758:31770 ioctl 80046601 0 returned -22
[  889.982300] binder: 31763:31771 unknown command 484106
[  889.982308] binder: 31763:31771 ioctl c0306201 20000600 returned -22
03:21:13 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001080)='/dev/keychord\x00', 0x200000, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$getownex(r1, 0x10, &(0x7f0000001000)={0x0, <r3=>0x0})
syz_open_procfs(r3, &(0x7f0000001040)='sched\x00')
r4 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2f0000001c000367ffffff000d000000e5000004010000003f0006c913000100230000000000000058ff000000050b", 0x2f}], 0x1}, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write$binfmt_elf64(r0, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0xa54)

03:21:13 executing program 1:
readv(0xffffffffffffffff, &(0x7f00000010c0), 0x200000000000034d)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDDELIO(r0, 0x4b35, 0x5)

03:21:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001000), 0xc, &(0x7f0000001080)={&(0x7f0000001100)={0x88, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3715}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf74b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x8081)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4106}, {&(0x7f00000011c0)=""/140, 0xffffffffffffffca}], 0x1ea7c62c948d4076)

03:21:14 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
pipe(&(0x7f0000000840)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802)
write$binfmt_script(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="2321ffff2f66696c65300a24b0eb7946cf4808cb757347a4ebf52ddfc47b4969c2dfb993300525cff83cc7e966b175ee79810028f994b9dd8d452213cc7e3d32a196e9a4a05f730e6d16fa61147a99b1275328fe1daeef8fb9afc7939e97db2b17845774073cfa5cb55c57d01d9e04206c03a514c2d5fa90ea31903ad21c0789e92bed878a29ddc178bff3f1bef43cc8"], 0x2c)
readv(r5, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000080)=""/69, 0x45}], 0x2)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "3a9dfc784ba5b015", "590fb4fbaf75343a0d9881470b535ef4", "94ba4ed3", "f42f17a1e9e68dc4"}, 0x28)
write(r4, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000001d40)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR], 0x3}}, 0x0)
fchdir(r2)
creat(0x0, 0x4)
r6 = creat(&(0x7f0000000740)='./bus\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xffffffffffffffa0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/se,inuA\x8c\b\xc5n\xb8\xecxt\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a})
write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6)
fsync(r6)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x2)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x0, 0x0, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0x0, 0x3, {0x0, 0x0, 0x0, 0x8}}}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00')
mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000100)='./file1/file0\x00', 0x2)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x21000400}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r6, @ANYRES16, @ANYRES32=r4], 0x3}, 0x1, 0x0, 0x0, 0x50}, 0x20000804)
clock_getres(0x0, &(0x7f0000000340))
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x101)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1)

03:21:14 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

03:21:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x3)
r2 = dup2(r0, r0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
setsockopt$inet_int(r3, 0x0, 0x3d, &(0x7f0000001040)=0x7, 0x4)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
socketpair(0x9, 0x80000, 0x3, &(0x7f0000001100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000001140)={'filter\x00'}, &(0x7f0000001280)=0x50)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001000)=""/5)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r5, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:14 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  890.715590] binder: release 31763:31774 transaction 2314 out, still active
[  890.727731] binder: undelivered TRANSACTION_COMPLETE
[  890.783569] binder: BINDER_SET_CONTEXT_MGR already set
[  890.790133] binder: 31763:31774 ioctl 40046207 0 returned -16
[  890.790195] binder: release 31763:31766 transaction 2314 in, still active
[  890.790201] binder: send failed reply for transaction 2314, target dead
[  890.836988] binder: 31763:31766 unknown command 484106
[  890.843027] binder: 31763:31766 ioctl c0306201 20000600 returned -22
[  890.897727] binder: 31763:31774 transaction failed 29189/-22, size 0-0 line 3014
[  890.918570] binder: undelivered TRANSACTION_ERROR: 29189
03:21:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
rt_sigpending(&(0x7f0000000000), 0x8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000100"/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0x4, 0x3}, 0xa)

03:21:14 executing program 0:
r0 = memfd_create(&(0x7f0000000200)='m{/j\xd9\x89\x1b\x161\x1e\xcc\xa3\x11\x9c\x8d\xcb\xc1\xd6x\x03\xc6\xc2\xc47\xff\xb0\xdaIT~W\xf1oaE(\x12fF\x191\xe2JT\xcc\\\x11\x8d\xef\xea\xaa\x97\xf6*\xdeu\xbe\xec\xc6\xdcS1\x87\xa5\b\xf5\xb8\xa3\x84\xcc\xfb\xa4,Z+\x87}\xb3x~\a\xb4\xc7\xd8u\xc2K{\x93\xa4/\xe6\xd6C(T\xc4\xe5', 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/109, 0x6d}], 0x9, 0x200)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
write(r3, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00')
preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003)
write(0xffffffffffffffff, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="09b24503195aeb5b5084a61f33f086f8062b757668cde3e391454bc6c58f103f4393f7291821046be7725aab558659d02b9778"], 0x33)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0))
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000eb1b0000010025a52f9a540409c6cf9c17c63ec050a9f93c2a5276a161f2d43cd8fe70af7bd18a385ed50b6781e8c292a5ed8ec40c520eab6063d72b002bb0b158df88dca564fe68de981fe9eac6018aba93bf6ac9eb9cb4d780f631e115a1e15cc40ae38f070b536f4f395553e50f0beb68d4ff701d803f22bedb5c60cc2da2d96f205ae53f06163acd40a8c1020d514165d1aefd2b824ec1ab5e63366818f6bb58fa0ed25ee3e901574ee9cb44176c1091d65280c5e38945f1f67775146a974c8cdb42e154719969f6393c8f4339fd12d5e235596dc82fa5"], 0xe)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080), 0x1c)
r9 = dup2(r8, r8)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'irlan0\x00\x00\x00\x00\x00]\xbf\x1e?\x00', 0x4000})
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x2)
fcntl$notify(r7, 0x402, 0x2)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x7, 0x2, {0xa, 'vboxnet1\\#'}}, 0x13)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff})
read(r10, &(0x7f0000000200)=""/250, 0xfffffffffffffee3)
ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e05411, &(0x7f0000000440)=""/62)

03:21:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/access\x00', 0x2, 0x0)

03:21:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0), 0x0)

03:21:14 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x2040}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0xbc1d38f8158f799c}, 0x14008805)
ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/82})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  891.225810] binder: 31828:31836 got new transaction with bad transaction stack, transaction 2317 has target 31828:31832
[  891.259894] binder: 31828:31836 transaction failed 29201/-71, size 0-0 line 3041
03:21:14 executing program 0:
r0 = memfd_create(&(0x7f0000000200)='m{/j\xd9\x89\x1b\x161\x1e\xcc\xa3\x11\x9c\x8d\xcb\xc1\xd6x\x03\xc6\xc2\xc47\xff\xb0\xdaIT~W\xf1oaE(\x12fF\x191\xe2JT\xcc\\\x11\x8d\xef\xea\xaa\x97\xf6*\xdeu\xbe\xec\xc6\xdcS1\x87\xa5\b\xf5\xb8\xa3\x84\xcc\xfb\xa4,Z+\x87}\xb3x~\a\xb4\xc7\xd8u\xc2K{\x93\xa4/\xe6\xd6C(T\xc4\xe5', 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/203, 0xcb}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f0000000bc0)=""/235, 0xeb}, {&(0x7f0000000740)=""/162, 0xa2}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/236, 0xec}, {&(0x7f0000000ac0)=""/109, 0x6d}], 0x9, 0x200)
recvfrom$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
write(r3, &(0x7f00000001c0), 0xfffffef3)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/route\x00')
preadv(r4, &(0x7f0000000700), 0x31f, 0x10400003)
write(0xffffffffffffffff, 0x0, 0x0)
clock_adjtime(0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="09b24503195aeb5b5084a61f33f086f8062b757668cde3e391454bc6c58f103f4393f7291821046be7725aab558659d02b9778"], 0x33)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000001c0))
r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="0e0000eb1b0000010025a52f9a540409c6cf9c17c63ec050a9f93c2a5276a161f2d43cd8fe70af7bd18a385ed50b6781e8c292a5ed8ec40c520eab6063d72b002bb0b158df88dca564fe68de981fe9eac6018aba93bf6ac9eb9cb4d780f631e115a1e15cc40ae38f070b536f4f395553e50f0beb68d4ff701d803f22bedb5c60cc2da2d96f205ae53f06163acd40a8c1020d514165d1aefd2b824ec1ab5e63366818f6bb58fa0ed25ee3e901574ee9cb44176c1091d65280c5e38945f1f67775146a974c8cdb42e154719969f6393c8f4339fd12d5e235596dc82fa5"], 0xe)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080), 0x1c)
r9 = dup2(r8, r8)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040), 0x4)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'irlan0\x00\x00\x00\x00\x00]\xbf\x1e?\x00', 0x4000})
ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x2)
fcntl$notify(r7, 0x402, 0x2)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x7, 0x2, {0xa, 'vboxnet1\\#'}}, 0x13)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff})
read(r10, &(0x7f0000000200)=""/250, 0xfffffffffffffee3)
ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e05411, &(0x7f0000000440)=""/62)

03:21:14 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:15 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4400)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r2 = inotify_init()
write(r2, &(0x7f0000003980)="2d4e9680e4e98c5b9d3b9e8f9bbf37fea3a391ee24c1f957ba41a4aef3eef881b4ba06af521e2f45569f0b5a75d6994a30708944f516e5384173d451b7c182419c0fbb8c1e815347363370239e77d1066938cf5b2bac77f31400ad99e003f3b8598c00d692967f26c5368442e7b761247bf326535db7b5a64667dac2362b088db9d714f6efd77e6c5a4a8acfeeb9c593466f35aed851cf6c", 0x98)
socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x1000000000000, 0x102, 0x1, 0x0, 0x6, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x1, 0x3}, 0x20)
connect$inet6(r4, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r5, r5, &(0x7f00000002c0)=0x202, 0xdd)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00', r6})
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10)
sendmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="01efd8480a4d38dab1888c22fd07e0da047723af50ebd2e3e0766618de9a04f234cd41777dd5b955e72e6b94ae12368c646585f3f0b944c759", 0x39}, {&(0x7f0000000140)="def46b1ed47b737172209fe608c513fe26c8690114985e9695ea91313f1e17086491ca64179939eca3245558be06c0324e1d75d3232b9b53512b111cf8162219b88417bed0f1ed1f92fec6fc20373d7fdb2fd1b4dd0de61825d9df916c127aeb1a5af91b59849cc325f9c8280a21decb3d418ed7204dac78d2852939155fcb99ea7f83a5d57a15237bc71033ee09586a4224c3eb75f4bd6bb371b6bdc5a98380cb1090e586bada8d2fa0dfebd5bb291753e0a5e81ca88630ea61186a6988098183f62628a0618abb32b5fb81ffed9b9fe020003f42c4e89b538d39930e0f1a2c1efb5a0eb1fbf9bcf18d5359952dc75e35e54fac3b26fc9d", 0xf8}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x310}}, {{&(0x7f0000000240)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff1491c8702ab58316d92c83924c09de7b093f9506047780da7c6a5f76710a06c7382870edc352b95b9c185ccdefad7b7126566a8239", 0x36}, {&(0x7f00000002c0)="b6e645dc96967e18f3cd810b3cc7e5570c30ac949ec11977e6e1769bf11633f7fbefab85e96a", 0x26}, {&(0x7f0000000300)="9ade94bc99075190a3a04938742367f326304ded4ad481f651870bfd992ac2bd5ca1af3124d5fab3d28abbddf56ce35854786c63eb25a7cc61e99c720c5f850009e2fbb6faa1b079696b6e342f96b548aa21d3a2fa3348241342a8b4e2cbdda8d227951997adf9bcee496cee05fc58776b8c5c18dbd39de6da66686ce651550f35578f1a2460397f3202e831545aa130", 0x90}, {&(0x7f0000000800)="40aeb84b1553f682c385e6f37f6f84f1dd30850d94548db3dd34c4209f685ab4acf42c63acab097bb9a067834a36b788e9d308e3a4de9723cdbf8ec9aba996de3cd7b924f0c71dc2c5eb4851f631973e5b6577eedf4131b307c1938982fe4f0d5a34a1ba0db03db899e388619eafedd7ce26ab37a44e003c213773c9871abebea1edc08bfe225a5d73a55c4a8e82b9cd09e8a411389291daa8c3d4575e62bd3647037859b3ad960d96b097391ee9b15b266ac5b9bd37fb38", 0xb8}], 0x4, &(0x7f00000008c0)=[{0x50, 0x108, 0x10000, "0785a2b225a2e74e0d652945d2cfecdfcd6d3931ab386c6d1fe4f75f3d42be70b2f666f87862de773f890f1610b4ee9d2b3a516a42604ce5f7d9e347742f5b66fd8a35cc"}, {0x68, 0x44, 0x2, "e10cf151c21b8085c5d5f8eaf7942acc715f8713f0cc63b49a7e4b222df123bcee14e6c5d4bf6efa9cb9806b201719aa4816aa3e7bca102834eb176084e80df5ac5ffe3340d13598222980e474fc3161eb3b3ec1a71b4a6e79"}], 0xb8}}, {{&(0x7f0000000980)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000400)="ffabf2f70881115b485da35bf0490bef1683a1f805f27b710f5af87e6e277027dbc825e06dfafe", 0x27}, {&(0x7f0000000a00)="895f4135cfb0287d1a9484a3725961c0a868bde4a22bce828f635d94b46d48dbbd6e767c7ca80aa64bd2353b583aaa3b2356f8dd6698fbee07d91b9e43b9f1130fcd794ea8624a50cddb4bdb2aaeb6e2729e8b0f379ad76a4c43479bf27b94c1dd9bca9b2d20ea147a5011c611e25fa16172900ec4d7cef99543169e5c83f1a7e6de96bb", 0x84}, {&(0x7f0000000ac0)="8b5c58c0cd7551e90807578b28d4653cd40917fe15c119baeb531901dc9d714b6ead37c868e3a46275d8df90b93246f1b3af55277553ae8d79c989e43e20ff5e601076ff1b6def41f826ef0cfb2a28fba9c858bc9fc55733a50739289231d5f1aa5488d64559cb7f3924c01eb63554410db438376058f260ee9c293276e904b15ec774edc82f9fe76835c717db185712c62c086c53c91e90060fa9a4de1c15f4559d4e22fe8174f846fe18cbea21d8f2982905a03e24fd4be3ceb530a0a03bf05a50c41062a1bb13a4c0a5db10fe3f9c69397f377145f068741a6dd6cd1c2a8f", 0xe0}, {&(0x7f0000000bc0)="5dad913e9661ee22a2503de0458cfcc95e76f056b52e8e4040fd47f58206660262fa96bc", 0x24}, {&(0x7f0000000c00)="57918c226ed4436ad49849dc8b629ef7a583c57a3fa79d21ef0ed8f8098dea47b9178b1169417badd14e777f5ff1935d31c19caa83090d33341bfc6e3ea622a395fa44c633f02bc4c5107d678f1c331be2de20e2f0fdbb17c3f5752031784abeb2813e3c6f", 0x65}, {&(0x7f0000000c80)="7cbdc25cb94f68461a6d7db4699412434c5b60e13d675c1ffd156eb4aaaccca936eeb0a67a1acdfa7751d95277e9b4fae2fabba3ca46310ad41beb051bc0e64da6d03359c9d19ca2ee62d7da385b93912ef81caf335843623ddca1c77c04153abebe0e8ffc409c0402daaac026bcb7febe22a9caa7b010dcd75179f9eaad1fc090b8121ada1a53d0659e1ef84786915f3105b7b09b92d884861ea79643e489e081a0a6b387cfcf01dfa539ef6cbea21eb5afc2f8936ed53d83b4bb", 0xbb}, {&(0x7f0000000d40)="f4e1688a01538cca6b85125544acfb7ebccbbf985f5ade015206ed408674787d9e5049d3788060e58d01395171a0a6bf4d84849286cf5198248aa60bb2861fc507d216d8b68fda1dcb64c08e1eb088defff284e5a066bf2f2748d7d3a0c4a61c44686ac2ae0f6fb630e6043b356e120bbc43a9515ba0e87241bd06737b024e20b10db681c013d66f4e6a32674cc1f6c6156f23ec29fed902f65dc0a5982b1b4610cbc88f510e1021f5", 0xa9}], 0x7, &(0x7f0000000e40)=[{0xbc, 0x10c, 0x8, "766575631cddf302d3ede9bf6a11ecc85badc0b981b56e8eed404b6de28e39871320196c9b50c0f7ebe0b096007029b4fc7f618eb527bee3869d344ef0e44261c72c9075dcefa4788bd6f8215627f4b3600789421351d1e5efaedc183f151c40e9eeb98d27629224f1887a862a3688b60f0d909347eb877bf67fe3a1b344693540954be492c673df75e92a211cce6f1232f090c90e6c85f12dbce6f6e1eed0c01cc464857c4c9f87f2038bd041fb"}, {0x30, 0x10d, 0x9, "cdb35078836731ecb5915ac6e14801695f3ecf815426b9ebbd1c8d239b27556cff0937"}, {0xf8, 0x113, 0x6, "71a4bb13b282912ce648e24d424910ca3e5901c02e895c2729708e766c41f2830367705245840178d82e68c9445fedb4f5306aeb87e7ccb926b4b60e8cb895d46dbb894fd48df13d16e70259afc308ce732af9537f71df8e1c205c0d40e19e6b56ef3ae79bd8f30dfe733ea26331924f87b0cb3542d4b64400f19b6371e460948c4abc920e6e6cd15130f65b3dbe1e2c465bdaab82e8ac8be1e72348e89117b1ef81cb5f805f644159f8f10410962a8acbb5df9d1708e0d0dfc70281072d147ec9ccd79b229d4e80e3415d8b884976dac0f89a05afcf4a68a0564401ab597a998fe8f6a06c049a4cfce791d2"}, {0x40, 0x111, 0x7fffffff, "2f4ead753106db4e4cb9bb7c0e5686ee8e0a222c9912a40677cc4c0811758a20e36b02ff1e0496f31fd538df45a653462eb87179"}], 0x224}}, {{&(0x7f0000001080)=@xdp={0x2c, 0x6570ee16daaa7ebd, r6, 0x5}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001100)="922caf4942e339ae519547f9e69bf3cf910b556130400a492cb25bbdc0409717857b7e9a146d584a43f76a4f74101fbc9baffabc31451bdaea810ada58b166b2ef8b8bd4f9b79400a7c4a934b1d99584ea51d92115c8efa8189373135c32d7302627f092fa7758858e2f3a2e0874478d9004c67e49771316a9dc9632775143816da6220ab729905e7e329b86bec35d08986b051cf5d3448cc9c572ab5272594c53cdf883d2792a1676a4a639e3438f9a4de830f94d3f5e80a658174be2678234bd9b45a648bfe1e1978826a7bef0123ea84e2457e5", 0xd5}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="bba5771eb5e3fdbd93f1a801d9722a92e541f17f5704d3f274704a2ce0a183e6c23789d20af5810c49f13317290beb6ebd4d891e7a5e401262f2faec55549f50d4569cf4b767555d436f62524e9ea4", 0x4f}, {&(0x7f0000002280)="ed9a6f3eafe53fc9fdf044b7328f2abca73164362e4a16d64705bb0e232d7154901881df58fac89696830a4028d772634abb8c88352fa4ac7e6609cd77761e1176deec918f3543431e496f5386d5ccd916adb2dc5c704a1c07e14e4b25eec0179f6e80b2273eb3f6589b36554966413a89b4fafa63365263c36ba2fc7dc14cafa08a11bb6da35ccaa4eeff3ba2ac926704b34c4332f3e5b438b0", 0x9a}, {&(0x7f0000002340)="776505e69ead0043f3b6d59cc09250b7265172bd08d919d69c80f589c44086091fe37dfb329c04c993929fd894ecb8070302844c25e001b70bcd853014142cbaae2abf7e10b13c515797d5f38eb810bb4016e5e0427fdf59996ddd0341f3405713c78f82e6afc3d6f0a3f554f26a9c219b3aa8aa113dc817072d08b539ea816609f7ef658616ecf39b9e463ef595cdeb239a1a55b9095447bdaa5c5f2d3dea5bbe6f8def1fddf6c6d286085d65a46b7678179dd202e07011d4eb575f4b70959472", 0xc1}], 0x5, &(0x7f0000002480)=[{0x2c, 0x100, 0x4, "db62c6833f8b1d9199ca569fa622f4184d99b7c65ac4a4a038b7005a592e1f"}], 0x2c}}, {{&(0x7f00000024c0)=@in={0x2, 0x4e23}, 0x80, &(0x7f0000002580)=[{&(0x7f0000002540)="e2edc9d08a4f7a320442b0652eb40b7c3a825b6a3edff57c56c0955fbedfcfc4898ce30aed97f161e1da748573a7c7ee", 0x30}], 0x1, &(0x7f00000025c0)=[{0x30, 0x107, 0x4, "55535e70b0ce7008c08ba9ccc17b5299e550f17315c3c6f20a6082e9ab662b5e17f7041d"}], 0x30}}, {{&(0x7f0000002600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002680)="11bb8b78773596da6e68284180c2707b98f93c8cd1", 0x15}, {&(0x7f00000026c0)="80", 0x1}, {&(0x7f0000002700)="2439cf174967aab0a548b581dc3b30140b81a68633540a42e85aab03483d4413053842409056509ee947a302a325bf2e41864f63ece53331a2bb1c4f4208d31b13580dfde99492ec362a2d3540240b1b1116502dd5685badd9bf38ed80ce0f384724903660b2cb0432bfae2c602283eb46", 0x71}, {&(0x7f0000002780)="2dfb9a9639e590fb8a1d75221ca8020d927c92ecd4f1f6eba825200a4e3e87dd6d23ea54254d7d710235f3768e04a41204fbafd2b16f70d486d1e7bb6323fd12a2fba640e27ca3cd14104a55d811c3c40ae5c1361fa93db6e2846869c126c7dc99a171eb9ed3a12635597290b4724a3c92401309b9dfe3e66c98318a29510802cc1c8811a88c49c3941c92e7bf9073accdef9011805f1579bcc1528d5166b8af70e3d487b3e6", 0xa6}], 0x4, &(0x7f0000002880)=[{0x100c, 0xa, 0x8, "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"}], 0x100c}}], 0x6, 0x80)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={r6, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)

03:21:15 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xbc, @ipv4={[], [], @empty}, 0xfffffffd}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x2f8, &(0x7f00000001c0)}}], 0x2, 0x0)

03:21:15 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}})
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000240), 0x4)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/216)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}})

03:21:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCGETA(r1, 0x5405, &(0x7f0000001040))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x10002, 0x0)
r3 = socket(0xa, 0x5, 0xfe)
r4 = syz_open_dev$mice(&(0x7f0000001000)='/dev/input/mice\x00', 0x0, 0x0)
fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000001080))
ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e05411, &(0x7f0000001680)=""/4096)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:15 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  891.884781] binder: release 31828:31836 transaction 2317 out, still active
[  891.892380] binder: BINDER_SET_CONTEXT_MGR already set
[  891.893019] binder: undelivered TRANSACTION_COMPLETE
[  891.893035] binder: undelivered TRANSACTION_ERROR: 29201
[  891.909053] binder: 31828:31844 ioctl 40046207 0 returned -16
[  891.909376] binder: release 31828:31832 transaction 2317 in, still active
[  891.909899] binder: send failed reply for transaction 2317, target dead
[  891.933229] binder: 31828:31836 transaction failed 29189/-22, size 0-0 line 3014
03:21:15 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x400000000000002e, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x3)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000200))
mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x3)
pwritev(0xffffffffffffffff, &(0x7f0000000100), 0x3a3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'})
getresuid(&(0x7f0000000380), &(0x7f00000003c0)=<r7=>0x0, &(0x7f0000000400))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000480)=0xc)
chown(&(0x7f0000000300)='./file0\x00', r7, r8)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'})
r9 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r9, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r10, &(0x7f0000000080), 0x1c)
r11 = dup2(r10, r10)
write$UHID_GET_REPORT_REPLY(r11, &(0x7f0000000100)={0xa, 0x7, 0xd6, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000040), 0x3)
ioctl$KDGKBSENT(r11, 0x4b48, &(0x7f0000000140)={0x9, 0x1, 0x20})

03:21:15 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x4d6253fba17c886a, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x10, 0x0, 0x39}, {@local, 0x4e24, 0x1, 0x20, 0x4ac}}, 0x44)
tkill(r0, 0x10)
sched_rr_get_interval(r0, 0x0)

03:21:15 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001280)=""/233)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001000))
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000005c0))
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
write$evdev(0xffffffffffffffff, &(0x7f0000000340), 0x0)
read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3)
getresuid(&(0x7f0000000240), &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0)
r6 = getuid()
setresuid(r4, r5, r6)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000040)=0xe8)
setreuid(r5, r7)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040)='/\x00', 0x0, 0x0)
r9 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14)
fadvise64(r9, 0x0, 0x0, 0x3)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
ioctl$TIOCNXCL(r8, 0x540d)
ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000000140)=""/133)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000000))
geteuid()
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
getresuid(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x88800, 0x0)

03:21:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b63000005630440010000001163484002000000000000000000000000000000000000001000"/64, @ANYPTR64=&(0x7f0000000640)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/53], @ANYBLOB="000000000000000002000000000000000e00000000000000852a62730b32000001000000000000000000000000000000852a747000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/193], @ANYBLOB="000000000000000001000000000000003e00000000000000"], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'/24], @ANYBLOB="f4ec876a355f4c5909bc3a9fc78619f859b427b2d14644f2e9570735540900db790f1eae3372f1bd2660cff44085e477e6615205b49703221147709b5dcb83cbd74c1003426ee7e0f130614b742b340105b15b56b7e3977bd93c59f7dab632a66413df19e8c67c1e1f1caaf625c1fb72ac60f7d79cf75511d565856f8152e1a1e6a68c522e6038358373723bc898e4335a5bbf60ba14ba700fbd500a8c4034a93ac4d06a697143eb"], 0x327, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
r8 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000000)=0x8000)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0)

[  891.980173] binder: undelivered TRANSACTION_ERROR: 29189
03:21:15 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x200000000)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(0xffffffffffffffff)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)

03:21:15 executing program 3:
pipe(0x0)
pipe(&(0x7f0000000580)={<r0=>0xffffffffffffffff})
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x80c, 0xffffffffffffffff)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup2(r2, r3)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000080)=0x4)
open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0))
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
sendfile(r4, r4, &(0x7f0000000180)=0x74000000, 0x5)

[  892.036589] audit: type=1400 audit(1574911275.652:94): avc:  denied  { relabelto } for  pid=31894 comm="syz-executor.3" name="TCPv6" dev="sockfs" ino=111281 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bsdpty_device_t:s0 tclass=tcp_socket permissive=1
[  892.165923] binder: 31902:31908 got new transaction with bad transaction stack, transaction 2321 has target 31902:31905
03:21:15 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  892.231224] binder: 31902:31908 transaction failed 29201/-71, size 0-0 line 3041
[  892.244962] input: syz1 as /devices/virtual/input/input264
03:21:15 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0xfffffffffffffedc}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xfffffffffffffd9f}], 0x200000d1)

[  892.390848] input: syz1 as /devices/virtual/input/input265
03:21:16 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x3, 0x1, 0x7fff, 0xf114, 0x1ff, 0x4}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800004000000000000000000000000000000000000000000000000000000000000000002000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a7146877441e8d34f5a2d84d67dc3dcda34dc598e1b41aba3de76ea3ab41ea4536f3e09c731d266a20f7fd3e35cc65b5be6d7e74244b6b90"], 0xffeb)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x1})

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)='trusted.overlay.redirect\x00', &(0x7f0000001080)='./file0\x00', 0x8, 0x2)
r1 = socket$inet6(0xa, 0x1, 0x6)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001380)={0x4c, 0x0, &(0x7f0000001280)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001100)={@fd, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000001180)={0x0, 0x18, 0x30}}}, @enter_looper, @exit_looper], 0x56, 0x0, &(0x7f0000001300)="9884a6c5d900092f76d2555a6fdae40a1ac8d46eecc21a68ffddc53e29a16225294aff1616f06b5c9e893d795d003e8baf5408253b0d28b5b0eda52c2892bfa9e2422fa2b35f306c57cd145e88de990f346a14b810f5"})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:16 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:16 executing program 1:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001100)={0x0, &(0x7f0000001080)})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000001000))
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001080)={<r3=>0xffffffffffffffff})
fsync(r3)

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000001000)=0x8)

03:21:16 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0xff}, {0xfffffa12, 0x753c}]}, 0x14, 0x2)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = fcntl$getown(0xffffffffffffffff, 0x9)
r4 = syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/uts\x00')
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200080, 0x0)
ioctl$RTC_AIE_OFF(r5, 0x7002)
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@initdev, @loopback, <r6=>0x0}, &(0x7f0000000280)=0xc)
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000002c0)={@mcast1, r6}, 0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000300)={'team0\x00'})
getcwd(&(0x7f0000000340)=""/215, 0xd7)
r8 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000480)=0x1c, 0x80000)
fstat(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in=@remote, @in=@empty, 0x4e23, 0x81, 0x4e21, 0x6, 0x2, 0x20, 0xa0, 0xeb, 0x0, r9}, {0x2, 0x9, 0x2, 0x100000001, 0x3, 0x7, 0x100000001, 0x7}, {0x1, 0xfffffffffffeffff, 0x2, 0x17}, 0x1f, 0x6e6bb3, 0x1, 0x0, 0x2, 0x2}, {{@in=@loopback, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x34ff, 0x4, 0x2, 0x8, 0x401, 0x100, 0x1}}, 0xe8)
r10 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/attr/current\x00', 0x2, 0x0)
r11 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/create\x00', 0x2, 0x0)
ioctl$FICLONE(r10, 0x40049409, r11)
ioctl$TCSBRK(r0, 0x5409, 0x20)
r12 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x20000, 0x0)
ioctl$TIOCGETD(r12, 0x5424, &(0x7f0000000700))
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/attr/current\x00', 0x2, 0x0)
r13 = syz_open_dev$mice(&(0x7f0000000780)='/dev/input/mice\x00', 0x0, 0x744)
getpeername$unix(r13, &(0x7f00000007c0), &(0x7f0000000840)=0x6e)
fsetxattr$security_evm(r12, &(0x7f0000000880)='security.evm\x00', &(0x7f00000008c0)=@sha1={0x1, "5cf36d7ac59c5f4a4861aaa716610be80f3b0e4b"}, 0x15, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r13, 0x54a3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000900)={0xa, 0x4e20, 0x3, @ipv4={[], [], @remote}, 0xbc7}, 0x1c)

[  892.847903] binder: release 31902:31908 transaction 2321 out, still active
[  892.855353] binder: BINDER_SET_CONTEXT_MGR already set
[  892.860074] binder: undelivered TRANSACTION_COMPLETE
[  892.860094] binder: undelivered TRANSACTION_ERROR: 29201
[  892.873278] binder: 31902:31916 ioctl 40046207 0 returned -16
[  892.873298] binder: release 31902:31905 transaction 2321 in, still active
[  892.873303] binder: send failed reply for transaction 2321, target dead
03:21:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
syncfs(r1)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307709000000000000002a57ec7f94b6c098b9e0525c42cb97f906005e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd8477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/20], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockname(r7, &(0x7f0000000640)=@vsock, &(0x7f0000000400)=0x80)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r8 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4097, 0x1001}, {&(0x7f00000011c0)=""/140, 0x8c}], 0x2)

[  892.895069] binder: 31902:31916 transaction failed 29189/-22, size 0-0 line 3014
[  892.908102] binder: undelivered TRANSACTION_ERROR: 29189
03:21:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224)
clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x7ff}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000140)={0x0, 0x80000001, 0x5cf3, 0x3, 0x4, "7d666fcb43fbb1224adca646f2600d00abac79", 0x26, 0x6})
r6 = gettid()
rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0)
setpriority(0x1, r6, 0xa)
setsockopt$inet_int(r3, 0x0, 0x0, &(0x7f0000000100), 0x4)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x39)
shutdown(r0, 0x0)

[  893.112839] binder: 31960:31965 unknown command 0
[  893.118205] binder: 31960:31965 ioctl c0306201 20000180 returned -22
03:21:16 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001000)={0x1, 0x8b, "1a29f7de145d3faaa7997833f5e07d72b14984390786df302033ebfefafb988c0e3740545f4b2640f2a2a31d7707f97720e0af99e1214a833b07b2234e338b1613846bf95d4e5a7411b3c4c24f7a4704330b18d35976723cf362dd2331d45618d567dae93dc27e893545b78da195fcf436ec450d9957c908c865de9507dc5218b44164df034d50156b8ee9"})

03:21:16 executing program 0:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
r0 = gettid()
syz_open_procfs(r0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00CJ\xa6\xff\xaab\x02\x06\xea\xa9C@\x04\r\x02\a\xfa\x04\xf0\xb9\xd4n\xdf\x86@\xe2\x17\xc2 \xa5\xce\f\xba\xf1Iz\x90@_\x9d\xbcS\x9cj\x86\xffM\x86om\x8c\xd0\xcdq\xfb\xe1gv\xcb\xb8\xae\xca\n\xf6\x99|\x04\xa9nE~\xfaa<\x91\xc99\xdb\xf5H\xc7P\'x\xf5\\\\\xe0\x95c\xce\x1ez\xa6\"\x93\xd3\x0e\x190!V\x97\xf1\xa9\xf8]\x00\x19\xa0\xca\xf0\xa3\x86\\\b\x01\xc6ke\xff\'O\x9e\x8eS\xbb\f\xf6\xf5c7\xf3\xea\xb1\xcf\xabBu+/\x91\x1b\x8e\x9e\x93\xda\x90@\xae;\x04u>LW\xee\x04\xd5=\x9d\xca\x19A\x12\x95 %R\xe7uD\xa1Qk\xdbWy@yG\'-\xb9\xbbz\x98\xa9x\xae\xde\xdf\xa2_\xe3\'\x15\xba\x8f6t@')
fstat(0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x28b71db4}, 0xfffffffffffffed8)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="191f92b0635b86803a63ab6a60bfabf8204ad4871bf9527f96ffce20bde40f4c4507abdcff2e06ce33f9022810642f07c33192a92bf160b519524218373b3ee9b27a931e6f05595e401e361968d0607c450ce01688b32939502589e19e8b61a3ca9884dda30ea79fbcc47d8d37e8416246258cd9ac1dc13266a5af1376ee76b4d7eb9aaadb43e502e0f0449b21152bb7fc5dbaa982281bdd"], 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x1)
write(0xffffffffffffffff, 0x0, 0x0)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc)
sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe)
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000580)={0x5, 0x3, 0x0, 0x9, 0x4, [{0x4, 0x0, 0x7, 0x0, 0x0, 0x400}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x200}, {0x0, 0x2, 0x2, 0x0, 0x0, 0x8}, {0x3, 0x6, 0x100000001, 0x0, 0x0, 0x2002}]})
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f5110800040002010002080003800500", 0x22)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)
tee(r5, r6, 0x80000000, 0x2)

03:21:16 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080)='/Xev/zero\x00', 0x40, 0x0)
open(&(0x7f0000001000)='./file0\x00', 0x20000, 0xa)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:16 executing program 3:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000001000)={0x1, 0x8b, "1a29f7de145d3faaa7997833f5e07d72b14984390786df302033ebfefafb988c0e3740545f4b2640f2a2a31d7707f97720e0af99e1214a833b07b2234e338b1613846bf95d4e5a7411b3c4c24f7a4704330b18d35976723cf362dd2331d45618d567dae93dc27e893545b78da195fcf436ec450d9957c908c865de9507dc5218b44164df034d50156b8ee9"})

03:21:17 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:17 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/zero\x00', 0x80000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:17 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x101002)
write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24)
r1 = memfd_create(&(0x7f0000000040)='\x00', 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fchmod(r1, 0x0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

03:21:17 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='\x00\xc4\xbb\xaeT\x00', 0x4d0400, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096, 0x287}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  893.790192] binder: release 31960:31965 transaction 2325 out, still active
[  893.801502] binder: BINDER_SET_CONTEXT_MGR already set
[  893.803005] binder: undelivered TRANSACTION_COMPLETE
[  893.819978] binder: 31960:31965 ioctl 40046207 0 returned -16
[  893.820261] binder: release 31960:31964 transaction 2325 in, still active
[  893.820266] binder: send failed reply for transaction 2325, target dead
[  893.830732] binder: 31960:32004 transaction failed 29189/-22, size 0-0 line 3014
[  893.878863] binder: 31960:31965 unknown command 0
[  893.887400] binder: 31960:31965 ioctl c0306201 20000180 returned -22
[  893.906112] binder: undelivered TRANSACTION_ERROR: 29189
03:21:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x100, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x72daddeae6f7f4fb)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = gettid()
rt_tgsigqueueinfo(0x0, r2, 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:17 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
prctl$PR_GET_NAME(0x10, &(0x7f0000001100)=""/61)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000001000)=""/34)

03:21:17 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001040)='/dev/null\x00', 0x20000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0e05403, &(0x7f0000001280)={{0x1, 0x2, 0x9, 0x0, 0xfffffffd}, 0x8, 0xad, 'id0\x00', 'timer1\x00', 0x0, 0x101, 0x991, 0x3, 0x1})
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
write$cgroup_int(r2, &(0x7f0000001000)=0x5, 0x39)

03:21:17 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
syncfs(r1)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307709000000000000002a57ec7f94b6c098b9e0525c42cb97f906005e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd8477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/20], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockname(r7, &(0x7f0000000640)=@vsock, &(0x7f0000000400)=0x80)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r8 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:17 executing program 1:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/checkreqprot\x00', 0x2d8180, 0x0)
openat$cgroup(r0, &(0x7f0000001040)='syz1\x00', 0x200002, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r1, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

[  894.228777] binder: 32015:32023 got new transaction with bad transaction stack, transaction 2328 has target 32015:32019
03:21:17 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001000)={0x28, 0x2, 0x0, {0x6, 0x685, 0xffffffffffffffe0}}, 0x28)

[  894.270322] binder: 32015:32023 transaction failed 29201/-71, size 0-0 line 3041
[  894.312675] binder: 32025:32030 unknown command 0
[  894.322414] binder: 32025:32030 ioctl c0306201 20000180 returned -22
03:21:17 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:18 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0xffeb)
setsockopt$inet_mreqsrc(r1, 0x0, 0xe, &(0x7f0000001080)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, 0xc)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
creat(&(0x7f0000001000)='./file0\x00', 0x84)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/create\x00', 0x2, 0x0)

03:21:18 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  894.902165] binder: release 32015:32023 transaction 2328 out, still active
[  894.910245] binder: BINDER_SET_CONTEXT_MGR already set
[  894.916400] binder: 32015:32031 ioctl 40046207 0 returned -16
[  894.923195] binder: undelivered TRANSACTION_COMPLETE
[  894.932895] binder_alloc: 32015: binder_alloc_buf, no vma
[  894.939723] binder: 32015:32023 transaction failed 29189/-3, size 0-0 line 3137
[  894.948555] binder: undelivered TRANSACTION_ERROR: 29201
[  894.955207] binder: release 32015:32019 transaction 2328 in, still active
[  894.963506] binder: send failed reply for transaction 2328, target dead
[  894.983386] binder: undelivered TRANSACTION_ERROR: 29189
[  895.023607] binder: release 32025:32030 transaction 2331 out, still active
[  895.082319] binder: undelivered TRANSACTION_COMPLETE
[  895.099785] binder: release 32025:32026 transaction 2331 in, still active
[  895.108100] binder: send failed reply for transaction 2331, target dead
03:21:19 executing program 3:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000007997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fff0f00000000000055b088c2a08594e391798e4fd4959ba9a2a7b0588736a57525a30d463ea43084dc18400396d9289c9d3890eb3db522d9e73a871a86cc8c8dda87000000000200010000000000000005000000ffff05000500000000000a000000def7bd3e10c05ce000000000fe802000200000003692daa992ee1466395ce68b2924f451b8d794f2898349d98775e8892313139ed36645e73b7e98026a2f1608ecccbf7cf314f42c90dce7bbff092d3aae293564fa16c6e4a9f86c2bb07ec2e7fffffffffffffff851c9bbc932fd3db880214ddc7602fa6573030000009d4b9b1512762ff7078deea7ecf22cedd02401f7b9e1ba497f6f7e366e81b0849a4360028d353c95f47958f2be04ccfdce6654c290a0be2502f960b3952eddfa365a8fc0dfdff3cb252b66e19e095791919d0b6cbb604408eafb8dcea1b6201f6853fa1a61d22acaa33235a3ae800a4e58c5eb2f853e8b90d3c29f969a8c1e2613dea4143debf4687b440f4de0868fe80c090000000000000053fcd1305c4ec7814220a6fd9da31aaf112e5efa70aa8697c3dcac0528696b71d2d4fa7f20e2dd7171269fb9594953aa6c1ed23d483c37e867361f781f9a148990e890d1f56dfa30cd5a1eb2813b27cf899f8c7770dc485fa0ced372fd1a1c7b019de533e64b5fd06ed905f09019cf700f9edbf1fa8a59586b4447f2fee39a51e83bd94effac98bd205dde7695680457eff2d9609ebfb308d6a4cc499f62c0ba7de02fc2b0a4382b70b3ed26539e1fc8b4e8fa172307c2e202463f5cb1fdb59f15e241155a2466192ebf3797966c45b569e106f4fac4020271cd710ae1056b38c44f432adce583a6f51ec922f4deed4ffa81cf1b49eee68bc0500bef64e31aeaf1d0898b9d80c6ec7955b6409914b5c62b81b785b067cf9545f372a22417005dc65284ddabba48c57fc8afc483000000000000000000000000000000042fc743a1d9feda049e43f700eaca42efa373cdbf500bd3971fd69f57a7b1ce423d71f9e94e1acae52e7135183d1548db06577bfb2822a6eadb7a97d9e165dfa00347251a9e1556f42cbeaded60eded5000b29d475080a4ac8543237566cc94377c731cabe06f871aa5d313c542f0d20fbed65d61aac302deb10295fbdd3ad5f9955a22220607590f5e47c33e5a0167925a7c2af8eb61c52ed32e2270558c91442470ab0b3c2974079854b7c1c2d2c55c92df582be4a3ab6304f4c7ef69f61158ebcb09f1315ad1cb605dbb382fd7bfec788dd4dc646d2fd006ffcab26c3f410f3b240a8ef628e6665c260f93d4b8419c7ea6ac318855ac64324e9947fd9dcf0ab75015bec078c397739ddbe1c74d45ee9227e820eb7f248711263b9d8f64784ca50cf0b9b3a8bc9d340ab884cff138a29f9de642569b73cc64a195402685f3f169b2be0aaba77c7ba2b95374720f950ca03cb9e14cc37bfe0f13867ed3f6e609"], 0xd8}}, 0x0)
clock_settime(0x3, &(0x7f0000000040))
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x4, 0xc}, @timestamp], 0x2)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0x1, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
pipe2(&(0x7f0000000780), 0x800)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, <r3=>0x0})
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x6, {{0x5, 0x1, 0x0, r3}}}, 0x28)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff})
read(r4, &(0x7f0000000080)=""/250, 0xfa)
sendmmsg(r0, &(0x7f0000000180), 0x400024c, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x4, 0x8}, @window={0x3, 0xffffffff, 0x1ff}], 0x2)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0x1, 0x3}, 0xa)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
r8 = dup2(r7, r7)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x4, 0x8}, @window={0x3, 0xffffffff, 0x1ff}], 0x2)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0x1, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xffffffffffffffb5)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TCGETX(r6, 0x5432, &(0x7f0000000000))

03:21:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x264000, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:19 executing program 0:
r0 = socket$inet(0x2, 0x800000000007, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffef6)
readahead(r1, 0x401, 0x0)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40047705, &(0x7f00000001c0)={0x8, 0xffffff9d})
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x56, 0x1, 0x5})
creat(0x0, 0x0)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
unlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
r4 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
unshare(0x400)
bind$unix(r5, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @multicast1}, &(0x7f0000000180)=0xc)
creat(&(0x7f00000003c0)='./bus\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(r7, &(0x7f0000000680)=[{&(0x7f0000000400)="5dfe585711719d01829fac51d175d1150b88de386e02ff1e0f50ca67e24838380a24c16d4b3b31", 0x27}], 0x1, 0x4081806)
sendfile(r6, r7, 0x0, 0x20020102000007)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0xfffffef3)

03:21:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a642030771908fcffffff4e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d045f170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40032dd5e66b5a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x33)
ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x3f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
personality(0x1000000)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x8001)
r6 = dup2(r4, r4)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x41, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
dup2(r7, r7)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e21, 0x0, @remote, 0x40}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x1f, [0x0, 0x0, 0x1000, 0x80000000, 0x5, 0x4, 0x9, 0xde]}, 0x5c)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:19 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:19 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20630580}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1ac, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x88d0}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9f64}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x898b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x100}}, {0x20, 0x2, @in6={0xa, 0x1, 0x1ff, @loopback, 0xd7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x98}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40a0}, 0x1)
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)

03:21:19 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
flock(r1, 0x1)
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000001000)={0x2b, 0x3, 0x0, {0x0, 0xa, 0x0, '/dev/zero\x00'}}, 0x2b)

03:21:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/zero\x00', 0x4800, 0x0)
read(r1, &(0x7f0000001040)=""/98, 0x62)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001000)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0)

[  896.069673] binder: 32059:32079 got new transaction with bad transaction stack, transaction 2334 has target 32059:32069
[  896.097236] binder: 32059:32079 transaction failed 29201/-71, size 0-0 line 3041
03:21:19 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x2000, 0x0)
sendto$unix(r1, &(0x7f0000001280)="85a71d70958c6d0a378166c7b57205c7930e03dc24765bdc3798af9b21d43d5b8d81ec335e2eaeaa3e4e06173bcdd7029212bb4456dbab8216cb7530689a10ddbc2dc2e490a5dceece661a1df6e10a91367d92eb39c193ecbbb04d740f700a1f2b2d69f0f3e73a524830339bfe9199d2174268db4e6a3a5cf4e8d4400352fcd8e6ab553104403789d7b6df1709a407277b3e65acf69a80eb26ee2466543af232846dd69fae570432772fb6de2259339d9900f2c6c51a83dd9e7caa32ca517d763ba70bb1d4efa54a72ce68917393bb0c7c34e0cfaed27a27676647d94b4f018f314bba680917645bb0e44800fc518d67196654f952", 0xf5, 0x11, &(0x7f0000001040)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000001100))

[  896.694240] binder: release 32059:32079 transaction 2334 out, still active
[  896.694434] binder: BINDER_SET_CONTEXT_MGR already set
[  896.694442] binder: 32059:32090 ioctl 40046207 0 returned -16
[  896.718404] binder_alloc: 32059: binder_alloc_buf, no vma
[  896.724414] binder: 32059:32090 transaction failed 29189/-3, size 0-0 line 3137
[  896.740901] binder: undelivered TRANSACTION_COMPLETE
[  896.770245] binder: undelivered TRANSACTION_ERROR: 29201
[  896.804892] binder: release 32059:32069 transaction 2334 in, still active
03:21:20 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a642030771908fcffffff4e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d045f170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40032dd5e66b5a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x33)
ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x3f)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
personality(0x1000000)
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x8001)
r6 = dup2(r4, r4)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x41, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
dup2(r7, r7)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000340)={{0xa, 0x4e21, 0x0, @remote, 0x40}, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x1f, [0x0, 0x0, 0x1000, 0x80000000, 0x5, 0x4, 0x9, 0xde]}, 0x5c)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
r1 = dup2(r0, r0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000001080)={0x7, 0x638, 0x8000, 0x88, 0x9, 0x100, 0x101, 0x1000, 0x0, 0x5, 0x4, 0x7, 0x7, 0x4, &(0x7f0000001000)=""/70, 0x81, 0x7, 0x4})
setsockopt$inet_buf(r1, 0x0, 0x2e, &(0x7f0000001280)="2156153f37c5084829c61b5e255aadc794760db177f5c909a74f6d41823957a6b321fce6a82fa599b7db3d8498b96b68859414ff600d7fc648d8222caf6f970b135250dac7914907bfb45ba8a9aa27244573bc6215a71a137b66f01ce2a7a38e9d0dd3e79d62fb5236f72acc4b4e8e490cec10a216b8b4953ca573cb1aabfd810b5f3272723e3eea10eaa7a76f2cfa57cc3163bad96d7773b9d37bc7ab8f940775f9d74c7f6a39755f332466b56ea9283983023553250956f305d74415c0d6f44bd93061f3648ca6957843fd5753f4a68abf5a1205", 0xd5)
munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r2, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000013000000000000000000"], 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x9, 0x1, 0x2})
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:20 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:20 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:20 executing program 0:
r0 = socket$inet(0x2, 0x800000000007, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
read(r1, &(0x7f0000000200)=""/250, 0xfffffffffffffef6)
readahead(r1, 0x401, 0x0)
ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r3 = creat(0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40047705, &(0x7f00000001c0)={0x8, 0xffffff9d})
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x56, 0x1, 0x5})
creat(0x0, 0x0)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
unlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')
r4 = memfd_create(&(0x7f0000000080)='#em3#/\x00', 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
unshare(0x400)
bind$unix(r5, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @multicast1}, &(0x7f0000000180)=0xc)
creat(&(0x7f00000003c0)='./bus\x00', 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r6=>0xffffffffffffffff})
r7 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0)
pwritev(r7, &(0x7f0000000680)=[{&(0x7f0000000400)="5dfe585711719d01829fac51d175d1150b88de386e02ff1e0f50ca67e24838380a24c16d4b3b31", 0x27}], 0x1, 0x4081806)
sendfile(r6, r7, 0x0, 0x20020102000007)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0), 0xfffffef3)

[  896.819251] binder: send failed reply for transaction 2334, target dead
[  896.831904] binder: undelivered TRANSACTION_ERROR: 29189
03:21:20 executing program 1:
readv(0xffffffffffffffff, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:20 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
prctl$PR_SET_FP_MODE(0x2d, 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fcntl$getown(r2, 0x9)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
dup(r1)
r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00')
mkdirat(r3, &(0x7f0000001040)='./file1/file0\x00', 0x22)
renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_SETVERSION(r3, 0x40047602, &(0x7f0000001000)=0x1d80dbd9)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:20 executing program 1:
openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', 0x800, 0xa0d1e0ec9a0908b3)
readv(r0, &(0x7f00000010c0), 0x0)

03:21:20 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00')
mkdirat(r2, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000001000)={r2, 0x0, 0x96, 0x3, 0x5})

03:21:20 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x7)
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000001680)=""/4099, 0x1003}, {&(0x7f00000011c0)=""/140, 0x33}], 0x2)

03:21:21 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640)='/dev/zero\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00')
mkdirat(r1, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000001000)={{0x0, 0x0, @descriptor="fcc085c018b60402"}})
readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4096}, {&(0x7f00000011c0)=""/140, 0xf7}], 0x20000000000003bc)

03:21:21 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil)
mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0)
mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000977000/0x400000)=nil)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x4}, 0x28, 0x1)

03:21:21 executing program 1:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @dev, 0x4}, 0x1c)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @remote}, {0x2, 0x4e31, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)='bond_slave_0\x00', 0x8, 0x8, 0x7fffffff})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr="ac021c0158eab1caa6e4f4989e3495ca"}, 0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540))
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200))
r3 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x80000000000000)
write$P9_RLINK(r3, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7)
fadvise64(r3, 0x0, 0x2, 0x7)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000b00)={0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000940)='mountstats\x00?\xba\xa7w\xb6r\xc28\x06\xb9?\x83\xb3\x8d\xd9?\x84\n\xcb\x94\xd8\xed\x9d\x82^b\b4<\x85\x86\x8c\xa3\xff\xe9\xcc_a\t\xd4G\xc2\x13\xd0[~h%\xf7\xf0\x06\xd6\xd9w\x81s\xf4\xcb\xd6\xb1\xe6\x15\x85\xe0\x9c\x93cMO\xa0\xe1\xd1\xaem\xcb\xdb\x1e\xf8p#\xd1?\xf3t\xd3\x8f\xe2^\x80\xd5a7\xd2\xaf\xba\x14Z\x13\xef\xfd\x03U\xee\xecb\xc7\x1c\x7f\x88\x96S\x8b\x0f\xd29\x82\xce{~JSJ\xdb\xf7\xedE\xcc\xee\xb8(\xb87\"U\xc6\x92\xe2\xc0\x03\x11t\x01\'\x1d{A\x1f\xed\xf8\xf7J\x11\xd7\xed=\x01\xe6I\x1b\x11{\x84\x9f\x8b:#\xcc\x01~\xeb\b\xdc,]\xea\x17u8\xf1\xfdV\x91\xe7\x9dO\x82?\xf4N\xe0\x0eh\x0e\x1c\xb9\xe4\x06\x82Z\xc3m\xe2\x84\x16)r\x15\xed\xdb\xcd`e\xee^\xfe2\x13\x1b\xbc\x8dq\x14h\xd6\r3\x00\x00\x9c\x9a\xd7\x93r\xea\xef\x87\xaf\xb9\xc6:\x8e\x804f\x175\xcb\"\xa4\xd2\xac\xeb:!|0\xc3;/\x14\xe5)\xba\x13Cw^\xa1\xf2\n\xb8p\x8d;\x15\xc8\xe2\xc1M\xa2p\x9e\xe6\x16\xc1\xcb\xbby\x99iK\x97\xab\xb8R\xcb\xc18Y\xe5\x00\xaf\xc1Ej\xa8\xa8+\xf1!\xf3\x81C\xdd\x9d\x0f\xdb\x88}\xacE\x81\xd1\xa7\x81\"\xb0\f\x14\r\x81\xd6\xa1\xc5\xdb\xde\x8f/#\xb0!\xc0\xd6m\x89\xa5\x1b\xc6\x9f2\xeb\x18\xe9\xf8k\x04@\x97|\xf9\xdahf\xbf8J\"j\x81N\x9c\xe0\xa5\x93!If&\x8b\x84\x10\x98\xf2!Qn\xce\x13YV\xc8I\xdab\xd0\xea\x9cO')
sendfile(r0, r5, 0x0, 0x88001)
sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x800000004e22, 0x0, @remote}, 0xe)
setsockopt$sock_timeval(r6, 0x1, 0x1b, 0x0, 0xffffffffffffffc8)
listen(r6, 0x80)
r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0)
pipe(&(0x7f0000000340)={<r8=>0xffffffffffffffff})
read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000fbffffffffffffff00"/268], 0xffeb)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000002000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6f65d454491d7758b329ba1aa02275b0b02c0b87dd9fdfc369814bb5600998ddf03b4cc3335f4ac158a4d06e39da131ec38698efcbacbace21ac564963c2e77268a92c9521b0037d4c734de692db09d109771b4f48444d4"], 0xffeb)
getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000780)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xff42)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r11, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
recvfrom$inet6(r11, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000380)={'vlan0\x00', 0x51ff})
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)
ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000180)=""/31)
setpriority(0x3, 0x0, 0x0)

03:21:21 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
truncate(&(0x7f00000003c0)='./file0\x00', 0x7f)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.u\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00', 0x200002, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27)
write$cgroup_int(r0, &(0x7f0000000440)=0x1, 0x12)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000004c0))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=<r4=>0x0)
fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x1, 0x7, r4})
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x8a)
fcntl$setstatus(r5, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140))
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40)
lseek(r2, 0x1, 0xffffffffffffffff)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r7, &(0x7f0000000500)='./file0\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000540)='./file0\x00', r7, &(0x7f0000000280)='./bus\x00', 0x4)
renameat2(r7, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
write$eventfd(r0, &(0x7f0000000080)=0x8, 0x8)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)

[  897.691733] binder: release 32127:32138 transaction 2340 out, still active
[  897.698900] binder: undelivered TRANSACTION_COMPLETE
03:21:21 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:21 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

03:21:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(r5, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00')
mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000100)='./file1/file0\x00', 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r6, @ANYRESHEX=r7, @ANYRES32], 0xfffffff5, 0x0, 0x0})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r9 = dup2(r8, r8)
write$UHID_GET_REPORT_REPLY(r9, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  897.751313] binder: release 32127:32146 transaction 2339 out, still active
[  897.772229] binder: undelivered TRANSACTION_COMPLETE
03:21:21 executing program 3:
ustat(0x0, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10)
getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1})
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
shutdown(r2, 0x1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x0, 0x6})
recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000400)=""/4082, 0xff2}], 0x1, 0x0, 0x1c}, 0x40)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='netdevsim0\x00', 0x10)
write(r1, &(0x7f00000001c0), 0xfffffef3)
write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8)
read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
write$FUSE_OPEN(r4, &(0x7f0000001440)={0x20}, 0x20)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000140)=""/41)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000001500)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080), 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000014c0)=0x5)
write(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x40051)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001400)='memory.current\x00', 0x0, 0x0)
ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x13)

[  897.797918] binder: release 32127:32130 transaction 2339 in, still active
03:21:21 executing program 3:
r0 = socket$packet(0x11, 0x8000000000000003, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x1, 0x0, 0xfffffffffffffffc}, 0x4)
pipe2(&(0x7f0000000000), 0x1800)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, 0x1c)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x220cce92146c92d6, &(0x7f0000000080), &(0x7f0000000180)=0x4)
link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00')
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000002000000e0000001000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac141400"/268], 0xffeb)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000240))
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[{0x800006, 0x0, 0x0, 0x1008}]}, 0x10)
sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg(r1, &(0x7f0000000400), 0x40000000000017a, 0x0)

[  897.832696] binder: send failed reply for transaction 2339, target dead
[  897.862198] binder: send failed reply for transaction 2340, target dead
03:21:21 executing program 3:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x1e6, [0x200002c0, 0x0, 0x0, 0x200004f4, 0x20000524], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000626f6e645f736c6176655f31000000007465716c300000000000000000000000687773696d300000000000000000000074756e6c3000000000000000000000000000000000000000000000000000000000000000000000006e0000006e000000b60000005241544545535400000000000000000000000000000f2c11af82431f4e0b6775a43c6b490000000000000000000000200000000000000073e8797a31000000000000000000000000000000000000200000000000000000000000000000000000000073797a6b616c6c65723000000000001b76657468305f746f5f7465616d00000076657468305f746f5f7465616d0000007465616d5f736c6176655f30000000000180c2000000000000000000aaaaaaaaaa000000000000006e0000006e000000a6000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000feff04cbc0697225e2b6a4b46335ef2d4ca7a5767708b83ca531d9b29cd05431a4461d0df0623f58a736cc8162dc425480cc368e0e3e7d45d9e237e56041b575b478c456d0f842493ce4050994"]}, 0x291)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88)
sendto$inet(r0, &(0x7f0000000600)="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", 0xfdaa, 0x80, 0x0, 0xffffff9a)

03:21:21 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="2400000021002553e5e86e70af57bb2602000020001c000000ff000c08001700169da980", 0x24)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000bfff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff020000000000000000000000000001e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7ce4132c00000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000d5decbd422c35435dbae5100"/112], 0xb8}}, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f0000000140)=0x4)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast1}}, 0x0, 0x0, [{{0x2, 0x0, @dev}}]}, 0xffeb)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@multicast1}}, &(0x7f00000009c0)=0x63f2222)
sendmsg$nl_netfilter(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)={0x487, 0xe, 0xa, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x2}, [@nested={0xc0, 0x67, [@typed={0x14, 0x47, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="63fece05cd7eb1a815bb85da10d3f32a802d882ff3f61d86150c0525a5083d597422d73acd7922e84d854cb119e2328ccb1956f85148edcc5c08ff753383ce375dce8b9567c5148b0efde3a94b8756dd56655c25d877bb2edb5f3a1ecddbb87ae15b3ba4d7494aa8989456eb5e463ac92df06d8c8ad33fc97d6b94803ee80b435fffd060e524d78124488f50e9e7ca64289a72305a2a31b083d71b", @generic="b13dca48700075083d63dae5c286c92197b94d60777f263218bd2e4da3fda4ea54fdab74797da30c8f3ee7355dc75dcba524cc0c504fad48098971a8dc3c5a0e9f20e8c3d93624537c12125fab5e85bcd8cd92d95ed6ba8c4f9908247b09855654f5a92f97b03c55d5991dadcad0e6574db2c8db5d56aaea03439e4df27b203d5258fd6231e1463d96427397529a6b6d00f4573935e23ae7a101c83674cabc417473fcd089dc9370d9412dd02c02cfd98240365df29000f90e9eb04b4650b7f1765a1842"]}, @typed={0x8, 0x4e, @uid=r7}, @generic="162ee7d7eaa14eb3103703ec54a25803747628f8398118da2dfb1f7b45daf96f22ec3cb793215a472df77d054f7048424504389b88e503c97e0c41e91b0838923ee86a56ce4f10a3a60a65158f70606b735cb73a428a4428f7fdf6a316c8a65ce3f0ab473cf6cf566b0a21268c1f526dfbad9630d77af4a4d013b06a43f0cabb05b7e12ffd514539adf967f33f7a342e63b9b1e8", @generic="6a2fec040326285d872d914d909b8c0979d95248da9a971ffd14f7d3c83341f81b6db0d4fef4084ee20b0507f7c70b26e19fbb5244ddb202211e42d57889ac080bdfa85a74f1a7e5b8ff0083a27b5168c91e3c3538c96218b1e920ebc8de06ce010cbe681b5ca85aba18d0720b1d46ff0f7e67d93076676ec90256a04db6b8cc7659210771479a36ed4b19cc0bc2fadd862b5f00b14a9c351867a7b1799129207c20db1f354b29bcad8c3ac8fe7004d3799aede7ae41754f9e00769ca1b0e81db6220b1d6932dce96d926c9c7c2693e547cf712f2d202584432a7689a285ffc8f134de1985da2a16707501baf3"]}, 0x260}}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
recvfrom$packet(0xffffffffffffffff, &(0x7f0000000600)=""/248, 0xf8, 0x2000, &(0x7f0000000700)={0x11, 0xf5, r6, 0x1, 0x58, 0x6, @remote}, 0x14)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000740)={0x40, 0x1, 0x6, 0x6, 0x7f}, 0x14)
bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r8, 0x0, 0xfffffffffffffe0c, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendto$inet(r8, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000180), 0x4)

03:21:21 executing program 3:
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000001600)={0x5, 0x8000, 0x0, 0x101, 0x0, 0x31aa})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'gre0\x00', 0xd432})
pipe(0x0)
pipe(&(0x7f0000000000))
syz_open_dev$loop(0x0, 0x3, 0x51d00)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(0x0)
ftruncate(0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xc000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
r4 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040), 0x4)
r5 = open$dir(&(0x7f0000000300)='./bus\x00', 0x5a800, 0x4)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')

03:21:22 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  898.600142] binder: release 32179:32190 transaction 2343 out, still active
[  898.639469] binder: undelivered TRANSACTION_COMPLETE
03:21:22 executing program 2:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  898.647466] binder: BINDER_SET_CONTEXT_MGR already set
[  898.665878] binder_alloc: 32179: binder_alloc_buf, no vma
[  898.671932] binder: 32179:32211 ioctl 40046207 0 returned -16
[  898.682398] binder: 32179:32217 transaction failed 29189/-3, size 0-0 line 3137
[  898.705684] binder: release 32179:32183 transaction 2343 in, still active
[  898.761486] binder: send failed reply for transaction 2343, target dead
[  898.785848] binder: undelivered TRANSACTION_ERROR: 29189
03:21:22 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x12800, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffd)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000))
pipe(&(0x7f0000000640)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x43f, 0x4d01})
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000400)='security.capability\x00', 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000380)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
fstat(0xffffffffffffffff, &(0x7f0000000300))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
syncfs(r1)
r8 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
ftruncate(r8, 0x280080)
ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7})

03:21:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
fsync(r4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
ioctl$KDSETMODE(r5, 0x4b3a, 0x8)

03:21:22 executing program 3:
prctl$PR_SET_DUMPABLE(0x4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, "0df179a719725a1d16b313b2e8ef3ea569db6aa6ee245ea1670b2f14bca07df7f380e94918add7106ff27a792301b884ab6089a1de87a352056e56ca41496e89", "e566ba16eb013d24f291b03d3f7a56ae896070797fc3db4d6dac0bfd0ee230cf"})

03:21:22 executing program 0:
socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
truncate(&(0x7f00000003c0)='./file0\x00', 0x7f)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='.u\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00', 0x200002, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27)
write$cgroup_int(r0, &(0x7f0000000440)=0x1, 0x12)
ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000004c0))
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r3)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=<r4=>0x0)
fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x1, 0x7, r4})
r5 = creat(&(0x7f0000000480)='./bus\x00', 0x8a)
fcntl$setstatus(r5, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0xa00)
ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000140))
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40)
lseek(r2, 0x1, 0xffffffffffffffff)
mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mknodat(r7, &(0x7f0000000500)='./file0\x00', 0x0, 0x0)
renameat2(r7, &(0x7f0000000540)='./file0\x00', r7, &(0x7f0000000280)='./bus\x00', 0x4)
renameat2(r7, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)
sendfile(r5, r6, 0x0, 0xfffffffffffffffc)
write$eventfd(r0, &(0x7f0000000080)=0x8, 0x8)
sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe)

[  898.942128] 
[  898.944842] ======================================================
[  898.951160] [ INFO: possible circular locking dependency detected ]
[  898.957569] 4.4.174+ #17 Not tainted
[  898.961322] -------------------------------------------------------
[  898.968020] syz-executor.3/32233 is trying to acquire lock:
[  898.973829]  (&bdev->bd_mutex){+.+.+.}, at: [<ffffffff81a7920f>] blkdev_reread_part+0x1f/0x40
[  898.983247] 
[  898.983247] but task is already holding lock:
03:21:22 executing program 3:
prctl$PR_SET_DUMPABLE(0x4, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, "0df179a719725a1d16b313b2e8ef3ea569db6aa6ee245ea1670b2f14bca07df7f380e94918add7106ff27a792301b884ab6089a1de87a352056e56ca41496e89", "e566ba16eb013d24f291b03d3f7a56ae896070797fc3db4d6dac0bfd0ee230cf"})

[  898.989329]  (loop_ctl_mutex#2){+.+.+.}, at: [<ffffffff81d48065>] lo_compat_ioctl+0x105/0x140
[  898.998968] 
[  898.998968] which lock already depends on the new lock.
[  898.998968] 
[  898.998971] 
[  898.998971] the existing dependency chain (in reverse order) is:
[  898.998983] 
[  898.998983] -> #2 (loop_ctl_mutex#2){+.+.+.}:
03:21:22 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)

[  898.999002]        [<ffffffff81205f6e>] lock_acquire+0x15e/0x450
[  898.999024]        [<ffffffff8270c191>] mutex_lock_nested+0xc1/0xb80
[  898.999031]        [<ffffffff81d48124>] lo_release+0x84/0x1b0
[  898.999039]        [<ffffffff8154e4e1>] __blkdev_put+0x461/0x840
[  898.999046]        [<ffffffff8154f738>] blkdev_put+0x88/0x560
[  898.999053]        [<ffffffff8154fc9b>] blkdev_close+0x8b/0xb0
[  898.999061]        [<ffffffff8149c8c6>] __fput+0x246/0x710
[  898.999068]        [<ffffffff8149ce16>] ____fput+0x16/0x20
[  898.999078]        [<ffffffff8112f352>] task_work_run+0x202/0x2b0
[  898.999089]        [<ffffffff81003dca>] exit_to_usermode_loop+0x14a/0x170
[  898.999099]        [<ffffffff8100569b>] syscall_return_slowpath+0x25b/0x2e0
[  898.999107]        [<ffffffff82718ce1>] int_ret_from_sys_call+0x25/0xa3
[  898.999115] 
[  898.999115] -> #1 (loop_index_mutex){+.+.+.}:
[  898.999123]        [<ffffffff81205f6e>] lock_acquire+0x15e/0x450
[  898.999137]        [<ffffffff8270c191>] mutex_lock_nested+0xc1/0xb80
[  898.999147]        [<ffffffff81d3d70d>] lo_open+0x1d/0xb0
[  898.999152]        [<ffffffff8154eb6e>] __blkdev_get+0x2ae/0xdf0
[  898.999161]        [<ffffffff81551938>] blkdev_get+0x2e8/0x920
[  898.999168]        [<ffffffff8155219a>] blkdev_open+0x1aa/0x250
[  898.999179]        [<ffffffff8149154f>] do_dentry_open+0x38f/0xbd0
[  898.999186]        [<ffffffff81494d3b>] vfs_open+0x10b/0x210
[  898.999197]        [<ffffffff814c5ddf>] path_openat+0x136f/0x4470
[  898.999206]        [<ffffffff814ccab1>] do_filp_open+0x1a1/0x270
[  898.999213]        [<ffffffff81495668>] do_sys_open+0x2f8/0x600
[  898.999220]        [<ffffffff8149599d>] SyS_open+0x2d/0x40
[  898.999228]        [<ffffffff82718ba1>] entry_SYSCALL_64_fastpath+0x1e/0x9a
[  898.999235] 
[  898.999235] -> #0 (&bdev->bd_mutex){+.+.+.}:
[  898.999243]        [<ffffffff81202d86>] __lock_acquire+0x37d6/0x4f50
[  898.999250]        [<ffffffff81205f6e>] lock_acquire+0x15e/0x450
[  898.999259]        [<ffffffff8270c191>] mutex_lock_nested+0xc1/0xb80
[  898.999268]        [<ffffffff81a7920f>] blkdev_reread_part+0x1f/0x40
[  898.999277]        [<ffffffff81d3ed4c>] loop_reread_partitions+0x7c/0x90
[  898.999285]        [<ffffffff81d3f962>] loop_set_status+0xc02/0x1260
[  898.999293]        [<ffffffff81d40072>] loop_set_status_compat+0xb2/0x110
[  898.999300]        [<ffffffff81d48070>] lo_compat_ioctl+0x110/0x140
[  898.999309]        [<ffffffff81aa7200>] compat_blkdev_ioctl+0xca0/0x344f
[  898.999317]        [<ffffffff8159b2c3>] compat_SyS_ioctl+0x403/0x2210
[  898.999326]        [<ffffffff8100603d>] do_fast_syscall_32+0x32d/0xa90
[  898.999334]        [<ffffffff8271a350>] sysenter_flags_fixed+0xd/0x1a
[  898.999336] 
[  898.999336] other info that might help us debug this:
[  898.999336] 
[  898.999347] Chain exists of:
[  898.999347]   &bdev->bd_mutex --> loop_index_mutex --> loop_ctl_mutex#2
[  898.999347] 
[  898.999348]  Possible unsafe locking scenario:
[  898.999348] 
[  898.999350]        CPU0                    CPU1
[  898.999352]        ----                    ----
[  898.999356]   lock(loop_ctl_mutex#2);
[  898.999360]                                lock(loop_index_mutex);
[  898.999366]                                lock(loop_ctl_mutex#2);
[  898.999369]   lock(&bdev->bd_mutex);
[  898.999371] 
[  898.999371]  *** DEADLOCK ***
[  898.999371] 
[  898.999375] 1 lock held by syz-executor.3/32233:
[  898.999388]  #0:  (loop_ctl_mutex#2){+.+.+.}, at: [<ffffffff81d48065>] lo_compat_ioctl+0x105/0x140
[  898.999390] 
[  898.999390] stack backtrace:
[  898.999398] CPU: 1 PID: 32233 Comm: syz-executor.3 Not tainted 4.4.174+ #17
03:21:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  898.999409]  0000000000000000 381e772ad8053897 ffff88009aae75e0 ffffffff81aad1a1
[  898.999418]  ffffffff84057a80 ffff8800b7030000 ffffffff83aa0cc0 ffffffff83ac6df0
[  898.999426]  ffffffff83aa1890 ffff88009aae7630 ffffffff813abcda ffffffff83e1b180
[  898.999428] Call Trace:
[  898.999436]  [<ffffffff81aad1a1>] dump_stack+0xc1/0x120
[  898.999445]  [<ffffffff813abcda>] print_circular_bug.cold+0x2f7/0x44e
[  898.999452]  [<ffffffff81202d86>] __lock_acquire+0x37d6/0x4f50
[  898.999459]  [<ffffffff811ff5b0>] ? trace_hardirqs_on+0x10/0x10
[  898.999467]  [<ffffffff811fffff>] ? __lock_acquire+0xa4f/0x4f50
[  898.999474]  [<ffffffff81205f6e>] lock_acquire+0x15e/0x450
[  898.999481]  [<ffffffff81a7920f>] ? blkdev_reread_part+0x1f/0x40
[  898.999488]  [<ffffffff81a7920f>] ? blkdev_reread_part+0x1f/0x40
[  898.999496]  [<ffffffff8270c191>] mutex_lock_nested+0xc1/0xb80
[  898.999503]  [<ffffffff81a7920f>] ? blkdev_reread_part+0x1f/0x40
[  898.999511]  [<ffffffff81af10f4>] ? find_next_bit+0x44/0x50
[  898.999518]  [<ffffffff8123a761>] ? debug_lockdep_rcu_enabled+0x71/0xa0
[  898.999527]  [<ffffffff8270c0d0>] ? mutex_trylock+0x500/0x500
[  898.999534]  [<ffffffff8271802a>] ? _raw_spin_unlock_irqrestore+0x5a/0x70
[  898.999541]  [<ffffffff811ff385>] ? trace_hardirqs_on_caller+0x385/0x5a0
[  898.999548]  [<ffffffff81a7920f>] blkdev_reread_part+0x1f/0x40
[  898.999556]  [<ffffffff81d3ed4c>] loop_reread_partitions+0x7c/0x90
[  898.999564]  [<ffffffff81d3f962>] loop_set_status+0xc02/0x1260
[  898.999571]  [<ffffffff81d40072>] loop_set_status_compat+0xb2/0x110
03:21:23 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  898.999579]  [<ffffffff81d3ffc0>] ? loop_set_status+0x1260/0x1260
[  898.999587]  [<ffffffff8270c8ad>] ? mutex_lock_nested+0x7dd/0xb80
[  898.999595]  [<ffffffff81d48070>] lo_compat_ioctl+0x110/0x140
[  898.999601]  [<ffffffff81d47f60>] ? lo_ioctl+0x1a70/0x1a70
[  898.999608]  [<ffffffff81aa7200>] compat_blkdev_ioctl+0xca0/0x344f
[  898.999615]  [<ffffffff81aa6560>] ? cfq_merged_request+0x100/0x100
[  898.999624]  [<ffffffff8194e4ff>] ? security_file_ioctl+0x8f/0xc0
[  898.999631]  [<ffffffff81aa6560>] ? cfq_merged_request+0x100/0x100
[  898.999638]  [<ffffffff8159b2c3>] compat_SyS_ioctl+0x403/0x2210
[  898.999646]  [<ffffffff81272487>] ? ktime_get_ts64+0x1f7/0x2c0
[  898.999654]  [<ffffffff8159aec0>] ? compat_SyS_ppoll+0x3d0/0x3d0
[  898.999661]  [<ffffffff81430845>] ? __might_fault+0x95/0x1d0
[  898.999669]  [<ffffffff81269e18>] ? SyS_clock_gettime+0x118/0x1e0
[  898.999676]  [<ffffffff81269d00>] ? SyS_clock_settime+0x220/0x220
[  898.999684]  [<ffffffff812983eb>] ? compat_SyS_futex+0x1fb/0x2f0
[  898.999693]  [<ffffffff812b213e>] ? __compat_put_timespec.isra.0+0xce/0x140
[  898.999701]  [<ffffffff812b52c2>] ? compat_SyS_clock_gettime+0x162/0x1f0
[  898.999709]  [<ffffffff812b5160>] ? compat_SyS_clock_settime+0x1b0/0x1b0
[  898.999717]  [<ffffffff810aaa73>] ? __do_page_fault+0x2b3/0x7f0
[  898.999725]  [<ffffffff81005de6>] ? do_fast_syscall_32+0xd6/0xa90
03:21:23 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  898.999732]  [<ffffffff8159aec0>] ? compat_SyS_ppoll+0x3d0/0x3d0
[  898.999740]  [<ffffffff8100603d>] do_fast_syscall_32+0x32d/0xa90
[  898.999748]  [<ffffffff8271a350>] sysenter_flags_fixed+0xd/0x1a
[  899.003992] loop_reread_partitions: partition scan of loop0 (
ñy§rZ³²èï>¥iÛj¦î$^¡g/¼ }÷ó€éI­×oòzy#
¸„«`‰¡Þ‡£RnVÊAIn) failed (rc=-13)
03:21:23 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  899.062870] binder: 32229:32241 got new transaction with bad transaction stack, transaction 2346 has target 32229:32234
[  899.062883] binder: 32229:32241 transaction failed 29201/-71, size 0-0 line 3041
[  899.484025] uinput: write device info first
[  899.661820] uinput: write device info first
[  899.712463] binder: BINDER_SET_CONTEXT_MGR already set
[  899.712472] binder: 32229:32263 ioctl 40046207 0 returned -16
[  899.714609] binder: release 32229:32241 transaction 2346 out, still active
[  899.714613] binder: undelivered TRANSACTION_COMPLETE
[  899.714627] binder: undelivered TRANSACTION_ERROR: 29201
[  899.714660] binder: release 32229:32234 transaction 2346 in, still active
[  899.714664] binder: send failed reply for transaction 2346, target dead
[  899.765378] binder: 32229:32265 transaction failed 29189/-22, size 0-0 line 3014
[  899.789719] binder: undelivered TRANSACTION_ERROR: 29189
[  899.974703] binder: 32277:32279 got new transaction with bad transaction stack, transaction 2350 has target 32277:32278
[  899.989121] binder: 32277:32279 transaction failed 29201/-71, size 0-0 line 3041
03:21:23 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)

03:21:23 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x0)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  900.326692] uinput: write device info first
[  900.671082] binder: release 32277:32279 transaction 2350 out, still active
[  900.681744] binder: undelivered TRANSACTION_COMPLETE
[  900.687060] binder: BINDER_SET_CONTEXT_MGR already set
[  900.700818] binder: undelivered TRANSACTION_ERROR: 29201
[  900.706770] binder: 32277:32294 ioctl 40046207 0 returned -16
[  900.721492] binder: release 32277:32278 transaction 2350 in, still active
[  900.726122] binder: 32277:32295 transaction failed 29189/-22, size 0-0 line 3014
[  900.743514] binder: send failed reply for transaction 2350, target dead
[  900.752850] binder: undelivered TRANSACTION_ERROR: 29189
03:21:24 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:24 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

03:21:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000340))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xfb)
sendto$inet6(r5, &(0x7f0000000700)="b07c1128d20f8b89abf622bea74afb0f5c32657eb07320fb3004a32c3a8bee84af0d687ca306232d60f9b58ce269fa8bc3bc3a92793bdfcbee80a2f592e5b22d8f42914a901aca24e90478c5e31b4ff5ac708dbcf3a8580e006c8a4be3c0952001346f70d0460ae2159a011a306244f461af98acee98946fc79e3935c783377a0e78f175f7cb97e464473ece98e7829f72cb9b1fd7b59bf0028aa2247d4b295a5318d97a24b44c67e618c8defbbdc4096afbfb09f73647d2cd1d38fa6c1dfdfbaaf9071af2bfc981433895589f23f944757c2ccf04eaf516d27e1760b591022a890587c97e64104283aaa956336b684c8999c474ac6c1ba7beab413d04c14c341718985af138d95ea0c98d4c4c30d7583a12dd24fa8703ea9af59b60bcd5059b0b6de0426f6831888f69944ded20cbb749d98647d902be822daca222b3a29144547df43ec01b2058f198cdba1686f981763cb18e9508cd79e78bda9ef9e11decd2f00fc785d62e98bab341b594cbcf21563fee2ca4bc31ce9f57d9b71d194e6a4cace1805cbeae2ea74b891369e3f5f5ce399fffb00fc4f1c4bc57778a909bfce8df617a3fd0fd8614ac424a794d4a8d3a2db87ae51e30ea2f3db0ed4d25bde91c0b43699606137d2c0527c2e5093b356238b9a81447c8ed0a4a60ed0a54dc933d1fc43d470ca60e97efa86f5fb076024ec8ba083b33edac83dd2c7688f178c82bd7fcf1a0cff4c2fbf225153ee57ddc4996e827a793fb7a5f565e1ebae944a70c96e5e022cbf1216f7497a2c0c0622c7090861ac7c748d1624407be28a52448648cb9abcf0c83ed746720f58723e9dd932b9521f2b4d3f6ce380a291c8a1da9fd8765849e2091786f094981e9f5f1791e386ebf3aa5d15f9d5edf7b4183507f2ebfbb9232c7e991c854e3bc2118a51127873f5abb3c899caf4a411cf91b108538608430197a33aef63c813b92da86486d769b552298defef29ef7260a0f6d4bc1a99e89c1ef0146843058e04f911a1f98b4b832022b76da1b653bee461d834aad54aeb074ab2c2d344919f8d58df34e5fd83e9bf2e2fca8983a1426bb890aca1a2843dfbd889bd3c54bbc27344dfbe2c326e0f328e7a1c2df34ed91323be028d551b1dbe671153eb3f5aefd41b42db9243866e9cb18e1c3a086d54d33c2ebec32f75a057ed809cc7b0c9a3b2990f2aee129006518ebb34198b6a524b7d45801f52b85865acb1274bf5b85565af3e257bcdbac5f0ca10b2c6d0b690656ef90fce6ff7bdd286b2e61c932abcd9b0c3a9a58b5069594f149163e6b77975eb35dfa8e1bc5ff75dc947b357c0458a3f39d87c1eaef1939e6f31b39d0db7a1cb0c659387c3d212b513199b134538cf1da30c38ab0d64345f2bea09d5ee875fa9dfc66cb7a3414f0b0591e26a579a4d13b1252834d545ebf399df0e98bc0a389708adc2ec0527e6bef681054db848e73051645f8d3a328feee72ca117539094df13617ee079077fa3b65cec707f6d29a6e7043608ef9c623af5e208813e2b9511e476ad9e976adf6722779b349f634feaac539b5ec0096396c848caaa782232da2591d86de1aa1350dadaf34bdcce30a34b0a297de532d1a554672ca1e7a403f9e9befeea1bccf2bfdc37aa005ad2ac7b91b008d6d1942a4713d90a6d0f0d372c0559f261260d6a217dfbe7d5e61febb4890f126243db7b449d363b43fa520e2c09d9b0e276e8d3aca5f63248352c46f0d29e591a63c78c6fdb0cef791af940f425a5e834642090a2f8487f5811a0a8ea0ae23ed0bd4f050794d086868c173c0e2c14bb3077e6ed8f3e7942d6ac6537d0fb8f752ca1675164aee5baf4c018f9de051d8ef975d6418ff34f7fb6956889b6710cfcba63993a27116813402f53cf01eb91e980e3f6d724fdc9269a10cb747456ca74317846890f21abfb3c76fb1be0974e062f8ccbe1ed43f49d866cfb77028851d4466d14289d6cf8de3214eff1feb5d86f349b9399e2f93f967791bbcf46d58c028548a88e70dc164017653e0edb2a54df8e772981aad3db89c400c1a64646e36c9277878c155597775228318d21349861dacab9782c7be92bf39960014c5175977ba867a2f46f7cd6e8e89a8b3000a10e50c8465e3f45e7901a25e4ba14adcb3148adcd6fa5446c3f26c1879bdeb9a3d3fb20b4acde5f582846cc064665e698335a321b755cc0e206508e5e3034469f07390eb41c647e39f8f02d8f369cda4dc88c6daa357d6a0d255e3df512698cedc4900bb2944fb8f3c27ada7c67803713c6cec6cfea7103fc51d29459628d1219b689596f058f9036e9b3856e2b6d44f6db40521caac909e51bf11701da8a73f7324d4decc7eefa49694daf4e96d8f2fbe15ed10dce9fc501c0d4a336dda3cd831a99e0281fa0f8674adf7aa518ab2ec5b3af97dab049f3ae7601f6439bdbd82f414e3c9ad856f058d3441068e4d83b6e16470d9c5edc93a89b13a79d69eb0b506fb338ab178f2c097d21bb85161cf01977dfe4e28d62184054af175d10bf6e903c575607eeeda13c421536bd4c14ddcc0617d6abf93a049aac12a8da32504f977aaa3305c81b42f33a3b7cd54f02c29fa97b008b13f7716da303f97e735c42c2722cacfe5d2db5d95546fee6df1d5bcbbe71df10ba39103f8a5e82168a83a4e2444ea5a45f28ea46c30e47dc2a6e0c873657e0bad3a4654b2bb9cc7f3c308ad3e05116a39cae18899bb169a0b85b9770b1a5d68803e9470d9988917e40827aec7cd545b822bc58fb9be1a027ab247e31b492e07927414ce3a3c1da9695bff934e5306b79b7f44e9134d30d6d56142dac75be626528355fce8af83412579aa09aa2b1eaa78f580c3a103ccf66e43f670dd5b86bc72be3956c20d25fca503071cfa7fef9669d614da2145560cda36792db22a3ded21d3485188e6a56b3de80bd4fa6c0c15ed87523309e3582aa2693d5e7132311e60a278819ec12d5f8054fb3c0e061b15eca59ef0177d8f8a3931127740b1fea1ca3a189f4f026ce8ab598c12fc6ef368bef198138864664d88c611bd83c766a1af1100ae097515c780060fd13c0450c0d1f41ee6e4b5939030c068e43504dfb4c20f6bb3dd7c9a67c0a45396c00cd586ac7ccdd19886405090e779631ab43a5302926a8bade303b02a4cd3e24cb1df1e5f8c78836a729200603eaa6d475474d1632c1d95a924be4d7f7ca1b6fe9c39b3a44128eb91c2a46daeb5a8681e973bfa9375459dd0ec363ad0aa1c281a7c5d07b68145ae04bab8778658ef6257f3fc9b9a0811fb3a41aa90c997b86e4296f3ea7390d8d686caed33b8c19eed386a46d202b6c1dbe4435d2ec9521e4359a5bce39752621053b97a7ec1505692b90d5544ec0d2aa33b09f36095301b153cb5127c90a44ddcc0a26d41aaf9364d7479d9b2fb5e3a43d5b3f209728cc0896727f8c22364413452c04269b8ac300969ec0c01ff480bf817234d7bc5f4ec8f0600d4c5869e6d00074c6a085996600f7edefde0293d7fc57680a8a8f9ca369ea8050e7f459036d7bb9160c6560b144747cabd8c59a6e02a3e073985c368ebe97259bead9c44b4b751bfbfc9d239f4add05c04baf139b201841bda8976d5636f3573f2be265904ff5bebeeb1ec178e38714883f07bcb5080eb216321d286eb3db65daa981bdff224496b187ff10b727fca29bd466ec88dc1850a0b12ac63ca48195614bec8837962deb139cc71c0c2fc9edf612ea1d1a9251e79b61f81c96c5011a9a4be1b00e74ce99215cd960f5ece407aa33350d8f5d6c3660eab29b6cd30b9818fc6394e9244262dde9473afea31bc984658649ce5dff58020c2beb3e93f108502f9a79d392276a6ae87acd76c2d4105a19eff9f3dbd0374351662e5a85c7e7146bcd2c250082adcce306e0b87ba660ea6be91463f404cd159e1cd65dc514b988b8e81778dc5e0d2976a462b4c21ee510e81bd07f89233ec267f6d26cfb4b9a5e2b036bf0a4a88c46b6a71f0397e236fc6f55091e5b2e35f9b19fdc0f9dbea5167e37cf34ebaf27e21c3607df333922b2f0ec538749b4907b898fc93c1711b03dd628797b41e842a78bac755cce9df5551a8340e204a4f15eb0a778ee8dc78fce617afe77faddfd6f13d78712bc4430e453ec72cfc228e9322df654f7ea165336517c429ae7ca1b099c66cc7a4069b0054917cfa297687845ba7e691f344d6797bddabc7ad39996ffee1121546a34d65c9ef06d240752c690743b8c8eda9e3538231424c7cfd6071b5df0f99321dd65724421b0c0526bb1de641bc2e94efe15ed1ca23d27a92008e3b128efe6e453e589a8ad78d70a4e82e4d5d5f33bb5321c217951f2b0800de9ef48015ce364d93b7860cedb68581cb306c6434a78ee28332ef0b858768a1444425f224110741a6a7dec0895d1e8dc12c04e52b4b66658d51d9cb537aefc65a08d18bd1f04092cd20bdce9b3a9838395eb3ee902bc5015cd2137702390e7c353dc6d72105c65925fbec61e2ff676bce43f8c4c364afe221eea6601db950468da61214ead7cf48cb227ad3e052eb3486adc346293710bd5dafbf1c15f55d0827c151cd68a98d922338a71dae54eccbb34f8f80aa7f65584df124e4efee1f2a0741369e5317962d238687d30a38233f646e1cdf96ddc9ec9f651d5d90ad512c5399b159f1a760518828b7356608b270122151f9c5773d7eca4051412811b0e64b96b6fa34cb61fc58c26116345ce90b7513b55765be2ab4beda7358cf3ebeb05d9a61db70bc61f4f12af18052c5c7b5729d25f257006352d931365f371622ff6058964b11786c54b79bd296d24c0c23b281883fb2a1a5fa37b0d0f48ea68521fda5c824decaa9e87123c76308e7ebf1dbd156c3971be0b1aa8cde695531ba5ae9f0065841b798410d51fd6c9892549a4e463f0fa7ac48eb4ca885026a94716f5eff678a9cf620ef12ae58f32a3540ac1d12cbc85b5086058e0a5057052e01cca2a48c07f2d643a8669230eb11ec10adbd2a219ceed2b8fc60899e4cfdb8b5c4f0fe3589a63ae364edf3f69958ba23d8b1af4198eae4ec37ca040563fc13424bdf1102640e0b1b8ae4942f58146987dc4f53da6fc221754450dbf4a463b05a497c2bf3c5f098dc000be21d8e65d46479cd44db1d0a04ab4353c2f41453cc57c844adafb3f0c646a1aa74bc0eeda8bb0a2eadb5f67ecccb8d17ce30f1c2da4cebc2a7019e0de8ee38b1bdbcbeaa13275052690afccc6dad2d1b612e4dea71882f3601c37ad59f5d8658894d68c673bf7b86eed532a4a81c2592e61c50e68858aea21fd210ffe83f160b0a77213c03cdabcd12edf8b561f77dc225265a2c39b276eae3eaeccd22aaab017b6c33576d99d00f9b68506ba1b965970df24ea562339e54d03e0b73bd1a831fdb5c7e9ee8ed3c71b3455fc0b6f84114ac0f0b8fb6c24b99027ca941787710707222b4b7e9dff59a6e92ade47464687c08791f4633938e1e86f12e86594f99cad7aeffdc86f0beb8990a89a2ba857b662940ae3cb601b8137e9dcdc56a56336c0bf85a1d053c6ae995a7752b2e4510e2fcb5e4209d8e06a1e4a8eac1dfc9245078e4654dabe6c2fe77fe675c379cad1325158bfc68c385ebb3457ab92e629e570de28112b226fbcd5cf31b7b38f237b88fe8857fe8721fd41d39e6aa11fdd3c1657def9df3ac0b302a5f84b2a4e276c6dcfe05c7c125cb509637ccc35f4a69a08a892e41172a8e4741a78208aed45538e0e4c16412c783c116f4aa0703e3c6b794798be0fafc81e493dfe6b8bca9662c", 0x1000, 0x8000, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @local, 0x10000}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r7 = dup2(r6, r6)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:24 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:24 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4dee7f4ec66200361e6a4da51315dfbfb0d8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c297806196d73975e70c08c83ce5c735929018fedd113e47ad7b8e762d40a7b86408a263d358c90d06a571fe743c271553af7e25"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)

03:21:24 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  901.119432] uinput: write device info first
[  901.158156] uinput: write device info first
[  901.222666] binder: 32300:32313 got new transaction with bad transaction stack, transaction 2355 has target 32300:32305
[  901.244886] binder: 32300:32313 transaction failed 29201/-71, size 0-0 line 3041
[  901.253857] binder: 32309:32316 got new transaction with bad transaction stack, transaction 2356 has target 32309:32310
[  901.283144] binder: 32309:32316 transaction failed 29201/-71, size 0-0 line 3041
03:21:25 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:25 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  901.920932] binder: release 32300:32313 transaction 2355 out, still active
[  901.928726] binder: BINDER_SET_CONTEXT_MGR already set
[  901.942172] binder: 32300:32321 ioctl 40046207 0 returned -16
[  901.949022] binder: undelivered TRANSACTION_COMPLETE
03:21:25 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  901.985613] binder: undelivered TRANSACTION_ERROR: 29201
[  902.003636] binder: release 32309:32316 transaction 2356 out, still active
03:21:25 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xffeb)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000300))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
syz_open_dev$binderN(&(0x7f00000003c0)='/dev/binder#\x00', 0x0, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b6300000b6300000b63000029f413b32aa4bf9fbd1065d86b796d17a4ed67d96511265bf4a4c762fe149124e32b3b5c47be6e5c8107326bc6d1174c5a69984a488fd8ad46587e867ab6bad91b6305dea59148438f919f6169804bbfaba961bd45c5c1ed239e7bf408f83d17e82a70d37448abb28db61a47cc0eef8249"], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x3f, 0x0, &(0x7f0000000900)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, &(0x7f0000000000)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000860f173ff7edeb1bb4a7ad56524a1b8f656d184d06f02d6dccf425e4820c656142bef509824675969c7280bba49820a66988ad756d14a97999ab1696ef5b3bcbb09d2e"], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x20)
ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f0000000140))
r6 = dup2(r4, r4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r7, &(0x7f0000000080), 0x1c)
r8 = dup2(r7, r7)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x403c5404, &(0x7f0000000400)={{0xfffffffffffffffd, 0x3, 0x8001, 0x1, 0xfd3e}, 0x5, 0x4})
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000340)=@srh={0xc, 0xe, 0x4, 0x7, 0xff, 0x44, 0x100, [@mcast1, @mcast2, @empty, @remote, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0xa}]}, 0x78)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  902.038362] uinput: write device info first
[  902.039917] binder_alloc: 32300: binder_alloc_buf, no vma
[  902.039955] binder: 32300:32325 transaction failed 29189/-3, size 0-0 line 3137
[  902.049321] binder: undelivered TRANSACTION_COMPLETE
[  902.049336] binder: undelivered TRANSACTION_ERROR: 29201
[  902.049398] binder: undelivered TRANSACTION_ERROR: 29189
[  902.049434] binder: release 32309:32310 transaction 2356 in, still active
[  902.049438] binder: send failed reply for transaction 2356, target dead
03:21:25 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  902.064007] binder: release 32300:32305 transaction 2355 in, still active
[  902.064012] binder: send failed reply for transaction 2355, target dead
[  902.096282] binder: 32326:32333 transaction failed 29189/-22, size 0-0 line 3014
[  902.102665] binder: 32334:32335 unknown command 808464432
[  902.102673] binder: 32334:32335 ioctl c0306201 20000040 returned -22
[  902.102968] binder_alloc: 32334: binder_alloc_buf size 72058556110602248 failed, no address space
03:21:25 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800)
sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe)

[  902.102975] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  902.103011] binder: 32334:32335 transaction failed 29201/-28, size 0-0 line 3137
[  902.155803] binder: 32334:32338 transaction failed 29201/-22, size -6362429673443999977-7882864070155720365 line 3137
[  902.159033] uinput: write device info first
03:21:26 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  902.829629] binder: release 32326:32328 transaction 2364 out, still active
[  902.839785] binder: undelivered TRANSACTION_COMPLETE
[  902.850335] binder: undelivered TRANSACTION_ERROR: 29189
[  902.862385] binder: BINDER_SET_CONTEXT_MGR already set
[  902.868406] binder: 32355:32356 ioctl 40046207 0 returned -16
03:21:26 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  902.872605] binder: send failed reply for transaction 2364, target dead
[  902.902366] binder: undelivered TRANSACTION_ERROR: 29201
[  902.903005] binder: BINDER_SET_CONTEXT_MGR already set
[  902.903014] binder: 32334:32357 ioctl 40046207 0 returned -16
[  902.904160] binder: 32334:32357 unknown command 808464432
[  902.904167] binder: 32334:32357 ioctl c0306201 20000040 returned -22
[  902.904375] binder_alloc: 32334: binder_alloc_buf, no vma
[  902.904412] binder: 32334:32357 transaction failed 29189/-3, size 0-0 line 3137
[  902.906508] uinput: write device info first
03:21:26 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r1, r1)
write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000000)='/dev/binder#\x00')
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:26 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  902.951475] binder: undelivered TRANSACTION_ERROR: 29201
[  902.958994] binder: undelivered TRANSACTION_ERROR: 29189
03:21:26 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  903.044710] uinput: write device info first
[  903.049303] binder: 32355:32368 transaction failed 29189/-22, size 0-0 line 3014
[  903.130655] binder: 32355:32376 transaction failed 29189/-22, size 0-0 line 3014
[  903.145774] binder: 32366:32373 got new transaction with bad transaction stack, transaction 2369 has target 32366:32370
03:21:26 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800)

[  903.183186] binder: 32366:32373 transaction failed 29201/-71, size 0-0 line 3041
03:21:26 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:27 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:27 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
dup2(r4, r4)

03:21:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  903.662275] binder: undelivered TRANSACTION_ERROR: 29189
[  903.668856] binder: undelivered TRANSACTION_ERROR: 29189
[  903.767584] uinput: write device info first
03:21:27 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa5cc554)

03:21:27 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f00000000c0)=0x3, 0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
fadvise64(r1, 0x3, 0x0, 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000100"/31], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

03:21:27 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  903.845668] binder: release 32366:32373 transaction 2369 out, still active
[  903.846719] binder: 32397:32401 got new transaction with bad transaction stack, transaction 2373 has target 32397:32398
[  903.846731] binder: 32397:32401 transaction failed 29201/-71, size 0-0 line 3041
[  903.887412] binder: BINDER_SET_CONTEXT_MGR already set
[  903.898552] binder: 32406:32407 ioctl 40046207 0 returned -16
[  903.908300] binder: undelivered TRANSACTION_COMPLETE
[  903.914781] binder: undelivered TRANSACTION_ERROR: 29201
[  903.921155] binder: release 32366:32370 transaction 2369 in, still active
[  903.929264] binder: send failed reply for transaction 2369, target dead
[  903.969451] binder: 32406:32412 unknown command 0
[  903.971169] uinput: write device info first
[  903.979562] binder: 32406:32412 ioctl c0306201 20000600 returned -22
03:21:27 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa5cc554)

[  904.036422] binder: 32406:32416 transaction failed 29189/-22, size 0-0 line 3014
03:21:27 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4dee7f4ec66200361e6a4da51315dfbfb0d8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c297806196d73975e70c08c83ce5c735929018fedd113e47ad7b8e762d40a7b86408a263d358c90d06a571fe743c271553af7e25"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)

03:21:27 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
lseek(r2, 0x0, 0x2)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xa5cc554)

03:21:28 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)

03:21:28 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  904.542309] binder: release 32397:32401 transaction 2373 out, still active
03:21:28 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  904.587723] binder: undelivered TRANSACTION_COMPLETE
[  904.629477] binder: undelivered TRANSACTION_ERROR: 29201
[  904.632328] binder: BINDER_SET_CONTEXT_MGR already set
[  904.632336] binder: 32438:32440 ioctl 40046207 0 returned -16
[  904.633385] uinput: write device info first
[  904.664681] binder: release 32397:32398 transaction 2373 in, still active
[  904.672571] binder: send failed reply for transaction 2373, target dead
[  904.684222] binder: 32438:32444 transaction failed 29189/-22, size 0-0 line 3014
[  904.685674] binder: undelivered TRANSACTION_ERROR: 29189
[  904.707887] binder: 32406:32407 unknown command 0
[  904.713925] binder: 32406:32407 ioctl c0306201 20000600 returned -22
03:21:28 executing program 4:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
fcntl$setpipe(r0, 0x407, 0x9f)
r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52c050000008d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="748dcd04"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sync_file_range(r3, 0x3, 0xffffff39, 0x1)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r5 = dup2(r4, r4)
write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  904.755684] binder: release 32406:32407 transaction 2378 out, still active
[  904.755955] binder: 32438:32447 transaction failed 29189/-22, size 0-0 line 3014
[  904.787085] binder: undelivered TRANSACTION_COMPLETE
03:21:28 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f00000001c0), 0xfffffef3)
read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r6, 0x0, 0xa5cc554)

[  904.800428] binder: send failed reply for transaction 2378, target dead
[  904.874683] uinput: write device info first
03:21:28 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  904.895507] binder: 32450:32455 unknown command 80579956
[  904.902523] binder: 32450:32455 ioctl c0306201 20000600 returned -22
03:21:28 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4dee7f4ec66200361e6a4da51315dfbfb0d8c8d4ecd65a1a1b3c8ccb90257ac0e96af105eaafdad13e5f579d061f763c7cbe053921ad68143bd9af900000000dc7bd9863eb3e1a9c297806196d73975e70c08c83ce5c735929018fedd113e47ad7b8e762d40a7b86408a263d358c90d06a571fe743c271553af7e25"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)
lstat(&(0x7f0000000080)='./bus\x00', 0x0)

03:21:28 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

03:21:29 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r4, 0x0, 0xa5cc554)

03:21:29 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)

[  905.426416] binder: undelivered TRANSACTION_ERROR: 29189
[  905.456206] binder: undelivered TRANSACTION_ERROR: 29189
03:21:29 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r3, 0x0, 0xa5cc554)

[  905.588656] binder: 32480:32482 got new transaction with bad transaction stack, transaction 2383 has target 32480:32481
[  905.601525] binder: 32480:32482 transaction failed 29201/-71, size 0-0 line 3041
[  905.627864] binder: release 32450:32460 transaction 2381 out, still active
03:21:29 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  905.635144] binder: BINDER_SET_CONTEXT_MGR already set
[  905.638475] binder: undelivered TRANSACTION_COMPLETE
[  905.651035] uinput: write device info first
[  905.651635] binder: 32450:32460 ioctl 40046207 0 returned -16
[  905.661377] binder: release 32450:32451 transaction 2381 in, still active
[  905.672902] binder: send failed reply for transaction 2381, target dead
03:21:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x1}, @register_looper, @register_looper], 0x12f, 0x0, &(0x7f0000000700)="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"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x22100, 0x0)
ioctl$FICLONE(r4, 0x40049409, r5)
r6 = dup2(r3, r3)
write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  905.715927] binder: 32450:32485 unknown command 80579956
[  905.726430] binder: 32450:32485 ioctl c0306201 20000600 returned -22
[  905.729556] uinput: write device info first
[  905.738572] binder: 32450:32485 transaction failed 29189/-22, size 0-0 line 3014
[  905.748306] binder: undelivered TRANSACTION_ERROR: 29189
[  905.838715] binder_alloc: 32493: binder_alloc_buf size -26090282341205856 failed, no address space
[  905.865669] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  905.878565] binder: 32493:32496 transaction failed 29201/-28, size 0-0 line 3137
03:21:29 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)
ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000340)=""/151)

03:21:29 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r4, 0x0, 0xa5cc554)

03:21:29 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)

[  906.284148] binder: release 32480:32482 transaction 2383 out, still active
[  906.304223] binder: undelivered TRANSACTION_COMPLETE
[  906.309822] binder: undelivered TRANSACTION_ERROR: 29201
[  906.321561] binder: BINDER_SET_CONTEXT_MGR already set
[  906.328792] binder: 32509:32510 ioctl 40046207 0 returned -16
[  906.331814] binder: release 32480:32481 transaction 2383 in, still active
[  906.331819] binder: send failed reply for transaction 2383, target dead
[  906.402074] binder: 32509:32511 transaction failed 29189/-22, size 0-0 line 3014
03:21:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  906.461712] binder: 32509:32512 transaction failed 29189/-22, size 0-0 line 3014
[  906.505335] uinput: write device info first
03:21:30 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  906.579199] uinput: write device info first
[  906.585305] binder: BINDER_SET_CONTEXT_MGR already set
[  906.591499] binder: 32493:32518 ioctl 40046207 0 returned -16
[  906.591834] binder: undelivered TRANSACTION_ERROR: 29201
03:21:30 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
r3 = dup2(r2, r2)
write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0xfffffffffffffefd)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r4 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x42000, 0x0)
ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f00000000c0)=0x7f)
r7 = dup2(r5, r5)
write$UHID_GET_REPORT_REPLY(r7, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)
bind$inet6(r5, &(0x7f0000000340)={0xa, 0x4e21, 0xca, @loopback, 0x7bf}, 0x1c)

[  906.651103] binder: 32493:32520 transaction failed 29189/-22, size 0-0 line 3014
[  906.661414] binder: undelivered TRANSACTION_ERROR: 29189
03:21:30 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198)
openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00')
preadv(r6, &(0x7f00000017c0), 0x333, 0x1000000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x10000006f)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
pipe(&(0x7f0000000280))
ppoll(&(0x7f0000000700)=[{}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x4, 0x0, 0x0, 0x0)
read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  906.823742] binder: 32523:32525 got new transaction with bad transaction stack, transaction 2392 has target 32523:32524
[  906.856155] binder: 32523:32525 transaction failed 29201/-71, size 0-0 line 3041
03:21:30 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r4, 0x0, 0xa5cc554)

03:21:30 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000440)=[@register_looper, @register_looper, @register_looper], 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0)
write$P9_RREADDIR(r2, &(0x7f0000000340)={0xc5, 0x29, 0x2, {0x4, [{{0x40, 0x3, 0x2}, 0xd7e2, 0x6, 0x7, './file0'}, {{0xa, 0x3, 0x4}, 0x100000001, 0x40, 0x7, './file0'}, {{0x1, 0x0, 0x7}, 0x401, 0x29, 0x7, './file0'}, {{0x6d, 0x1, 0x7}, 0x1ac7, 0x74, 0x7, './file0'}, {{0xb0, 0x3, 0x2}, 0x3f, 0x5, 0x7, './file0'}, {{0x10, 0x1, 0x6}, 0x8, 0x87, 0x7, './file0'}]}}, 0xc5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/34], 0x0, 0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)

[  907.129797] binder: undelivered TRANSACTION_ERROR: 29189
[  907.159353] binder: undelivered TRANSACTION_ERROR: 29189
03:21:30 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
r2 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000))
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xa5cc554)

[  907.291123] binder: 32535:32539 got new transaction with bad transaction stack, transaction 2395 has target 32535:32537
[  907.303990] binder: 32535:32539 transaction failed 29201/-71, size 0-0 line 3041
[  907.331650] uinput: write device info first
03:21:31 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(0xffffffffffffffff)
r1 = syz_open_dev$mice(0x0, 0x0, 0x202000)
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x6100)
openat(0xffffffffffffffff, 0x0, 0x400000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'bcsh0\x00', {0x2, 0x4e20, @remote}})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000300)=0x3)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
read(r3, &(0x7f0000000200)=""/250, 0x50c7e5e2)
truncate(&(0x7f00000000c0)='./bus\x00', 0x800)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
lseek(r2, 0x0, 0x2)
sendfile(r2, r5, 0x0, 0xa5cc554)

[  907.431209] uinput: write device info first
03:21:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000), 0xdb, 0x0, &(0x7f00000004c0)="4b0f26d29f78f6c4064fa3ffa5530973e047bbc46d22abe0650bb5ec161c01f1124e1dab83296435a66ec06cbfd1e1f3a825a03fc394c42fddb4cd37030ff810f61aa13e8aeaaccb99c51471768add7fe778a8b5f2cc49e215aa971719875f8cf1280dc9bfc3e0a89d2a06febd97ee00a81a8b272d99c75cfbb896ee417b5b500e3b67fa47172ba31056b2fe6ea25718a1235a3f434b0ba5301fafebcefd1fdff3c5a0a58b541009ab7606c75a1ff82d92933418b927e965dae14e5ea5f9f113600322fb507c84970ee7c84e161c2f7c724e093b3ee5ffe7758a3a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000042cc045cb86a6420307719084f3d27164e872ad9da57ec7f94b6c098b9e0525c42cb97f958055e925b8d971d7702c7d04549143bfe9df170ad93a81bc2cc1f8630b9243b66cff81af2d1f052fbd161c7802efe601e3d6588dd10edec868477b371dec2c959852bf54f4c94755d8007d536003c61096da7e02e2356111dbde5fc6639ab42527b708d16a1ab46692882b5821d028c7d9485dd30ec8182c8705108501f40035fbeac955a112071287f3244ca49c86dbe7871b52cb1861a6d8d3cfd01ad52ca07027be019e59e39c5c4ff8394709cd663ff5e76691b35"], 0x1, 0x0, &(0x7f0000000140)='D'})
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x22, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063404000000000000000000000010000e819fc43aaa4e63bb8284f5a32cbdf40d724ffb0903349deec841ce7000a74603d24a4117b2f06010d8b6544"], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x200000000000013, &(0x7f0000000180)=0x400100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
r4 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000280)='./file0\x00')
mkdirat(r4, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0\x00')
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x1)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r6 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00')
mkdirat(r6, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r7 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00')
mkdirat(r7, &(0x7f0000000140)='./file1\x00', 0x0)
renameat2(r7, &(0x7f00000001c0)='./file0\x00', r7, &(0x7f0000000100)='./file1/file0\x00', 0x2)
r8 = dup2(r6, r1)
write$UHID_GET_REPORT_REPLY(r8, &(0x7f0000000100)={0xa, 0x7, 0xd9, 0x3}, 0xa)

[  907.516942] binder: release 32523:32525 transaction 2392 out, still active
[  907.517150] binder: BINDER_SET_CONTEXT_MGR already set
[  907.517159] binder: 32523:32526 ioctl 40046207 0 returned -16
[  907.539047] binder: undelivered TRANSACTION_COMPLETE
[  907.547890] binder: undelivered TRANSACTION_ERROR: 29201
[  907.564186] binder: release 32523:32524 transaction 2392 in, still active
[  907.583756] binder: send failed reply for transaction 2392, target dead
03:21:31 executing program 3:
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51)
ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
write$nbd(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1)
fchdir(r2)
r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0)
fcntl$setstatus(r3, 0x4, 0x6100)
truncate(&(0x7f00000000c0)='./bus\x00', 0x8000)
r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
lseek(r3, 0x0, 0x2)
sendfile(r3, r4, 0x0, 0xfffffffffffffffc)
r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
send